Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft
File: gwN5KJCtoro4fjmzFLdwNdX7MVs.mft (raw, json)
Hash identifier: foemIQ/KrAwwvQybHKKAgW9aUdmMqb7TiSPT72Vwij0=
Subject key identifier: BA:D2:21:11:DD:B0:9C:E3:07:B8:8A:4D:B6:99:7E:14:53:38:9E:06
Authority key identifier: 83:03:79:28:90:AD:A2:BA:38:7E:39:B3:14:B7:70:35:D5:FB:31:5B
Certificate issuer: /CN=8303792890ada2ba387e39b314b77035d5fb315b
Certificate serial: 0199FBEABF8060AEA52547BA385074A96B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft
Manifest number: 014B
Signing time: Sun 19 Oct 2025 10:01:29 +0000
Manifest this update: Sun 19 Oct 2025 10:01:29 +0000
Manifest next update: Mon 20 Oct 2025 10:01:29 +0000
Files and hashes: 1: 7o9ALcr1bL4UOBX6YJn0uD-9tF0.roa (hash: wGcA/CUa2AHlBIQ9Ur+ssm2xCQswNtocmJ6VYpXekNw=)
2: gwN5KJCtoro4fjmzFLdwNdX7MVs.crl (hash: t26RJqWAzDms41OvjtOYVSmgsyZlxFz8dgma2So5b1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:bf:80:60:ae:a5:25:47:ba:38:50:74:a9:6b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8303792890ada2ba387e39b314b77035d5fb315b
Validity
Not Before: Oct 19 10:01:29 2025 GMT
Not After : Oct 20 10:01:29 2025 GMT
Subject: CN=bad22111ddb09ce307b88a4db6997e1453389e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:46:b9:cb:05:07:92:5e:e4:25:10:16:83:
9e:3d:14:33:c8:af:29:ae:06:f6:c6:4d:72:a7:05:
1f:0f:df:91:dc:8a:47:bf:79:31:89:52:d2:df:ab:
07:0e:1e:6d:92:e7:8c:ee:93:19:8b:24:dd:fa:09:
5c:b2:48:11:55:bf:40:29:f7:25:bf:6a:32:5d:f0:
1d:b1:d7:3a:58:f5:3d:75:85:eb:d1:55:6a:8e:8e:
55:f1:2e:9d:51:93:75:97:51:d9:9b:aa:31:20:2a:
e6:0d:82:fa:26:41:1b:e0:e7:10:a3:cc:87:61:75:
5d:9f:47:cb:0c:05:01:0f:46:f7:f0:bd:d0:51:66:
d8:c4:fa:81:12:fe:1d:d4:88:3b:17:a7:f5:c1:1d:
51:6d:65:f6:04:9d:bf:5a:83:63:ba:15:ef:4d:89:
79:ba:82:4d:a8:2f:a2:01:1e:87:0b:5d:58:d0:74:
12:50:68:ed:6b:ff:db:67:8a:ea:4c:ef:96:d1:d4:
35:cf:8f:e9:c0:93:b8:7a:9d:16:74:98:28:78:09:
88:4a:a5:58:78:07:e9:9e:97:a5:af:3e:75:f0:82:
26:3c:9b:13:ff:12:06:83:e9:09:04:55:3d:b4:c4:
d9:7d:8a:08:f5:2e:33:a6:dc:cb:46:13:d0:5d:98:
3f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D2:21:11:DD:B0:9C:E3:07:B8:8A:4D:B6:99:7E:14:53:38:9E:06
X509v3 Authority Key Identifier:
keyid:83:03:79:28:90:AD:A2:BA:38:7E:39:B3:14:B7:70:35:D5:FB:31:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d3:49:54:0b:8b:27:5d:36:38:54:12:d0:ec:24:ef:e3:2b:
be:e1:4d:c0:3e:89:8c:0e:f5:b8:ba:39:9c:e3:81:4e:d8:0a:
cf:57:ae:e7:d0:f4:19:66:8b:99:f1:72:94:ef:d8:c0:71:3b:
c8:ae:cd:fc:aa:83:58:b2:6e:80:d3:bf:65:1d:42:2d:07:8f:
3f:28:96:06:ac:e2:0e:af:6e:54:52:58:5f:af:71:f8:da:28:
7b:9e:1f:6e:f6:7a:82:15:72:13:14:4f:e1:e3:53:d7:1a:81:
65:e7:9f:99:e3:8e:d8:10:1a:a7:06:27:be:55:15:a5:03:84:
b6:49:0f:d3:0c:6c:5f:ef:28:84:37:24:38:d9:a5:d6:6b:82:
68:bb:bb:4c:3a:f7:75:38:11:6d:13:93:8e:55:8d:cf:27:b1:
bd:93:a5:b2:0c:63:ae:65:82:e0:ca:97:0e:97:ad:55:e9:04:
8b:a5:95:74:a3:73:6c:a9:98:84:57:eb:b5:43:d1:bf:c9:13:
8e:89:c0:e3:2c:7f:c9:95:85:80:1c:fc:31:be:5b:d4:3b:7c:
a9:7a:cb:75:d4:64:f3:2d:61:d1:20:c7:61:41:d4:40:26:9a:
58:ed:af:96:0d:37:f6:4c:c2:3e:fc:7d:15:d5:a0:ea:15:49:
3f:b3:17:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76r+AYK6lJUe6OFB0qWs/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDM3OTI4OTBhZGEyYmEzODdlMzliMzE0Yjc3MDM1ZDVm
YjMxNWIwHhcNMjUxMDE5MTAwMTI5WhcNMjUxMDIwMTAwMTI5WjAzMTEwLwYDVQQD
EyhiYWQyMjExMWRkYjA5Y2UzMDdiODhhNGRiNjk5N2UxNDUzMzg5ZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutNGucsFB5Je5CUQFoOePRQzyK8p
rgb2xk1ypwUfD9+R3IpHv3kxiVLS36sHDh5tkueM7pMZiyTd+glcskgRVb9AKfcl
v2oyXfAdsdc6WPU9dYXr0VVqjo5V8S6dUZN1l1HZm6oxICrmDYL6JkEb4OcQo8yH
YXVdn0fLDAUBD0b38L3QUWbYxPqBEv4d1Ig7F6f1wR1RbWX2BJ2/WoNjuhXvTYl5
uoJNqC+iAR6HC11Y0HQSUGjta//bZ4rqTO+W0dQ1z4/pwJO4ep0WdJgoeAmISqVY
eAfpnpelrz518IImPJsT/xIGg+kJBFU9tMTZfYoI9S4zptzLRhPQXZg/HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrSIRHdsJzjB7iKTbaZfhRTOJ4GMB8GA1UdIwQY
MBaAFIMDeSiQraK6OH45sxS3cDXV+zFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dONUtKQ3Rvcm80ZmptekZMZHdOZFg3TVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zMTljZGMtYjViYy00MTNhLWJlZTct
N2U4NDdhMzQxNDFhLzEvZ3dONUtKQ3Rvcm80ZmptekZMZHdOZFg3TVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zMTljZGMtYjViYy00MTNhLWJlZTctN2U4NDdhMzQxNDFh
LzEvZ3dONUtKQ3Rvcm80ZmptekZMZHdOZFg3TVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptNJVAuL
J102OFQS0Owk7+MrvuFNwD6JjA71uLo5nOOBTtgKz1eu59D0GWaLmfFylO/YwHE7
yK7N/KqDWLJugNO/ZR1CLQePPyiWBqziDq9uVFJYX69x+Nooe54fbvZ6ghVyExRP
4eNT1xqBZeefmeOO2BAapwYnvlUVpQOEtkkP0wxsX+8ohDckONml1muCaLu7TDr3
dTgRbROTjlWNzyexvZOlsgxjrmWC4MqXDpetVekEi6WVdKNzbKmYhFfrtUPRv8kT
jonA4yx/yZWFgBz8Mb5b1Dt8qXrLddRk8y1h0SDHYUHUQCaaWO2vlg039kzCPvx9
FdWg6hVJP7MXRA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:47 2025 by rpki-client