Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
File: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft (raw, json)
Hash identifier: qCdFXMhhGkKCKwxl5K2UcYd5j/Oq/5HPltz8fEnkfTI=
Subject key identifier: 71:A0:54:59:B9:32:B6:92:0E:FA:FF:B7:35:3D:0B:4A:E4:FB:63:1D
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 0199FC21AFD913BC51099481196B82F439FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
Manifest number: 1203
Signing time: Sun 19 Oct 2025 11:01:30 +0000
Manifest this update: Sun 19 Oct 2025 11:01:30 +0000
Manifest next update: Mon 20 Oct 2025 11:01:30 +0000
Files and hashes: 1: Z2JXPb5aczBq6WmK_sd6hX6UoF0.roa (hash: k+SlRJ8Eg3Sd/kSZfZH8+gupJSBpD7AMqyYcN2gXnJ0=)
2: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl (hash: kYenyRDYkqrsetOIr5mztCf6fvVl4sSHdpItQ6c4ZnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:af:d9:13:bc:51:09:94:81:19:6b:82:f4:39:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: Oct 19 11:01:30 2025 GMT
Not After : Oct 20 11:01:30 2025 GMT
Subject: CN=71a05459b932b6920efaffb7353d0b4ae4fb631d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:00:9b:c5:56:ef:01:01:39:66:21:5d:3b:be:
68:06:a2:33:7b:ba:a7:bd:15:92:7a:0e:3e:4c:19:
a2:58:8c:99:ff:ed:06:73:1a:b0:7c:7e:08:f9:6f:
3d:3b:12:86:2f:a3:4c:6e:ea:8d:09:ee:0d:7c:0f:
e4:83:d3:9f:1a:0d:72:a5:f9:98:54:ee:73:f7:65:
8f:73:55:22:7f:e2:a1:79:94:f4:87:4a:f7:90:2c:
c1:7a:83:99:30:17:df:eb:04:6e:71:f7:8a:5c:4e:
de:4d:94:6e:99:b4:01:10:e9:f0:0f:50:6a:c9:fd:
4a:7b:f6:d6:cb:fe:bd:a6:ce:b4:35:9c:8c:20:96:
9b:81:37:79:5b:54:9c:17:ff:e6:00:f2:a9:69:8e:
3a:5d:f0:d7:fb:6e:49:78:aa:df:8b:65:f1:fc:45:
32:25:82:66:b8:b4:2e:03:d4:32:c9:00:f2:2f:91:
d7:c2:e3:96:8c:42:46:94:d3:5c:af:e3:6d:08:7b:
60:cc:1d:2e:1a:e9:f3:b1:47:d6:3d:07:ed:a2:06:
76:27:ce:93:8d:aa:3d:c2:c8:53:36:c4:5c:3a:10:
3f:88:0f:af:d4:fb:18:2b:71:3f:2f:12:c5:ad:d7:
0b:c7:a2:47:40:85:15:f2:60:ed:0b:15:17:3f:3d:
3a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A0:54:59:B9:32:B6:92:0E:FA:FF:B7:35:3D:0B:4A:E4:FB:63:1D
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:48:5a:c4:e6:ae:b6:51:c8:bf:44:44:cf:1d:9a:27:26:32:
62:56:c0:72:2f:90:54:82:02:7f:51:85:9d:85:b7:03:6e:23:
f2:e6:0a:c6:12:5d:d0:cf:b4:34:10:28:26:32:40:4f:6c:72:
da:24:69:2c:98:6b:e0:4d:79:33:d1:61:bc:06:6e:d7:a8:84:
bf:58:6d:87:09:58:4b:02:67:68:a3:df:25:84:e5:44:17:44:
44:80:59:1d:f7:88:56:78:34:a9:6c:a7:20:d7:95:f2:42:12:
28:b8:c3:9a:e1:20:91:31:1c:1b:03:90:ff:31:85:f2:a2:21:
58:98:4b:02:72:ec:b6:75:2e:3d:86:2e:bb:81:81:93:d3:8f:
d0:29:e4:6f:19:77:c5:18:ca:a2:04:dc:b4:c7:c8:61:94:a2:
b6:12:15:6a:70:1c:ad:85:a5:62:8e:3e:82:d2:60:fb:15:18:
2a:74:0e:2f:a9:55:3f:72:09:9c:8f:0c:27:b3:9b:6c:9b:3b:
98:af:d4:a5:e3:fe:bd:bc:e6:5d:ea:cd:d3:0a:5a:b5:17:9a:
da:7b:c9:d1:de:13:15:bc:2b:8a:d3:5e:b0:89:e5:36:4d:b4:
81:f3:2b:2c:33:7d:e4:18:aa:ba:37:0a:5e:98:f7:46:86:37:
03:26:87:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8Ia/ZE7xRCZSBGWuC9Dn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzE3M2EzODBjZGY5M2M3YjI4NjY4ZmFiYWU1NjlhYTZm
N2EzNWEwHhcNMjUxMDE5MTEwMTMwWhcNMjUxMDIwMTEwMTMwWjAzMTEwLwYDVQQD
Eyg3MWEwNTQ1OWI5MzJiNjkyMGVmYWZmYjczNTNkMGI0YWU0ZmI2MzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gCbxVbvAQE5ZiFdO75oBqIze7qn
vRWSeg4+TBmiWIyZ/+0GcxqwfH4I+W89OxKGL6NMbuqNCe4NfA/kg9OfGg1ypfmY
VO5z92WPc1Uif+KheZT0h0r3kCzBeoOZMBff6wRucfeKXE7eTZRumbQBEOnwD1Bq
yf1Ke/bWy/69ps60NZyMIJabgTd5W1ScF//mAPKpaY46XfDX+25JeKrfi2Xx/EUy
JYJmuLQuA9QyyQDyL5HXwuOWjEJGlNNcr+NtCHtgzB0uGunzsUfWPQftogZ2J86T
jao9wshTNsRcOhA/iA+v1PsYK3E/LxLFrdcLx6JHQIUV8mDtCxUXPz06XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGgVFm5MraSDvr/tzU9C0rk+2MdMB8GA1UdIwQY
MBaAFIJxc6OAzfk8eyhmj6uuVpqm96NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25Gem80RE4tVHg3S0dhUHE2NVdtcWIzbzFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZWYxMTQtNTg2OC00N2I4LTk3ODgt
N2I2NDA4OWJiMTQxLzEvZ25Gem80RE4tVHg3S0dhUHE2NVdtcWIzbzFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9jZWYxMTQtNTg2OC00N2I4LTk3ODgtN2I2NDA4OWJiMTQx
LzEvZ25Gem80RE4tVHg3S0dhUHE2NVdtcWIzbzFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0haxOau
tlHIv0REzx2aJyYyYlbAci+QVIICf1GFnYW3A24j8uYKxhJd0M+0NBAoJjJAT2xy
2iRpLJhr4E15M9FhvAZu16iEv1hthwlYSwJnaKPfJYTlRBdERIBZHfeIVng0qWyn
INeV8kISKLjDmuEgkTEcGwOQ/zGF8qIhWJhLAnLstnUuPYYuu4GBk9OP0Cnkbxl3
xRjKogTctMfIYZSithIVanAcrYWlYo4+gtJg+xUYKnQOL6lVP3IJnI8MJ7ObbJs7
mK/UpeP+vbzmXerN0wpatRea2nvJ0d4TFbwritNesInlNk20gfMrLDN95BiqujcK
Xpj3RoY3AyaH0A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:10 2025 by rpki-client