
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
File: GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json)
Hash identifier: ik+1+lr7SWclfN/KtqpYnO1iV3OZlqbLPa5IWBArTBY=
Subject key identifier: 11:DF:E8:21:A3:75:69:92:11:BA:1C:F1:84:92:A0:EB:0A:78:B5:FE
Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Certificate serial: 0199FC21C030BE9DA4AD599A4A6F6D82F580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: 8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa (hash: 8RTmSwJoya32i12kM5MRjAc5F89+JLBUKY/2kNp2yVc=)
2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: CmXHq9rGhxT/kBsMENINNn5nXvhUl4VtQERiB/pVP+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c0:30:be:9d:a4:ad:59:9a:4a:6f:6d:82:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=11dfe821a375699211ba1cf18492a0eb0a78b5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:a7:8e:39:09:f6:a9:e8:07:30:8e:3f:89:
ce:98:e2:95:10:ea:4f:82:b6:f6:d7:a5:2b:d8:92:
e8:a0:78:e1:30:30:92:2e:53:08:15:6c:5c:a2:e8:
5e:02:6e:ba:95:16:94:2f:9e:16:74:72:af:85:56:
08:e6:f6:23:d7:42:1d:98:b0:86:cb:68:61:31:6b:
53:e5:56:78:ee:d9:59:cb:71:64:17:f8:94:da:cb:
ed:0d:88:43:6a:54:2a:f8:97:64:61:6e:87:c2:06:
91:4b:ae:43:2f:3c:29:28:8d:5f:ba:b0:11:ab:ba:
55:6e:8e:a2:a4:cf:42:7b:1c:8a:96:92:0f:7c:9b:
5d:e8:6f:5e:25:85:17:df:c8:54:5d:77:70:65:91:
ca:fb:33:22:4e:19:14:4d:e9:2c:b3:b3:b3:af:6f:
39:a6:77:98:fa:2c:dc:bf:13:d3:a1:0e:44:b9:21:
aa:ae:b8:ab:29:47:50:6a:5a:4f:7c:cd:63:be:d9:
9e:f9:67:bc:04:b6:13:e3:dd:1a:2e:6b:ae:74:b1:
ff:e3:e4:85:07:e3:76:be:41:8a:f5:a0:cb:e4:fd:
85:7c:72:54:9c:ce:b9:79:42:36:2f:ba:aa:c8:16:
7d:f5:63:8b:f0:73:df:30:f7:66:6d:e0:98:9e:ba:
33:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DF:E8:21:A3:75:69:92:11:BA:1C:F1:84:92:A0:EB:0A:78:B5:FE
X509v3 Authority Key Identifier:
keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:50:18:ae:7d:60:7e:1b:9d:51:55:9a:65:21:d9:69:d0:7c:
e4:64:99:f9:a4:ee:8c:38:65:b6:b1:e2:8e:89:86:e9:91:50:
91:fe:ae:11:e8:e3:25:17:6f:de:71:d0:c5:03:f7:cf:2f:dd:
18:cb:f5:b9:61:c4:54:ae:c8:90:5a:a6:91:e9:90:a4:d7:46:
b4:70:32:5c:7b:7a:4f:f9:34:5b:31:1d:62:c0:54:19:54:51:
c2:64:ba:f0:49:3d:a0:3c:6b:8f:a2:f4:b4:c4:81:2e:37:f6:
65:83:a7:95:ff:4c:29:33:06:f3:b7:e1:cb:ab:cd:06:17:d9:
9f:e2:bd:18:b0:97:59:f3:0e:97:90:56:c9:9d:64:d4:f3:97:
05:d5:ce:4c:6e:95:fc:22:3c:aa:b9:39:c8:62:ae:ac:5b:11:
c9:9a:5a:ef:f3:e8:b0:c0:0b:c6:a8:52:87:26:52:f4:41:c2:
22:d3:2e:6a:19:98:35:31:01:3c:09:da:24:c3:eb:79:06:be:
d7:36:2c:54:f9:95:84:c1:3d:f0:0f:c2:1e:43:af:64:a3:96:
04:f8:65:b4:bd:43:23:5b:da:1b:4d:ae:8d:d3:8a:48:57:7c:
7b:7b:23:69:55:c2:1f:62:27:ff:8e:f7:5d:a2:cb:4b:08:b8:
eb:7d:d1:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IcAwvp2krVmaSm9tgvWAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NThjYWE2ODMyYWEyYTNlN2NjNmQxNDQ1MTVmOGY0MzFi
NjY3NjIwHhcNMjUxMDE5MTEwMTM0WhcNMjUxMDIwMTEwMTM0WjAzMTEwLwYDVQQD
EygxMWRmZTgyMWEzNzU2OTkyMTFiYTFjZjE4NDkyYTBlYjBhNzhiNWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy2njjkJ9qnoBzCOP4nOmOKVEOpP
grb216Ur2JLooHjhMDCSLlMIFWxcouheAm66lRaUL54WdHKvhVYI5vYj10IdmLCG
y2hhMWtT5VZ47tlZy3FkF/iU2svtDYhDalQq+JdkYW6HwgaRS65DLzwpKI1furAR
q7pVbo6ipM9CexyKlpIPfJtd6G9eJYUX38hUXXdwZZHK+zMiThkUTekss7Ozr285
pneY+izcvxPToQ5EuSGqrrirKUdQalpPfM1jvtme+We8BLYT490aLmuudLH/4+SF
B+N2vkGK9aDL5P2FfHJUnM65eUI2L7qqyBZ99WOL8HPfMPdmbeCYnrozwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHf6CGjdWmSEboc8YSSoOsKeLX+MB8GA1UdIwQY
MBaAFBhYyqaDKqKj58xtFEUV+PQxtmdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83OTI2YjgtNmVhNy00NWI0LTk1M2Ut
YWFiN2ZjM2Y4YWM1LzEvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83OTI2YjgtNmVhNy00NWI0LTk1M2UtYWFiN2ZjM2Y4YWM1
LzEvR0ZqS3BvTXFvcVBuekcwVVJSWDQ5REcyWjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplAYrn1g
fhudUVWaZSHZadB85GSZ+aTujDhltrHijomG6ZFQkf6uEejjJRdv3nHQxQP3zy/d
GMv1uWHEVK7IkFqmkemQpNdGtHAyXHt6T/k0WzEdYsBUGVRRwmS68Ek9oDxrj6L0
tMSBLjf2ZYOnlf9MKTMG87fhy6vNBhfZn+K9GLCXWfMOl5BWyZ1k1POXBdXOTG6V
/CI8qrk5yGKurFsRyZpa7/PosMALxqhShyZS9EHCItMuahmYNTEBPAnaJMPreQa+
1zYsVPmVhME98A/CHkOvZKOWBPhltL1DI1vaG02ujdOKSFd8e3sjaVXCH2In/473
XaLLSwi4633R0w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:29 2025 by rpki-client