Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
File: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft (raw, json)
Hash identifier: +9RmzM5PuZLoQ+F3zHV883bBDsm6reOlI3qoeVeJlGc=
Subject key identifier: AA:68:55:DE:DE:2A:F4:AE:3B:C7:76:F3:B4:6B:39:04:2A:26:F6:5D
Authority key identifier: 9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
Certificate issuer: /CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Certificate serial: 0199FF5959BDCBE96092717A7BB0FBEDAE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
Manifest number: 0488
Signing time: Mon 20 Oct 2025 02:01:09 +0000
Manifest this update: Mon 20 Oct 2025 02:01:09 +0000
Manifest next update: Tue 21 Oct 2025 02:01:09 +0000
Files and hashes: 1: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl (hash: r352lcJT2bNuNpoQbTbYMjn1++PA8Iw6RCI4c0xjGOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:59:bd:cb:e9:60:92:71:7a:7b:b0:fb:ed:ae:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Validity
Not Before: Oct 20 02:01:09 2025 GMT
Not After : Oct 21 02:01:09 2025 GMT
Subject: CN=aa6855dede2af4ae3bc776f3b46b39042a26f65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e0:d7:70:e8:89:c9:70:2a:0b:9a:9a:b5:a8:
29:0b:e8:41:da:d5:02:7c:ca:36:a2:17:b7:ca:8b:
a5:85:ed:0c:f5:0d:af:b5:bd:96:85:e4:a8:0a:60:
d0:3c:e2:d6:62:0e:ff:65:6c:e4:55:9d:d6:cc:e8:
fb:97:99:7d:55:ef:ec:92:10:90:30:63:00:c0:e6:
e9:2d:72:18:05:58:9d:3e:a9:07:8f:e2:1c:8f:87:
d6:6b:82:04:45:3b:a4:1f:15:28:fc:49:75:a1:89:
4c:5e:ab:0f:20:e4:bb:b1:f1:00:d0:29:08:ca:e7:
3f:fe:e7:86:c2:fd:9d:51:45:b7:3b:b7:51:66:b0:
dd:f2:b0:1a:bc:61:da:f5:d3:1d:d5:21:6c:69:16:
8c:92:ec:50:28:22:d9:9f:01:9e:4b:6d:06:af:76:
ca:09:53:11:5d:53:01:6f:7f:cf:ec:58:2c:94:a3:
20:bb:cc:25:ed:1e:cd:f8:00:35:bb:2a:55:63:a7:
ff:0d:4f:24:63:65:8d:d6:ca:1e:54:ef:68:d9:2c:
a2:4e:98:f0:a0:91:5a:04:55:d2:ff:0d:83:1f:bd:
f5:11:2c:17:9c:25:7e:30:1f:4f:14:d7:38:8b:66:
a5:8e:a7:fa:31:eb:b0:70:85:a9:fc:9d:32:c2:e9:
22:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:68:55:DE:DE:2A:F4:AE:3B:C7:76:F3:B4:6B:39:04:2A:26:F6:5D
X509v3 Authority Key Identifier:
keyid:9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2c:4f:4d:65:51:1a:36:89:0b:f9:ba:c5:33:bc:77:f9:82:
1a:91:00:d2:4d:c9:8e:20:e0:55:4f:9b:ea:2d:50:f6:02:40:
d0:95:e0:a7:42:39:80:8c:4d:b9:17:47:80:57:64:ba:13:00:
f6:5a:19:ba:a3:81:97:33:1f:86:f9:e7:15:df:32:4a:c6:49:
52:39:5f:ed:cf:d2:6e:55:51:03:b0:a3:e3:f2:9a:0e:76:de:
71:61:20:9d:6e:b0:4e:fb:b0:40:fb:6f:de:ee:9f:18:28:b2:
ee:b2:1e:9f:c0:f2:de:eb:5e:1c:53:46:14:95:a1:24:ea:4b:
df:4d:59:49:29:06:01:61:1c:51:db:77:d7:98:ac:02:9a:2d:
99:f4:66:61:d9:5f:c3:79:28:f1:90:0e:b5:29:b9:6d:a2:bd:
36:01:3e:7d:bb:dd:40:c5:46:69:f1:11:82:08:66:10:ee:cc:
69:95:b0:23:99:7d:cc:97:71:dc:17:c6:18:a3:a9:6f:18:c3:
37:5d:90:ed:5d:9e:6a:49:c0:9f:56:1e:78:71:9d:40:b4:07:
8b:4c:46:ba:5f:1a:25:6d:f7:66:29:04:5a:6e:fd:a3:db:4f:
18:a8:7d:c5:f5:71:ec:17:62:5d:a4:84:e7:fc:6b:52:e1:7e:
43:bb:8e:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WVm9y+lgknF6e7D77a6NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTFiMzM2MDE3N2EwMGJjM2RjNTc0M2UwMjYzMjg0NjA0
ZjliNzQwHhcNMjUxMDIwMDIwMTA5WhcNMjUxMDIxMDIwMTA5WjAzMTEwLwYDVQQD
EyhhYTY4NTVkZWRlMmFmNGFlM2JjNzc2ZjNiNDZiMzkwNDJhMjZmNjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ODXcOiJyXAqC5qatagpC+hB2tUC
fMo2ohe3youlhe0M9Q2vtb2WheSoCmDQPOLWYg7/ZWzkVZ3WzOj7l5l9Ve/skhCQ
MGMAwObpLXIYBVidPqkHj+Icj4fWa4IERTukHxUo/El1oYlMXqsPIOS7sfEA0CkI
yuc//ueGwv2dUUW3O7dRZrDd8rAavGHa9dMd1SFsaRaMkuxQKCLZnwGeS20Gr3bK
CVMRXVMBb3/P7FgslKMgu8wl7R7N+AA1uypVY6f/DU8kY2WN1soeVO9o2SyiTpjw
oJFaBFXS/w2DH731ESwXnCV+MB9PFNc4i2aljqf6MeuwcIWp/J0ywukijwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpoVd7eKvSuO8d287RrOQQqJvZdMB8GA1UdIwQY
MBaAFJ/hszYBd6ALw9xXQ+AmMoRgT5t0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1Hek5nRjNvQXZEM0ZkRDRDWXloR0JQbTNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lOWZiNjEtYjU2Ni00ZjM2LTk1Yzkt
Zjk3NWVhNGUzNjc0LzEvbi1Hek5nRjNvQXZEM0ZkRDRDWXloR0JQbTNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lOWZiNjEtYjU2Ni00ZjM2LTk1YzktZjk3NWVhNGUzNjc0
LzEvbi1Hek5nRjNvQXZEM0ZkRDRDWXloR0JQbTNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuCxPTWVR
GjaJC/m6xTO8d/mCGpEA0k3JjiDgVU+b6i1Q9gJA0JXgp0I5gIxNuRdHgFdkuhMA
9loZuqOBlzMfhvnnFd8ySsZJUjlf7c/SblVRA7Cj4/KaDnbecWEgnW6wTvuwQPtv
3u6fGCiy7rIen8Dy3uteHFNGFJWhJOpL301ZSSkGAWEcUdt315isApotmfRmYdlf
w3ko8ZAOtSm5baK9NgE+fbvdQMVGafERgghmEO7MaZWwI5l9zJdx3BfGGKOpbxjD
N12Q7V2eaknAn1YeeHGdQLQHi0xGul8aJW33ZikEWm79o9tPGKh9xfVx7BdiXaSE
5/xrUuF+Q7uOvw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:21:05 2025 by rpki-client