Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json)
Hash identifier: jfKgNvt3zitv1kiN9iv95w1QdytfEYVwdHKPAZCIXEw=
Subject key identifier: AC:99:8B:86:E3:85:B8:7A:AF:2D:A0:46:5D:BF:78:DE:44:AD:CE:17
Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Certificate serial: 0199FD6B2990010A38ADE4D939F88B589B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
Manifest number: 0C4D
Signing time: Sun 19 Oct 2025 17:01:22 +0000
Manifest this update: Sun 19 Oct 2025 17:01:22 +0000
Manifest next update: Mon 20 Oct 2025 17:01:22 +0000
Files and hashes: 1: 6BQqkGrM3gw54Pj0HSmQY8wMCck.roa (hash: Ar7D9TbLcSVMAE2S4iadlofqY6yoHjuB0ZjyXAJSQDg=)
2: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: 5OrbkbqZmJtaEiFAiwOiBh+fjrfWpCgl1qWrxff3OZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:29:90:01:0a:38:ad:e4:d9:39:f8:8b:58:9b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Validity
Not Before: Oct 19 17:01:22 2025 GMT
Not After : Oct 20 17:01:22 2025 GMT
Subject: CN=ac998b86e385b87aaf2da0465dbf78de44adce17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:9f:20:ed:23:ad:83:7c:e7:e8:9a:85:bf:
66:0b:02:b9:10:97:62:e0:72:83:29:b7:31:75:5e:
65:d5:b6:cb:b1:d8:4e:d5:33:de:c4:b5:c9:37:6a:
ca:c9:fa:bb:e9:19:3a:59:a0:c9:a3:64:e3:c8:4a:
b3:ea:74:b8:9d:91:53:90:a7:da:4b:a2:cf:24:1a:
a3:01:dc:ec:ef:85:2a:24:fc:95:db:d8:02:82:be:
88:23:0d:ca:35:92:8a:82:b2:dc:d2:fc:0f:9a:3d:
74:56:f1:20:07:43:a9:2a:01:31:f5:8f:a7:98:08:
de:78:ec:ee:c4:28:2c:2b:1f:e8:ee:5e:9b:76:fe:
fb:35:4e:12:22:e2:70:31:8b:80:fe:50:31:a8:aa:
3f:32:f0:40:e6:3d:65:15:c2:d3:b8:8f:e5:4a:db:
d2:88:02:45:33:57:29:6b:43:af:c8:91:98:1f:b3:
ee:1c:02:f3:88:a4:a5:6a:5f:f5:7a:af:e1:12:60:
73:08:7f:1e:b9:67:d1:ba:1e:44:2b:66:be:d8:4d:
85:be:a5:84:0a:87:fa:9d:ff:1b:04:61:35:9e:de:
08:68:89:7c:ef:ab:61:d8:40:f7:cc:09:be:65:2c:
b5:35:e4:3a:13:23:63:1e:21:2d:b1:0e:4f:46:f0:
3a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:99:8B:86:E3:85:B8:7A:AF:2D:A0:46:5D:BF:78:DE:44:AD:CE:17
X509v3 Authority Key Identifier:
keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d5:29:cf:b8:3a:ef:6f:4b:2f:22:cb:a3:83:33:b3:e0:b3:
5e:dd:3f:07:00:70:50:ff:4b:52:a5:70:09:2a:9f:1d:6f:2d:
34:92:cb:53:d5:d3:2d:27:1f:69:9d:c3:6d:da:36:b0:90:c0:
e4:07:c3:05:d2:f6:61:26:d7:c6:b6:62:16:8a:25:54:92:9c:
83:48:52:33:70:20:39:da:71:1e:12:eb:a1:89:82:7e:1c:b2:
2d:bd:77:eb:b5:a7:70:70:17:b1:39:a4:99:91:a0:ba:91:d4:
6c:f8:cc:8e:03:82:aa:85:93:82:4e:b6:fe:55:96:fa:60:b9:
0e:8e:a0:2f:79:81:a8:26:ae:97:c5:be:4c:0a:59:3d:bf:75:
77:51:af:b4:b7:c5:29:21:6b:d1:6f:df:7e:b6:8a:10:0e:d0:
b6:9f:cc:13:3f:e8:f7:9f:79:87:83:83:6c:0c:2e:32:68:01:
af:52:6b:7d:d9:7c:85:76:b2:11:a0:9d:a1:9f:af:67:9b:70:
a0:2b:aa:0a:70:48:63:a6:47:52:dd:8d:98:a0:df:6a:c3:63:
94:4d:54:15:46:bc:dc:21:f6:4d:f6:b0:ed:58:6a:60:c9:0a:
b8:77:f5:6b:d6:b9:bf:ec:68:f4:8c:f6:4a:e6:62:5c:41:9d:
90:7a:1a:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9aymQAQo4reTZOfiLWJuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMzEyNDBiZGFhN2MxMmU4MTBhMTczOGJjZGY3NWE3NDY1
MzBiYzEwHhcNMjUxMDE5MTcwMTIyWhcNMjUxMDIwMTcwMTIyWjAzMTEwLwYDVQQD
EyhhYzk5OGI4NmUzODViODdhYWYyZGEwNDY1ZGJmNzhkZTQ0YWRjZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMyfIO0jrYN85+iahb9mCwK5EJdi
4HKDKbcxdV5l1bbLsdhO1TPexLXJN2rKyfq76Rk6WaDJo2TjyEqz6nS4nZFTkKfa
S6LPJBqjAdzs74UqJPyV29gCgr6IIw3KNZKKgrLc0vwPmj10VvEgB0OpKgEx9Y+n
mAjeeOzuxCgsKx/o7l6bdv77NU4SIuJwMYuA/lAxqKo/MvBA5j1lFcLTuI/lStvS
iAJFM1cpa0OvyJGYH7PuHALziKSlal/1eq/hEmBzCH8euWfRuh5EK2a+2E2FvqWE
Cof6nf8bBGE1nt4IaIl876th2ED3zAm+ZSy1NeQ6EyNjHiEtsQ5PRvA6+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyZi4bjhbh6ry2gRl2/eN5Erc4XMB8GA1UdIwQY
MBaAFIExJAvap8EugQoXOLzfdadGUwvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUt
ZTllMDIzNjA5YzdmLzEvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUtZTllMDIzNjA5Yzdm
LzEvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadUpz7g6
729LLyLLo4Mzs+CzXt0/BwBwUP9LUqVwCSqfHW8tNJLLU9XTLScfaZ3Dbdo2sJDA
5AfDBdL2YSbXxrZiFoolVJKcg0hSM3AgOdpxHhLroYmCfhyyLb1367WncHAXsTmk
mZGgupHUbPjMjgOCqoWTgk62/lWW+mC5Do6gL3mBqCaul8W+TApZPb91d1GvtLfF
KSFr0W/ffraKEA7Qtp/MEz/o9595h4ODbAwuMmgBr1Jrfdl8hXayEaCdoZ+vZ5tw
oCuqCnBIY6ZHUt2NmKDfasNjlE1UFUa83CH2Tfaw7VhqYMkKuHf1a9a5v+xo9Iz2
SuZiXEGdkHoaFw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:13:19 2025 by rpki-client