Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
File: GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft (raw, json)
Hash identifier: WvtzOzm8s88NuX5lbJBrsM21PmAQdEQwrFWhRQiDTUo=
Subject key identifier: 40:53:4B:95:32:E7:A4:D0:00:1B:80:6E:07:45:7F:FC:10:13:DC:E8
Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
Certificate issuer: /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Certificate serial: 019A006C2C646B586D41A041A0B1594F93F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
Manifest number: 04ED
Signing time: Mon 20 Oct 2025 07:01:20 +0000
Manifest this update: Mon 20 Oct 2025 07:01:20 +0000
Manifest next update: Tue 21 Oct 2025 07:01:20 +0000
Files and hashes: 1: GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl (hash: eAiWjG2u8gJ0ZHidCK0m3uCnb16rbkDsu8gHOlr0Fkw=)
2: e9EQ6VGsqQtTlrcZFXyP1dKg-x0.roa (hash: Qxin8oKJ7eJDBi35LMUZ2n4Hb/pGwiYUbLvNw7wbCZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:2c:64:6b:58:6d:41:a0:41:a0:b1:59:4f:93:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Validity
Not Before: Oct 20 07:01:20 2025 GMT
Not After : Oct 21 07:01:20 2025 GMT
Subject: CN=40534b9532e7a4d0001b806e07457ffc1013dce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:e3:64:18:a3:6a:a1:86:26:d2:b5:ba:f0:
c8:55:8b:46:89:36:0b:dd:24:e3:21:dc:f8:9e:0a:
48:d1:61:77:a5:f8:33:6b:01:67:01:08:b7:57:1b:
a8:0d:cc:e9:8e:54:e4:2d:6c:7e:31:b3:aa:80:0b:
5a:ce:28:62:b7:69:00:30:87:5d:b7:cb:3f:f7:fe:
80:20:49:b2:b8:c0:5e:e4:6c:32:f8:ea:b3:de:32:
6d:29:7d:ca:52:45:50:f4:5f:2f:d3:76:9c:46:0e:
05:ed:4b:b2:b9:19:ca:2d:dd:08:c2:cf:1f:ff:8f:
ae:9e:1b:5d:17:a0:94:a5:93:15:ad:1d:eb:6b:e0:
88:5d:11:5a:5f:e9:a6:a1:59:b5:72:e7:e2:6f:5a:
8f:91:f4:11:2e:ce:7e:47:bd:78:a2:c9:f6:9c:a6:
7c:f2:a6:56:fb:76:b8:91:ad:64:1e:e3:8d:32:e0:
f8:8f:6e:fa:c4:36:72:9e:15:93:87:c8:f7:40:f9:
d9:30:a9:2e:ff:52:69:bc:31:5b:65:0a:cb:5e:22:
ad:5b:d5:5a:d7:a1:d5:d0:62:7b:8b:58:85:a6:d6:
cf:17:0d:7c:48:2f:02:3b:7e:f6:08:c6:ae:b3:6f:
76:f0:cf:d4:53:5b:8e:9b:74:ff:29:9a:c5:b1:09:
db:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:53:4B:95:32:E7:A4:D0:00:1B:80:6E:07:45:7F:FC:10:13:DC:E8
X509v3 Authority Key Identifier:
keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:66:1b:b7:df:98:0e:ce:6d:29:ea:43:6f:0a:3b:8b:1f:6c:
39:5f:ce:5b:f4:55:57:75:66:a2:ba:a1:64:8a:b6:37:51:ed:
6e:1a:83:56:00:39:41:4c:d7:93:af:bf:1e:ea:dc:1c:26:5f:
be:ec:74:fc:20:30:62:98:7b:64:57:1d:13:c1:93:8f:d6:68:
97:2f:d3:89:12:38:f6:a8:d1:86:b3:37:47:57:88:82:6a:f0:
25:c7:ec:9b:79:d0:ba:5b:37:56:a2:00:fc:30:c2:61:9a:18:
d6:46:da:f3:bb:18:42:d9:4b:97:d9:1e:f6:5f:b2:f0:44:94:
3f:20:35:14:02:a5:c3:bd:cb:35:cc:38:73:b9:4c:a4:85:14:
b9:c2:f2:38:16:64:64:a5:a4:6f:7e:ae:a5:3e:5f:e8:be:fc:
52:eb:32:0e:aa:8f:65:83:12:c1:4b:c1:a8:29:14:2d:d4:25:
99:53:42:c3:35:54:e5:34:4a:bb:3e:76:04:04:56:40:2b:0b:
01:86:84:95:07:eb:e8:e0:fb:f1:6a:86:1f:ef:c3:9e:cd:25:
2e:3e:db:7b:1b:5b:72:e5:ec:0e:13:54:cc:8c:a9:77:e6:51:
61:f9:2b:8c:99:b1:e9:e2:f3:6c:8d:d7:27:44:74:df:c0:40:
8b:1b:b9:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbCxka1htQaBBoLFZT5PxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMzY4ZmJmNWJiZDZkMzJmM2RkZGMyNGVjMjA0MDM4YzQ5
YjA1NTAwHhcNMjUxMDIwMDcwMTIwWhcNMjUxMDIxMDcwMTIwWjAzMTEwLwYDVQQD
Eyg0MDUzNGI5NTMyZTdhNGQwMDAxYjgwNmUwNzQ1N2ZmYzEwMTNkY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv87jZBijaqGGJtK1uvDIVYtGiTYL
3STjIdz4ngpI0WF3pfgzawFnAQi3VxuoDczpjlTkLWx+MbOqgAtazihit2kAMIdd
t8s/9/6AIEmyuMBe5Gwy+Oqz3jJtKX3KUkVQ9F8v03acRg4F7UuyuRnKLd0Iws8f
/4+unhtdF6CUpZMVrR3ra+CIXRFaX+mmoVm1cufib1qPkfQRLs5+R714osn2nKZ8
8qZW+3a4ka1kHuONMuD4j276xDZynhWTh8j3QPnZMKku/1JpvDFbZQrLXiKtW9Va
16HV0GJ7i1iFptbPFw18SC8CO372CMaus2928M/UU1uOm3T/KZrFsQnbGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBTS5Uy56TQABuAbgdFf/wQE9zoMB8GA1UdIwQY
MBaAFBs2j79bvW0y893cJOwgQDjEmwVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8yY2JmODgtNThkOS00MjRlLThmOGYt
ZmQ0NjA0ZDdlN2FmLzEvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8yY2JmODgtNThkOS00MjRlLThmOGYtZmQ0NjA0ZDdlN2Fm
LzEvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwWYbt9+Y
Ds5tKepDbwo7ix9sOV/OW/RVV3VmorqhZIq2N1HtbhqDVgA5QUzXk6+/HurcHCZf
vux0/CAwYph7ZFcdE8GTj9Zoly/TiRI49qjRhrM3R1eIgmrwJcfsm3nQuls3VqIA
/DDCYZoY1kba87sYQtlLl9ke9l+y8ESUPyA1FAKlw73LNcw4c7lMpIUUucLyOBZk
ZKWkb36upT5f6L78UusyDqqPZYMSwUvBqCkULdQlmVNCwzVU5TRKuz52BARWQCsL
AYaElQfr6OD78WqGH+/Dns0lLj7bextbcuXsDhNUzIypd+ZRYfkrjJmx6eLzbI3X
J0R038BAixu5gg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:13 2025 by rpki-client