Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
File: GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft (raw, json)
Hash identifier: Zo/vX8Anun2q1pditqTDADogAiqoiopcFT/NKFPQF/A=
Subject key identifier: D4:38:F9:AC:B7:6D:E2:65:29:89:35:FF:2A:DB:27:02:80:97:3F:88
Authority key identifier: 18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
Certificate issuer: /CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Certificate serial: 0199FC8F3CAE517B704AFB8A0BC7A1020216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: 2nLsQqPE5llC17hwQkkSOMH6bAs.roa (hash: bh0+wwwfSzTifnsB5Zplv4YF5NGG3Z0ysixgx0plOO8=)
2: GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl (hash: 41YsD8KAUXZdaMqqAVkZ8PzYvVxBcsmqXbsD2GSIZOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3c:ae:51:7b:70:4a:fb:8a:0b:c7:a1:02:02:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=d438f9acb76de265298935ff2adb270280973f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a2:c2:7f:25:ba:39:48:c8:c6:66:d9:50:31:
a6:d3:a9:ae:90:5e:8b:b5:43:c9:ee:9c:ca:ec:ab:
91:96:a2:44:4e:fb:b7:87:b4:10:12:b1:f3:38:66:
51:f4:fb:71:40:8b:04:b0:a9:d1:4f:64:1f:c8:04:
3a:27:4a:47:ef:43:b0:38:21:54:1f:6d:1e:ae:c1:
ff:7d:78:44:d0:5b:04:0e:f3:c0:56:0f:7c:34:4b:
ca:a2:5a:97:7f:8c:de:27:c6:53:f3:e1:86:41:09:
9d:c5:20:f5:ee:d3:72:28:f3:96:5f:66:6d:66:1b:
dc:0c:61:a9:ad:92:7f:b0:5f:98:a4:ac:06:a8:34:
8a:7d:9c:0c:3c:bc:9a:f5:3c:bb:ed:ae:1e:e9:96:
08:3a:62:a5:6b:58:a7:69:f3:c0:d2:6d:1b:95:0c:
90:4a:dd:3a:98:6c:d2:5b:90:c5:5a:10:aa:92:46:
00:ea:1d:76:86:59:fe:d5:77:bd:16:25:22:1e:53:
90:dc:55:46:4a:2a:bd:41:86:68:00:e3:4a:24:2b:
52:5d:e9:fa:dd:4b:80:48:fb:7b:4f:77:f4:bb:2e:
8e:7a:96:28:c4:04:31:f5:b0:19:c9:0d:e8:72:5e:
ee:0f:6d:d0:5d:20:bf:2a:57:98:29:da:0e:2a:cf:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:38:F9:AC:B7:6D:E2:65:29:89:35:FF:2A:DB:27:02:80:97:3F:88
X509v3 Authority Key Identifier:
keyid:18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:bf:24:54:c5:53:ca:41:0b:c0:ed:6f:41:bc:13:4c:0c:55:
57:79:cc:91:b8:39:dd:b7:47:0e:6c:e0:2b:df:4a:37:39:fd:
2e:1a:cd:15:23:2c:1b:c6:3d:03:f7:87:f1:95:cf:47:be:a5:
67:a7:2b:31:6d:07:1c:c9:08:e3:e1:a2:c0:04:7d:4c:f4:8f:
c3:ba:18:fd:e5:97:30:4a:6a:e4:54:81:b9:42:e0:b2:76:ee:
f7:06:c5:f5:33:da:5e:74:41:08:a9:43:c9:b0:be:75:09:e6:
81:47:70:27:02:f0:b3:11:7d:31:7e:51:71:3e:27:09:93:7a:
11:b0:1b:9a:a3:ea:fc:ed:03:48:9b:8e:40:e0:fd:d9:15:ef:
2b:2c:19:41:b4:dc:3d:9a:eb:df:eb:11:38:8b:48:97:90:6d:
9b:b5:e8:5d:35:fa:8a:8d:1a:7c:05:f4:31:35:23:da:4c:ea:
42:6a:d7:81:9e:d3:d8:8a:5c:31:3f:ad:66:99:d9:73:bc:62:
3a:ae:25:09:5d:5d:0f:0b:02:8f:0d:fe:fe:90:f2:2b:46:60:
55:2a:fe:45:0a:0d:ab:3a:f5:64:c5:df:00:07:9c:29:b3:df:
5d:20:be:cc:e9:d0:ac:d5:07:1d:64:e0:35:ad:76:5d:02:c8:
00:17:44:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jzyuUXtwSvuKC8ehAgIWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4M2FlOGY4ODg3YTEzMDliYTU0YmM0ZDI3NjFiNGIzMGVh
MjhlNDkwHhcNMjUxMDE5MTMwMTA5WhcNMjUxMDIwMTMwMTA5WjAzMTEwLwYDVQQD
EyhkNDM4ZjlhY2I3NmRlMjY1Mjk4OTM1ZmYyYWRiMjcwMjgwOTczZjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KLCfyW6OUjIxmbZUDGm06mukF6L
tUPJ7pzK7KuRlqJETvu3h7QQErHzOGZR9PtxQIsEsKnRT2QfyAQ6J0pH70OwOCFU
H20ersH/fXhE0FsEDvPAVg98NEvKolqXf4zeJ8ZT8+GGQQmdxSD17tNyKPOWX2Zt
ZhvcDGGprZJ/sF+YpKwGqDSKfZwMPLya9Ty77a4e6ZYIOmKla1inafPA0m0blQyQ
St06mGzSW5DFWhCqkkYA6h12hln+1Xe9FiUiHlOQ3FVGSiq9QYZoAONKJCtSXen6
3UuASPt7T3f0uy6OepYoxAQx9bAZyQ3ocl7uD23QXSC/KleYKdoOKs+fiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQ4+ay3beJlKYk1/yrbJwKAlz+IMB8GA1UdIwQY
MBaAFBg66PiIehMJulS8TSdhtLMOoo5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0Ryby1JaDZFd202Vkx4TkoyRzBzdzZpamtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lZGQ5ODQtOWIzZS00Nzg2LWIxY2Yt
NjBmNmZhODgxODQ1LzEvR0Ryby1JaDZFd202Vkx4TkoyRzBzdzZpamtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lZGQ5ODQtOWIzZS00Nzg2LWIxY2YtNjBmNmZhODgxODQ1
LzEvR0Ryby1JaDZFd202Vkx4TkoyRzBzdzZpamtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkb8kVMVT
ykELwO1vQbwTTAxVV3nMkbg53bdHDmzgK99KNzn9LhrNFSMsG8Y9A/eH8ZXPR76l
Z6crMW0HHMkI4+GiwAR9TPSPw7oY/eWXMEpq5FSBuULgsnbu9wbF9TPaXnRBCKlD
ybC+dQnmgUdwJwLwsxF9MX5RcT4nCZN6EbAbmqPq/O0DSJuOQOD92RXvKywZQbTc
PZrr3+sROItIl5Btm7XoXTX6io0afAX0MTUj2kzqQmrXgZ7T2IpcMT+tZpnZc7xi
Oq4lCV1dDwsCjw3+/pDyK0ZgVSr+RQoNqzr1ZMXfAAecKbPfXSC+zOnQrNUHHWTg
Na12XQLIABdEyA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:32 2025 by rpki-client