Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
File: G23wvAk_KYsENSLr1O3hl5MIGik.mft (raw, json)
Hash identifier: QPN9BGszzc5mgKwTe2t/p57iCbEUegIPsjr/mY5aGMA=
Subject key identifier: 1C:0F:E7:75:98:1D:28:6C:F7:E5:F0:32:D6:B7:96:C7:6E:6C:41:67
Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29
Certificate serial: 0199FDD975C140D34E1077EB094A4BCF2812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:50 +0000
Manifest this update: Sun 19 Oct 2025 19:01:50 +0000
Manifest next update: Mon 20 Oct 2025 19:01:50 +0000
Files and hashes: 1: G23wvAk_KYsENSLr1O3hl5MIGik.crl (hash: 45/+FFL4csKjl9eU22pKe5BWbxbnmEPuR6tMKiSYWIs=)
2: YJHXZeNag-cu70_fJht-ZOpxnGk.roa (hash: 2m1tn0x6o3pfXUEVzS2q6AJtU601h1r6TeqXWLsErHU=)
3: lYiKNcoH_WfqIMOCgQv0TYn2rKE.roa (hash: jZwRIN2ogKpi/MzaP8NmIeUVW4yffrhHB5Fsd5XJEE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:75:c1:40:d3:4e:10:77:eb:09:4a:4b:cf:28:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29
Validity
Not Before: Oct 19 19:01:50 2025 GMT
Not After : Oct 20 19:01:50 2025 GMT
Subject: CN=1c0fe775981d286cf7e5f032d6b796c76e6c4167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:9b:d0:01:c8:e3:a5:1f:96:23:0f:9c:5f:
28:a9:ad:f1:4d:3c:53:64:5b:67:ec:95:7e:5a:16:
1f:70:62:ba:72:bc:f3:ef:d1:fc:83:79:52:34:3b:
f8:0d:71:26:83:94:14:9b:e6:78:32:d5:7a:9a:e3:
e6:f4:5c:fd:1d:07:1c:53:f3:e4:88:03:8e:47:95:
d7:a9:98:b3:51:ba:b3:47:6b:b8:78:a4:b5:9e:79:
e2:f3:01:c1:7b:f3:38:c3:f7:82:8a:d8:46:bb:de:
ab:ec:92:ad:5d:8f:9a:eb:dc:64:c1:5d:15:23:5e:
e2:29:dd:ca:3f:d5:2f:8c:25:67:c5:fa:24:53:56:
dd:53:5f:04:27:a3:cb:2f:41:b6:dd:4c:1b:ef:d8:
f9:e5:b5:8c:08:b8:7f:43:9a:21:9d:8c:d7:93:4f:
22:1c:dc:30:36:b5:3c:8b:49:7a:3a:01:db:68:3a:
2d:c7:ca:3d:51:3c:fd:79:b3:81:40:ab:62:2a:21:
da:b0:33:45:cb:8a:b8:25:f7:6f:7c:5c:94:0b:11:
40:bc:6e:4a:76:69:cd:58:7e:1d:cf:87:3d:a1:52:
be:04:10:4c:2c:ee:ed:a0:64:b3:fc:26:0d:8f:ec:
10:c6:82:31:2c:87:75:2e:96:d9:f6:19:6b:dd:65:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0F:E7:75:98:1D:28:6C:F7:E5:F0:32:D6:B7:96:C7:6E:6C:41:67
X509v3 Authority Key Identifier:
keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cc:4b:dd:b6:bd:e9:c3:b6:8b:20:9e:1e:78:ec:0b:da:2b:
44:af:f4:5e:40:29:30:6e:60:24:26:a7:cd:1d:ee:17:c6:bb:
82:24:20:c5:50:83:7e:2e:ff:a8:8c:3d:13:0c:4d:1d:bc:26:
e9:15:c1:e0:42:a3:4c:7c:15:40:b0:67:23:3a:d1:1c:67:79:
ed:be:34:2b:a0:aa:a5:cc:ad:b1:93:e4:ee:c2:ac:f7:53:6d:
6d:2c:01:16:df:9e:ac:f4:19:38:ee:ef:d7:1e:e7:e6:ee:b8:
0a:2e:ac:cd:cd:8d:26:e7:63:11:13:b5:3d:61:45:75:51:bf:
b6:b6:78:d2:a9:6e:63:d5:a3:c7:65:e8:fe:2d:94:9b:66:8f:
f5:5c:ab:86:a0:ef:f8:34:85:5b:9d:bd:1e:04:65:4f:a4:fe:
e4:56:58:38:79:9e:85:b7:56:fc:da:14:9b:85:7b:5c:8c:d6:
94:94:cf:f0:11:57:3f:e1:c3:2b:da:a4:1a:ae:36:6b:4c:b1:
39:ad:23:7f:28:9c:45:73:3b:79:72:3c:c4:c9:53:a7:6f:7f:
2b:80:a2:2d:26:d2:de:81:1e:bb:64:94:2e:2a:45:14:85:99:
a6:f5:7c:1a:82:1a:f7:b7:68:e4:ee:1c:82:d6:45:1a:23:03:
cb:36:3d:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92XXBQNNOEHfrCUpLzygSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmRmMGJjMDkzZjI5OGIwNDM1MjJlYmQ0ZWRlMTk3OTMw
ODFhMjkwHhcNMjUxMDE5MTkwMTUwWhcNMjUxMDIwMTkwMTUwWjAzMTEwLwYDVQQD
EygxYzBmZTc3NTk4MWQyODZjZjdlNWYwMzJkNmI3OTZjNzZlNmM0MTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn2b0AHI46UfliMPnF8oqa3xTTxT
ZFtn7JV+WhYfcGK6crzz79H8g3lSNDv4DXEmg5QUm+Z4MtV6muPm9Fz9HQccU/Pk
iAOOR5XXqZizUbqzR2u4eKS1nnni8wHBe/M4w/eCithGu96r7JKtXY+a69xkwV0V
I17iKd3KP9UvjCVnxfokU1bdU18EJ6PLL0G23Uwb79j55bWMCLh/Q5ohnYzXk08i
HNwwNrU8i0l6OgHbaDotx8o9UTz9ebOBQKtiKiHasDNFy4q4JfdvfFyUCxFAvG5K
dmnNWH4dz4c9oVK+BBBMLO7toGSz/CYNj+wQxoIxLId1LpbZ9hlr3WX7owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwP53WYHShs9+XwMta3lsdubEFnMB8GA1UdIwQY
MBaAFBtt8LwJPymLBDUi69Tt4ZeTCBopMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYt
NWFjNmZkZmRjMGNjLzEvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYtNWFjNmZkZmRjMGNj
LzEvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMxL3ba9
6cO2iyCeHnjsC9orRK/0XkApMG5gJCanzR3uF8a7giQgxVCDfi7/qIw9EwxNHbwm
6RXB4EKjTHwVQLBnIzrRHGd57b40K6CqpcytsZPk7sKs91NtbSwBFt+erPQZOO7v
1x7n5u64Ci6szc2NJudjERO1PWFFdVG/trZ40qluY9Wjx2Xo/i2Um2aP9VyrhqDv
+DSFW529HgRlT6T+5FZYOHmehbdW/NoUm4V7XIzWlJTP8BFXP+HDK9qkGq42a0yx
Oa0jfyicRXM7eXI8xMlTp29/K4CiLSbS3oEeu2SULipFFIWZpvV8GoIa97do5O4c
gtZFGiMDyzY9yg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:35 2025 by rpki-client