Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft
File: GXCiYyB54Yue9nKBkqOTaqvisiQ.mft (raw, json)
Hash identifier: g5wavkvXJEc0OaQqsf8yUV7mMkP413Jwb+WW/KdOFPM=
Subject key identifier: D4:55:AD:81:13:E7:E2:84:45:C8:46:4D:9D:C0:1B:18:DE:C1:E7:BF
Authority key identifier: 19:70:A2:63:20:79:E1:8B:9E:F6:72:81:92:A3:93:6A:AB:E2:B2:24
Certificate issuer: /CN=1970a2632079e18b9ef6728192a3936aabe2b224
Certificate serial: 0199FB45D5D23C9F0145D6F6724B3032A75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXCiYyB54Yue9nKBkqOTaqvisiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft
Manifest number: 4A
Signing time: Sun 19 Oct 2025 07:01:21 +0000
Manifest this update: Sun 19 Oct 2025 07:01:21 +0000
Manifest next update: Mon 20 Oct 2025 07:01:21 +0000
Files and hashes: 1: GXCiYyB54Yue9nKBkqOTaqvisiQ.crl (hash: 8X6a/TvTk1f4jq5PzS+fABbFu2cvltZfMIzySmR2LiE=)
2: JeJQO9s80gfCiYe1r0cc8EhoCxk.roa (hash: fgQotiiZ/kaXHnFm2dA5yCVTFpxgcGtAQyQ5Cm5SG64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXCiYyB54Yue9nKBkqOTaqvisiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d5:d2:3c:9f:01:45:d6:f6:72:4b:30:32:a7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1970a2632079e18b9ef6728192a3936aabe2b224
Validity
Not Before: Oct 19 07:01:21 2025 GMT
Not After : Oct 20 07:01:21 2025 GMT
Subject: CN=d455ad8113e7e28445c8464d9dc01b18dec1e7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:18:71:74:b6:d8:97:5e:1e:7d:75:db:c3:49:
2a:d1:c1:ef:0f:27:db:cd:96:1d:82:e5:f6:e0:9a:
07:6b:17:49:bb:83:2a:dd:f4:bf:d5:e4:7d:54:de:
c7:23:a1:14:91:21:76:9e:3b:14:a7:c8:d9:8d:ac:
f4:45:0b:c6:7b:02:c6:84:66:0f:a6:9f:7c:40:3a:
f9:57:ff:cb:30:b9:4f:24:20:22:98:50:01:38:e9:
61:bb:c6:60:98:6d:0a:87:b0:7f:31:3d:e9:29:7f:
12:85:d7:0c:86:2c:6a:a5:0c:56:c8:12:1a:59:f1:
23:64:b6:c8:bc:2f:bf:81:b1:54:a3:a2:dc:4a:bb:
35:54:75:a7:e3:2a:6c:6e:50:9b:ca:95:89:d9:d9:
e1:e4:aa:f5:5f:40:48:a1:64:d3:33:3a:8c:62:84:
9a:b6:45:96:d4:bb:3a:9e:17:d0:a5:d5:0a:df:e6:
4a:e5:82:94:ec:20:13:d7:18:20:1d:c4:11:15:af:
22:28:43:3e:a7:7c:86:bf:bd:1d:95:24:3d:f3:1f:
56:1e:3c:5a:fb:31:9c:33:08:d1:5d:90:67:97:04:
0b:92:78:20:c2:aa:b1:5a:43:05:c4:e8:8a:bc:d4:
ce:c2:20:61:14:a7:e7:f5:12:83:b0:1c:cd:f9:80:
f5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:55:AD:81:13:E7:E2:84:45:C8:46:4D:9D:C0:1B:18:DE:C1:E7:BF
X509v3 Authority Key Identifier:
keyid:19:70:A2:63:20:79:E1:8B:9E:F6:72:81:92:A3:93:6A:AB:E2:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXCiYyB54Yue9nKBkqOTaqvisiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/16c82f-9d22-41cb-bbb6-e78eaf1584bf/1/GXCiYyB54Yue9nKBkqOTaqvisiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:59:3d:93:5b:fb:ed:f2:11:0f:a2:45:61:dd:d0:75:95:ad:
76:5b:38:9b:b5:ad:ba:57:95:cf:93:84:7a:d4:b6:63:56:6b:
fa:b8:41:f8:3c:b9:17:07:b7:19:fe:d2:78:07:5f:b0:c6:0c:
83:7f:a4:4c:d9:c1:1d:92:1d:dd:88:02:66:9d:55:c9:18:13:
a0:84:b2:90:38:bf:a7:53:15:27:ad:ee:f6:94:51:54:7d:ce:
a3:33:83:68:f4:fd:a7:13:3f:a9:7b:18:a2:4d:26:60:88:11:
8c:d1:a1:85:1a:0b:23:6a:2b:63:8c:03:aa:a1:41:bb:40:fa:
3d:bb:20:1c:87:e1:d3:fc:50:76:fc:03:da:4b:1e:d6:6e:3f:
13:7a:70:29:93:f5:3e:47:c7:9f:9e:cb:07:68:3a:c6:da:c5:
60:74:91:04:73:f8:eb:02:95:57:2e:f3:c9:d6:8a:a0:29:4b:
5a:95:46:0e:a4:86:de:53:4d:7f:ee:20:eb:cc:0d:b3:a6:2a:
d4:6d:4d:ec:8b:8d:45:75:f7:89:35:e9:20:43:b2:3d:76:fa:
20:0d:03:c8:37:29:33:69:ef:c1:ed:4c:22:c3:b1:eb:f1:4c:
95:ad:25:b0:8b:20:57:fa:08:d5:b2:f5:0e:ba:b3:25:bf:18:
c4:36:1f:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RdXSPJ8BRdb2ckswMqddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NzBhMjYzMjA3OWUxOGI5ZWY2NzI4MTkyYTM5MzZhYWJl
MmIyMjQwHhcNMjUxMDE5MDcwMTIxWhcNMjUxMDIwMDcwMTIxWjAzMTEwLwYDVQQD
EyhkNDU1YWQ4MTEzZTdlMjg0NDVjODQ2NGQ5ZGMwMWIxOGRlYzFlN2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghhxdLbYl14efXXbw0kq0cHvDyfb
zZYdguX24JoHaxdJu4Mq3fS/1eR9VN7HI6EUkSF2njsUp8jZjaz0RQvGewLGhGYP
pp98QDr5V//LMLlPJCAimFABOOlhu8ZgmG0Kh7B/MT3pKX8ShdcMhixqpQxWyBIa
WfEjZLbIvC+/gbFUo6LcSrs1VHWn4ypsblCbypWJ2dnh5Kr1X0BIoWTTMzqMYoSa
tkWW1Ls6nhfQpdUK3+ZK5YKU7CAT1xggHcQRFa8iKEM+p3yGv70dlSQ98x9WHjxa
+zGcMwjRXZBnlwQLknggwqqxWkMFxOiKvNTOwiBhFKfn9RKDsBzN+YD1tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRVrYET5+KERchGTZ3AGxjewee/MB8GA1UdIwQY
MBaAFBlwomMgeeGLnvZygZKjk2qr4rIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1hDaVl5QjU0WXVlOW5LQmtxT1RhcXZpc2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNmM4MmYtOWQyMi00MWNiLWJiYjYt
ZTc4ZWFmMTU4NGJmLzEvR1hDaVl5QjU0WXVlOW5LQmtxT1RhcXZpc2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8xNmM4MmYtOWQyMi00MWNiLWJiYjYtZTc4ZWFmMTU4NGJm
LzEvR1hDaVl5QjU0WXVlOW5LQmtxT1RhcXZpc2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVk9k1v7
7fIRD6JFYd3QdZWtdls4m7WtuleVz5OEetS2Y1Zr+rhB+Dy5Fwe3Gf7SeAdfsMYM
g3+kTNnBHZId3YgCZp1VyRgToISykDi/p1MVJ63u9pRRVH3OozODaPT9pxM/qXsY
ok0mYIgRjNGhhRoLI2orY4wDqqFBu0D6PbsgHIfh0/xQdvwD2kse1m4/E3pwKZP1
PkfHn57LB2g6xtrFYHSRBHP46wKVVy7zydaKoClLWpVGDqSG3lNNf+4g68wNs6Yq
1G1N7IuNRXX3iTXpIEOyPXb6IA0DyDcpM2nvwe1MIsOx6/FMla0lsIsgV/oI1bL1
DrqzJb8YxDYfKA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:05 2025 by rpki-client