Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
File: gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft (raw, json)
Hash identifier: K8KZOX0+pG8wOuuChzMUr4x44axihQq1XqrWeJgqE5M=
Subject key identifier: 85:D9:14:EB:9A:F5:61:41:9F:61:18:3E:B0:5B:73:66:21:F9:DA:C7
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Certificate issuer: /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial: 0199FD3454D81EC872F259B1B246A02EF4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 16:01:29 +0000
Manifest this update: Sun 19 Oct 2025 16:01:29 +0000
Manifest next update: Mon 20 Oct 2025 16:01:29 +0000
Files and hashes: 1: X8y17pVc211N8MGfVTBzz81iEoA.roa (hash: Hl59xAoHLIR2ve7ZY+IGK+whUrubuEhh7gzRr94EmJM=)
2: gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl (hash: RsFWz3sJpIdvGx8CfGUlX6Fk41kbXlrvMV79XAhmajM=)
3: xYBkOkdRt8PDKOH8dzQ2NTMqI8M.roa (hash: ITHwZydQPAzKvryYx9N44bQeMeKILW1oaBs72ARfdxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:54:d8:1e:c8:72:f2:59:b1:b2:46:a0:2e:f4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
Validity
Not Before: Oct 19 16:01:29 2025 GMT
Not After : Oct 20 16:01:29 2025 GMT
Subject: CN=85d914eb9af561419f61183eb05b736621f9dac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:ff:33:7d:f9:81:35:b0:42:a4:9e:58:c8:
7f:28:a5:2d:c5:6b:cf:c8:df:55:99:b2:3f:80:3a:
76:06:31:93:cc:be:96:24:ae:f5:6c:2f:e0:89:04:
ed:3a:e1:14:71:3f:58:1b:50:db:2f:b2:fd:23:d5:
28:46:f0:32:cb:53:2a:08:24:ff:d1:e4:8f:ef:94:
fb:b3:fa:da:5a:37:da:2b:5a:06:61:28:78:fe:43:
0f:e9:45:6b:bb:e6:2a:b7:7f:9e:4c:8d:10:53:13:
a9:aa:04:54:f4:3f:c5:de:1b:4f:fd:5e:b3:a3:d5:
3e:5b:40:a6:bc:37:48:81:3b:68:9e:c9:2e:6e:b8:
69:50:04:4f:f8:07:d8:dd:43:1f:a0:4e:6b:8a:1d:
fc:d7:5e:1a:28:86:ad:a8:58:f7:a8:05:1e:df:5d:
c8:92:c3:dc:3e:99:3d:8a:20:23:6e:63:0a:fd:65:
4c:3d:15:b6:4c:fa:5d:8b:46:75:a5:75:4a:da:07:
7b:cc:c5:38:21:94:7f:4a:08:52:78:70:83:76:cc:
55:df:f7:f7:d5:47:8d:b2:ff:93:b7:e6:cd:9c:69:
9e:b4:af:45:52:c8:21:93:96:f3:f5:79:eb:89:9a:
f5:a1:d7:0e:90:a7:02:b7:8a:fd:83:63:fa:90:85:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D9:14:EB:9A:F5:61:41:9F:61:18:3E:B0:5B:73:66:21:F9:DA:C7
X509v3 Authority Key Identifier:
keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:84:6d:9d:dd:d3:ef:13:62:0d:1f:f1:29:22:90:25:e4:ab:
dc:04:8b:4e:12:7b:86:97:15:36:a2:66:f8:cc:3b:4a:3b:40:
91:09:05:c5:a4:92:28:ed:e2:8c:29:82:ab:87:d8:fd:d2:bc:
ce:9f:d7:d1:2a:72:3a:fb:1c:ce:70:f7:04:32:53:c9:5e:27:
5b:67:2b:2a:6a:4f:77:5e:95:99:56:74:ae:1d:af:84:c2:95:
a7:db:41:57:7a:97:74:74:bc:ec:0d:d1:29:d4:09:f4:5d:72:
2e:52:15:11:a3:5b:2d:d8:f0:77:c2:3a:ca:20:8f:ab:2a:de:
22:2e:27:e8:e1:3d:29:67:14:0b:14:ff:f9:2e:d1:e0:0c:3a:
a8:f6:65:7b:d8:d2:a7:dd:b8:11:fd:77:39:db:ea:f5:31:e3:
5f:2a:b9:4f:b4:b7:19:a7:0c:31:38:30:82:b2:4c:79:2d:a4:
3c:b2:db:38:df:d5:e2:97:ee:1b:e5:0a:33:8d:74:16:20:bc:
e2:4d:be:df:b0:97:ef:99:40:d8:39:fa:96:5a:f7:b6:a1:d7:
f7:74:11:4b:35:4e:32:25:31:6d:44:67:25:e4:2f:00:b9:03:
5c:54:ec:e5:cb:dd:ba:47:71:fe:cb:22:24:64:19:2d:49:39:
c1:7f:d9:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NFTYHshy8lmxskagLvSpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDU1NWYwMTFiZTVlMjQxZWIwYjQyNWRlNWZkODZjYzY4
MzRhNTQwHhcNMjUxMDE5MTYwMTI5WhcNMjUxMDIwMTYwMTI5WjAzMTEwLwYDVQQD
Eyg4NWQ5MTRlYjlhZjU2MTQxOWY2MTE4M2ViMDViNzM2NjIxZjlkYWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8//M335gTWwQqSeWMh/KKUtxWvP
yN9VmbI/gDp2BjGTzL6WJK71bC/giQTtOuEUcT9YG1DbL7L9I9UoRvAyy1MqCCT/
0eSP75T7s/raWjfaK1oGYSh4/kMP6UVru+Yqt3+eTI0QUxOpqgRU9D/F3htP/V6z
o9U+W0CmvDdIgTtonskubrhpUARP+AfY3UMfoE5rih38114aKIatqFj3qAUe313I
ksPcPpk9iiAjbmMK/WVMPRW2TPpdi0Z1pXVK2gd7zMU4IZR/SghSeHCDdsxV3/f3
1UeNsv+Tt+bNnGmetK9FUsghk5bz9XnriZr1odcOkKcCt4r9g2P6kIWXRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXZFOua9WFBn2EYPrBbc2Yh+drHMB8GA1UdIwQY
MBaAFIMFVfARvl4kHrC0Jd5f2GzGg0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEt
ZDY5OWRkYzlkMDljLzEvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEtZDY5OWRkYzlkMDlj
LzEvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIRtnd3T
7xNiDR/xKSKQJeSr3ASLThJ7hpcVNqJm+Mw7SjtAkQkFxaSSKO3ijCmCq4fY/dK8
zp/X0SpyOvscznD3BDJTyV4nW2crKmpPd16VmVZ0rh2vhMKVp9tBV3qXdHS87A3R
KdQJ9F1yLlIVEaNbLdjwd8I6yiCPqyreIi4n6OE9KWcUCxT/+S7R4Aw6qPZle9jS
p924Ef13Odvq9THjXyq5T7S3GacMMTgwgrJMeS2kPLLbON/V4pfuG+UKM410FiC8
4k2+37CX75lA2Dn6llr3tqHX93QRSzVOMiUxbURnJeQvALkDXFTs5cvdukdx/ssi
JGQZLUk5wX/Znw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:40:56 2025 by rpki-client