Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
File: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft (raw, json)
Hash identifier: vUsgptCqFoQO31YDZEO0bJU5CuvQ+bMguFQWRuUKfnE=
Subject key identifier: E4:4D:73:00:1D:28:6A:33:BE:07:C2:AD:0A:C8:6F:AE:6C:92:74:F2
Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Certificate serial: 0199FF599A6A9A7E0FD628611EAB6B9B9567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 02:01:26 +0000
Manifest this update: Mon 20 Oct 2025 02:01:26 +0000
Manifest next update: Tue 21 Oct 2025 02:01:26 +0000
Files and hashes: 1: 6UgffgqyRmXA4X4lQkfxVrdwBsA.roa (hash: evXeFj81thsrgyrUvw1aQVJLYDNLbEIIyY5wmZWNCGU=)
2: EMVnap43Y9UsFWtlCe55L5ZXNno.roa (hash: 79QWn/jDXhxzY15VXil6olMuq2XcT6cSiSrWZxg+0Gg=)
3: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl (hash: FHtb0hCUfE/7cavyAqXrl42j/2qE6OEGXjKo4yFouxA=)
4: LxmN4uMoK6wh408GJ6l9gH0ugu0.roa (hash: kJ1RLjAnYMeLDEzPUcjx7KqkgbH5nyx8Lbk4P/H0Wtw=)
5: ST5QgStVsZ8VLKir2fIMPSp6_jU.roa (hash: 2UGwzfV+8KmtBgovMvwjTZRncLGcWbahxwdG9QTxnao=)
6: fRi0G2cIUxI61l2GTTKIFQAG9RE.roa (hash: IiPf4Yv8/FcDmWTn4xUhoGH8CrL6FWqGZiw6UQ0WOHg=)
7: yAm1lV_S8WQU9xUYSz0xhS5WWFk.roa (hash: +RLHgrQThKYdngYSU7w4Ac27ABqxEk770X6x0K5R6ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:9a:6a:9a:7e:0f:d6:28:61:1e:ab:6b:9b:95:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Validity
Not Before: Oct 20 02:01:26 2025 GMT
Not After : Oct 21 02:01:26 2025 GMT
Subject: CN=e44d73001d286a33be07c2ad0ac86fae6c9274f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:fe:0e:b0:b9:c7:9a:dc:e6:26:6d:38:d8:
1a:fd:c4:03:da:c4:52:f5:93:64:85:bf:60:3a:07:
43:8c:85:ef:e0:8f:ab:be:6d:6a:52:f8:51:c7:dd:
3a:d3:6a:77:59:16:24:51:59:6c:35:4f:a8:59:50:
09:24:16:47:c1:7c:cb:02:ba:03:7f:ae:67:7e:fc:
1f:a1:22:ed:2e:08:ae:d6:47:ef:29:62:3d:bf:5d:
bb:e7:19:4c:18:db:c8:89:11:b0:5e:fd:9e:78:9e:
3a:23:ad:cd:e1:d4:c3:ef:22:ac:39:87:db:90:81:
f3:8c:a8:69:45:24:ae:28:72:6b:fd:c6:bd:f0:a1:
3b:bf:dc:20:e1:98:f9:f2:b8:62:e1:a8:09:1e:e5:
39:9b:7a:63:b5:1c:40:08:94:c5:9e:70:17:2f:9b:
0b:5f:8c:64:9d:15:06:ba:07:70:88:b9:ea:f4:d6:
59:f5:1d:7c:2c:2b:d2:c2:75:3e:ff:33:f0:cc:12:
4d:5a:7f:c9:ff:f9:a8:ec:0f:2c:3b:ac:0c:56:17:
eb:d0:6e:b2:80:81:e6:45:ff:d9:2d:81:70:f3:f9:
06:11:d6:d8:68:73:eb:c3:98:86:72:20:8f:d7:1c:
a1:9d:7f:c0:f9:21:06:ad:7a:29:93:3e:9e:9a:9a:
02:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4D:73:00:1D:28:6A:33:BE:07:C2:AD:0A:C8:6F:AE:6C:92:74:F2
X509v3 Authority Key Identifier:
keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b7:f3:9a:34:bf:23:dd:94:21:ec:6e:20:cf:56:56:79:e5:
66:e5:d9:df:64:99:35:52:26:a9:e1:34:c4:fb:f9:58:72:38:
f0:54:5a:a4:a8:b9:2d:b5:3f:20:06:1b:d3:1b:95:90:e4:61:
72:f4:6b:37:05:79:cd:21:f2:a3:b2:b1:88:3f:34:b8:43:16:
f1:5a:1f:28:2e:2e:06:1a:e8:c9:ba:5d:cf:05:bd:02:2e:93:
74:a3:18:34:b1:7e:3d:f4:11:5f:d3:49:d9:e3:b5:f2:41:73:
66:38:07:65:1d:d7:74:52:24:26:85:41:10:89:86:9c:93:1d:
82:29:7f:0f:af:84:61:59:b3:f6:11:8f:d5:b3:5a:2c:2e:a0:
5d:27:c1:2b:96:9d:74:f7:ce:bf:9d:c0:0f:da:cb:9f:a4:c0:
9e:d1:91:09:45:5d:c6:b5:1a:33:77:c2:be:86:cd:ac:f0:f7:
b9:1a:3f:12:38:24:bb:ff:0c:e8:0f:19:88:52:24:52:15:11:
77:e3:69:3c:9d:15:b9:d1:08:5b:0a:04:8f:0a:9d:0b:98:16:
80:86:a9:ed:9c:40:07:bd:a4:7a:9f:fb:28:48:35:65:00:77:
0d:8f:6d:34:54:3b:2f:f7:7f:45:06:86:54:64:53:99:1c:e4:
72:11:78:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WZpqmn4P1ihhHqtrm5VnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGRkMTE1NTQyNDdiZDJiZDMwMWNlYTQzZmY1MTgwMzcy
YzM4ZTQwHhcNMjUxMDIwMDIwMTI2WhcNMjUxMDIxMDIwMTI2WjAzMTEwLwYDVQQD
EyhlNDRkNzMwMDFkMjg2YTMzYmUwN2MyYWQwYWM4NmZhZTZjOTI3NGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFH+DrC5x5rc5iZtONga/cQD2sRS
9ZNkhb9gOgdDjIXv4I+rvm1qUvhRx90602p3WRYkUVlsNU+oWVAJJBZHwXzLAroD
f65nfvwfoSLtLgiu1kfvKWI9v1275xlMGNvIiRGwXv2eeJ46I63N4dTD7yKsOYfb
kIHzjKhpRSSuKHJr/ca98KE7v9wg4Zj58rhi4agJHuU5m3pjtRxACJTFnnAXL5sL
X4xknRUGugdwiLnq9NZZ9R18LCvSwnU+/zPwzBJNWn/J//mo7A8sO6wMVhfr0G6y
gIHmRf/ZLYFw8/kGEdbYaHPrw5iGciCP1xyhnX/A+SEGrXopkz6empoC5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORNcwAdKGozvgfCrQrIb65sknTyMB8GA1UdIwQY
MBaAFBpN0RVUJHvSvTAc6kP/UYA3LDjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUt
M2JhNWYzMGNhYWJmLzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUtM2JhNWYzMGNhYWJm
LzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7fzmjS/
I92UIexuIM9WVnnlZuXZ32SZNVImqeE0xPv5WHI48FRapKi5LbU/IAYb0xuVkORh
cvRrNwV5zSHyo7KxiD80uEMW8VofKC4uBhroybpdzwW9Ai6TdKMYNLF+PfQRX9NJ
2eO18kFzZjgHZR3XdFIkJoVBEImGnJMdgil/D6+EYVmz9hGP1bNaLC6gXSfBK5ad
dPfOv53AD9rLn6TAntGRCUVdxrUaM3fCvobNrPD3uRo/Ejgku/8M6A8ZiFIkUhUR
d+NpPJ0VudEIWwoEjwqdC5gWgIap7ZxAB72kep/7KEg1ZQB3DY9tNFQ7L/d/RQaG
VGRTmRzkchF4Kg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:08:43 2025 by rpki-client