Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
File: gCVbZMlsAQvaN98j2JJo6OR0jdM.mft (raw, json)
Hash identifier: OlT9ClWpBbk0+eOLT325yAbuolH7bOqhqjdP3mEeXa8=
Subject key identifier: D9:ED:3B:F6:48:2C:59:17:DF:F3:35:6F:41:DF:57:91:F0:D8:EE:0E
Authority key identifier: 80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
Certificate issuer: /CN=80255b64c96c010bda37df23d89268e8e4748dd3
Certificate serial: 0199FCC6EB0984AF6E9E6D820D89916B1AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
Manifest number: 08C9
Signing time: Sun 19 Oct 2025 14:01:58 +0000
Manifest this update: Sun 19 Oct 2025 14:01:58 +0000
Manifest next update: Mon 20 Oct 2025 14:01:58 +0000
Files and hashes: 1: gCVbZMlsAQvaN98j2JJo6OR0jdM.crl (hash: fN4mklAsNGgY5Fc9FMW+28UfipzMBQZ5VDHV5eGr4E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:eb:09:84:af:6e:9e:6d:82:0d:89:91:6b:1a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80255b64c96c010bda37df23d89268e8e4748dd3
Validity
Not Before: Oct 19 14:01:58 2025 GMT
Not After : Oct 20 14:01:58 2025 GMT
Subject: CN=d9ed3bf6482c5917dff3356f41df5791f0d8ee0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c2:ef:38:2f:e2:ad:0f:51:ec:c3:f9:e5:73:
59:5c:7e:87:b9:21:7d:be:db:d3:4b:5c:6a:17:d2:
f6:0b:0e:e6:dc:3c:68:5b:8c:6d:b3:7e:f6:fa:c6:
31:6c:89:ad:49:63:b0:46:41:c8:d8:07:19:61:6d:
03:ce:af:af:3a:48:42:b0:e6:03:e2:8d:6c:3c:0a:
30:7f:f7:25:60:e3:00:3e:c3:07:d4:da:5f:6b:e5:
a5:c3:87:ab:3d:ed:17:9e:c6:e9:54:af:7d:3f:8c:
7f:01:e5:0b:01:91:bf:55:65:bc:ac:09:a4:85:a4:
bc:34:31:30:10:1a:96:38:4d:81:f1:00:f0:8a:83:
b0:d9:c9:d1:4e:a1:f1:e1:48:28:c4:82:a1:3a:1e:
12:04:2d:09:3d:9f:3f:92:b3:8c:fb:a7:53:15:aa:
6d:7c:8a:bb:39:a7:93:ac:c4:35:f6:7f:cd:93:29:
d7:b5:4c:5e:e2:d5:46:0d:f9:14:39:45:56:42:54:
66:1f:87:bc:86:90:03:81:8b:be:89:36:a2:cd:95:
ca:39:24:1a:ef:a4:58:68:ca:fd:d9:c9:7d:8f:db:
24:d1:6d:a4:e9:1a:44:e3:06:7f:91:3f:4e:28:d2:
34:f5:0d:18:0f:a7:52:be:7f:19:47:cf:ce:0a:33:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:ED:3B:F6:48:2C:59:17:DF:F3:35:6F:41:DF:57:91:F0:D8:EE:0E
X509v3 Authority Key Identifier:
keyid:80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8b:34:91:e2:e6:bc:fa:f0:5f:64:34:6b:52:4f:fb:97:a3:
28:7f:d5:ed:97:69:2c:f0:19:10:3b:73:bc:fc:8c:b5:d6:66:
9f:1a:fa:4d:70:f3:f3:64:5b:6d:38:6c:66:c5:75:6c:a6:72:
fc:2d:ab:23:86:cc:61:14:23:9a:de:01:2d:6d:7f:5e:5e:54:
02:c5:32:b2:c0:d6:03:b2:74:0a:3d:ec:25:53:f0:ee:2e:51:
01:ea:bf:7c:3e:f2:d4:21:0f:78:2c:e2:2b:12:6b:04:a7:5a:
b2:df:7f:97:2d:ef:ce:7e:e8:e6:6d:f6:26:38:7b:d1:8f:1e:
c1:99:f3:10:e1:94:36:38:21:32:f4:b7:1a:d4:ac:4b:61:06:
e6:7d:24:53:2e:fe:3a:5b:61:2c:e0:b1:63:8c:68:2d:e1:5e:
20:48:60:08:24:bf:8d:8a:24:53:d8:e0:d1:75:0f:da:d3:01:
7d:43:25:fb:17:25:13:8d:de:03:5a:b7:c5:4d:77:eb:15:83:
c7:68:e9:66:c2:f8:d9:f2:43:78:f6:fb:05:59:ff:9a:b9:ee:
de:a8:e9:5e:d6:09:37:4c:35:1b:ed:e6:46:d0:35:aa:1c:07:
87:d7:18:7c:2b:ed:ca:2d:28:c8:37:63:9c:bf:c4:fc:dd:bc:
e7:05:52:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xusJhK9unm2CDYmRaxroMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMjU1YjY0Yzk2YzAxMGJkYTM3ZGYyM2Q4OTI2OGU4ZTQ3
NDhkZDMwHhcNMjUxMDE5MTQwMTU4WhcNMjUxMDIwMTQwMTU4WjAzMTEwLwYDVQQD
EyhkOWVkM2JmNjQ4MmM1OTE3ZGZmMzM1NmY0MWRmNTc5MWYwZDhlZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cLvOC/irQ9R7MP55XNZXH6HuSF9
vtvTS1xqF9L2Cw7m3DxoW4xts372+sYxbImtSWOwRkHI2AcZYW0Dzq+vOkhCsOYD
4o1sPAowf/clYOMAPsMH1Npfa+Wlw4erPe0XnsbpVK99P4x/AeULAZG/VWW8rAmk
haS8NDEwEBqWOE2B8QDwioOw2cnRTqHx4UgoxIKhOh4SBC0JPZ8/krOM+6dTFapt
fIq7OaeTrMQ19n/NkynXtUxe4tVGDfkUOUVWQlRmH4e8hpADgYu+iTaizZXKOSQa
76RYaMr92cl9j9sk0W2k6RpE4wZ/kT9OKNI09Q0YD6dSvn8ZR8/OCjNGBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNntO/ZILFkX3/M1b0HfV5Hw2O4OMB8GA1UdIwQY
MBaAFIAlW2TJbAEL2jffI9iSaOjkdI3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0NWYlpNbHNBUXZhTjk4ajJKSm82T1IwamRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xODc2MWUtMjU2NC00MjBlLWFmZjUt
NjM1ZTY1YjhiOTJlLzEvZ0NWYlpNbHNBUXZhTjk4ajJKSm82T1IwamRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8xODc2MWUtMjU2NC00MjBlLWFmZjUtNjM1ZTY1YjhiOTJl
LzEvZ0NWYlpNbHNBUXZhTjk4ajJKSm82T1IwamRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkos0keLm
vPrwX2Q0a1JP+5ejKH/V7ZdpLPAZEDtzvPyMtdZmnxr6TXDz82RbbThsZsV1bKZy
/C2rI4bMYRQjmt4BLW1/Xl5UAsUyssDWA7J0Cj3sJVPw7i5RAeq/fD7y1CEPeCzi
KxJrBKdast9/ly3vzn7o5m32Jjh70Y8ewZnzEOGUNjghMvS3GtSsS2EG5n0kUy7+
OlthLOCxY4xoLeFeIEhgCCS/jYokU9jg0XUP2tMBfUMl+xclE43eA1q3xU136xWD
x2jpZsL42fJDePb7BVn/mrnu3qjpXtYJN0w1G+3mRtA1qhwHh9cYfCvtyi0oyDdj
nL/E/N285wVSvA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:34 2025 by rpki-client