Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: P+IxwZqhUPlpDS/nkWMlwAQJGc2zacrVnVtGPxwkjAQ=
Subject key identifier: 45:AF:11:07:06:FA:F5:1F:E1:06:7E:F1:E2:3F:DE:E2:92:E7:C8:9B
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 0199FBB36DCDC5A0A4A93A713D7B884BCE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 01EE
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: N9bR_mBXXHjDIFBVaDKi9gxaXJ0.roa (hash: t/vnY4c9w46jNFfl6Ql0aCTX7Py6QOE0v9MYkC3oE08=)
2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: hyPC+KeWMXHHJtPsD+Uy2BJ1o4d0fmcYnHekrjUI18E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6d:cd:c5:a0:a4:a9:3a:71:3d:7b:88:4b:ce:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=45af110706faf51fe1067ef1e23fdee292e7c89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:93:d7:a0:61:12:cd:3b:f7:1e:8a:8e:c7:ae:
80:b0:e8:8d:46:b2:3a:74:83:ff:19:13:17:48:c8:
68:5e:64:38:a2:4d:78:66:37:b0:b1:5f:4f:9a:1d:
fe:f0:f0:1e:80:43:38:3e:5e:7e:21:53:d3:9f:ff:
55:89:9d:22:54:e1:b9:65:86:96:23:b5:bb:17:59:
37:b1:27:ee:77:a1:79:d8:5a:c7:c7:13:c2:21:97:
37:42:62:52:9b:b6:91:dd:76:40:bf:85:8d:74:3a:
8d:e5:28:1f:52:be:c3:e3:da:50:f3:2e:dd:17:36:
fe:aa:76:ff:e9:13:c1:da:d2:e2:3b:75:a6:70:35:
75:39:4f:fa:67:49:f5:b6:ef:43:8a:ff:ce:49:79:
63:67:e5:28:ee:b9:1e:4a:7d:47:a7:31:59:5e:11:
4c:1c:a8:f6:21:9f:18:12:77:32:e4:58:81:1a:24:
66:fe:be:3a:71:69:c7:0e:d7:57:af:9f:a7:72:f7:
c8:8f:1a:db:d6:f6:4d:2d:4f:41:3f:6d:f6:7e:4b:
31:09:54:24:89:a9:1b:c0:10:01:57:00:c3:6f:92:
35:67:38:bc:38:ac:3b:7e:7c:a6:28:43:8a:4f:c7:
4f:ae:67:95:63:d8:8d:83:1f:46:4c:02:31:11:ae:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AF:11:07:06:FA:F5:1F:E1:06:7E:F1:E2:3F:DE:E2:92:E7:C8:9B
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:76:7a:9a:5f:81:19:77:e2:55:7c:7c:78:bb:3a:6c:06:e5:
ab:9f:a4:36:40:5c:1a:37:de:0e:3a:7a:4a:11:d1:ce:9a:0c:
42:9c:f2:6f:fe:8c:5c:26:11:ac:f1:65:05:ac:40:c2:b9:ac:
58:32:c9:cc:17:f2:c6:85:1a:da:82:ee:fe:0f:c4:4a:82:48:
73:15:eb:bd:55:ca:27:56:e7:30:2c:5f:80:f0:88:6d:f2:05:
df:a7:c9:a8:73:1a:b0:10:40:9f:d7:a1:30:d8:7a:5b:54:8e:
9f:ca:b5:d7:3d:e6:c4:74:80:aa:6e:e0:dc:8f:fb:2e:9c:08:
2a:b0:bb:e4:06:be:19:d5:15:60:4d:7f:a2:35:bf:48:07:61:
2c:f2:a8:a0:0d:7d:a7:99:3a:94:de:ce:f4:98:e3:bc:3b:a1:
73:7e:f4:c1:95:64:79:12:75:a1:3f:c6:af:63:c3:70:83:1c:
10:ab:b8:4a:f8:3b:03:49:e9:b3:7d:5d:2f:95:08:87:34:f0:
c9:12:a5:9c:0d:45:98:94:d8:bd:61:a8:ff:51:56:46:25:c4:
e0:ad:aa:2d:e2:10:66:28:7e:10:be:21:e1:52:2f:54:8c:cf:
4a:84:fc:ba:8e:48:11:4d:6b:5a:e1:7a:fc:a8:d5:4f:20:75:
81:8f:0a:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s23NxaCkqTpxPXuIS86TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNmFhOTFhYjEyNzRlNDc1Mzk3YjkwN2E2NTVmOTFlOWQ2
MDVlMGUwHhcNMjUxMDE5MDkwMTA0WhcNMjUxMDIwMDkwMTA0WjAzMTEwLwYDVQQD
Eyg0NWFmMTEwNzA2ZmFmNTFmZTEwNjdlZjFlMjNmZGVlMjkyZTdjODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpPXoGESzTv3HoqOx66AsOiNRrI6
dIP/GRMXSMhoXmQ4ok14ZjewsV9Pmh3+8PAegEM4Pl5+IVPTn/9ViZ0iVOG5ZYaW
I7W7F1k3sSfud6F52FrHxxPCIZc3QmJSm7aR3XZAv4WNdDqN5SgfUr7D49pQ8y7d
Fzb+qnb/6RPB2tLiO3WmcDV1OU/6Z0n1tu9Div/OSXljZ+Uo7rkeSn1HpzFZXhFM
HKj2IZ8YEncy5FiBGiRm/r46cWnHDtdXr5+ncvfIjxrb1vZNLU9BP232fksxCVQk
iakbwBABVwDDb5I1Zzi8OKw7fnymKEOKT8dPrmeVY9iNgx9GTAIxEa409QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWvEQcG+vUf4QZ+8eI/3uKS58ibMB8GA1UdIwQY
MBaAFIFqqRqxJ05HU5e5B6ZV+R6dYF4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYTdmZDQtNWRlMC00YTExLWEyNTMt
ZGZmM2JjZWU2YjY2LzEvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yYTdmZDQtNWRlMC00YTExLWEyNTMtZGZmM2JjZWU2YjY2
LzEvZ1dxcEdyRW5Ua2RUbDdrSHBsWDVIcDFnWGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3Z6ml+B
GXfiVXx8eLs6bAblq5+kNkBcGjfeDjp6ShHRzpoMQpzyb/6MXCYRrPFlBaxAwrms
WDLJzBfyxoUa2oLu/g/ESoJIcxXrvVXKJ1bnMCxfgPCIbfIF36fJqHMasBBAn9eh
MNh6W1SOn8q11z3mxHSAqm7g3I/7LpwIKrC75Aa+GdUVYE1/ojW/SAdhLPKooA19
p5k6lN7O9JjjvDuhc370wZVkeRJ1oT/Gr2PDcIMcEKu4Svg7A0nps31dL5UIhzTw
yRKlnA1FmJTYvWGo/1FWRiXE4K2qLeIQZih+EL4h4VIvVIzPSoT8uo5IEU1rWuF6
/KjVTyB1gY8K2w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:10 2025 by rpki-client