Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json)
Hash identifier: A9eFSBprJKQG+XuNfkn0ZkD8M7AbJ1Y/OBA3hvKmSfU=
Subject key identifier: 10:80:A2:B0:D6:F2:70:F2:14:16:9B:E6:50:D7:43:40:20:27:97:01
Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Certificate serial: 0199FBEBF29227B60EB3F39009DC4D9CC00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:48 +0000
Manifest this update: Sun 19 Oct 2025 10:02:48 +0000
Manifest next update: Mon 20 Oct 2025 10:02:48 +0000
Files and hashes: 1: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: 7WjuAZ/O1nWRLCT9HY/V5S9h4xqGz9X30R9NHQCpy+k=)
2: hwl_pJftKoYgWaDLkyi1NUP4Iqo.roa (hash: zD6uA78lx0+tAtyuIqfvTt4SALf3UDD47V0kgwtFI/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f2:92:27:b6:0e:b3:f3:90:09:dc:4d:9c:c0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Validity
Not Before: Oct 19 10:02:48 2025 GMT
Not After : Oct 20 10:02:48 2025 GMT
Subject: CN=1080a2b0d6f270f214169be650d7434020279701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:04:fd:c7:59:32:e0:84:62:50:6f:bd:31:
83:ac:84:50:b6:fe:45:2a:78:8d:f2:7a:85:bd:70:
eb:bd:61:e2:df:d5:2f:f4:69:ce:5c:fd:07:cb:72:
a9:01:db:dd:b4:35:32:99:90:c7:3c:6e:06:39:5f:
4a:fb:fe:50:16:a7:27:30:b5:fe:42:08:2f:92:62:
3b:88:f5:5c:2d:8a:5d:7f:cc:f5:cf:7c:43:a8:00:
dc:6c:95:f0:1c:1e:a8:21:fa:81:7f:78:26:74:b4:
bf:2e:14:61:2a:4d:0f:bf:fc:b6:70:18:be:0a:2e:
32:13:84:e1:89:59:c6:5b:61:22:1a:e2:06:e0:00:
36:12:7e:f5:9d:dc:41:72:9f:b0:5b:a7:36:e4:de:
c4:28:08:d8:f2:21:c9:cc:dc:75:54:b4:c3:4b:1b:
aa:a9:e2:6d:d3:93:65:ef:ec:b7:a2:5c:c7:6d:f3:
89:b3:9c:ac:29:ee:22:6a:22:48:58:8e:87:94:03:
ae:d4:ff:a4:cd:c8:2d:5f:74:1c:fa:ff:a0:0d:16:
da:49:95:00:b2:1c:b9:4b:82:8f:8a:e6:ac:74:84:
67:99:e1:e6:54:f6:4d:cb:ec:42:a0:cd:ae:6c:48:
be:92:28:82:9b:6b:20:ae:ae:88:49:31:df:0f:6e:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:80:A2:B0:D6:F2:70:F2:14:16:9B:E6:50:D7:43:40:20:27:97:01
X509v3 Authority Key Identifier:
keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:fd:64:48:e5:bc:76:26:fe:69:df:0b:b9:21:c5:49:de:01:
88:47:7e:67:10:3e:6c:b3:c8:65:ac:6c:bf:09:ad:95:e5:21:
ac:93:5a:71:10:01:a7:85:ad:b9:52:d1:58:a0:82:cd:ea:e8:
33:f9:58:fd:eb:5b:24:88:f6:79:42:69:13:fe:dd:2d:c8:15:
5a:aa:f1:5d:6a:10:4a:a0:be:18:e8:df:ff:be:d3:58:60:d5:
90:ce:c0:84:4d:ea:ca:b7:02:4c:93:4b:aa:6c:97:89:a8:55:
49:5b:c3:77:23:d8:f1:1a:de:0d:30:a6:e2:e1:92:dc:95:29:
35:15:5d:9c:ea:36:fc:b8:76:ac:cc:dd:a7:37:97:1f:67:28:
01:49:80:fe:77:11:e5:3a:c2:ab:b7:09:7a:b8:16:f2:82:dc:
46:e6:5c:40:92:86:c1:28:7d:eb:dd:fb:13:00:00:95:6b:5b:
57:87:62:9e:a1:06:a5:a4:77:70:30:c5:bd:46:ce:21:34:3b:
48:94:25:58:a4:43:a5:cb:b5:f9:96:36:9a:0b:53:f3:ba:76:
d7:83:ee:8e:8e:6b:0e:d6:fe:45:b1:52:04:4d:cc:da:17:a2:
da:0a:3f:d7:c7:76:d7:d9:b9:a8:30:27:04:a9:23:6b:dd:72:
65:c6:53:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76/KSJ7YOs/OQCdxNnMALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYzNjMWJlZjE1ZjRiY2NjNGU3NDhjMDg5NTdlY2MyMjlh
MGYxZWYwHhcNMjUxMDE5MTAwMjQ4WhcNMjUxMDIwMTAwMjQ4WjAzMTEwLwYDVQQD
EygxMDgwYTJiMGQ2ZjI3MGYyMTQxNjliZTY1MGQ3NDM0MDIwMjc5NzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GgE/cdZMuCEYlBvvTGDrIRQtv5F
KniN8nqFvXDrvWHi39Uv9GnOXP0Hy3KpAdvdtDUymZDHPG4GOV9K+/5QFqcnMLX+
QggvkmI7iPVcLYpdf8z1z3xDqADcbJXwHB6oIfqBf3gmdLS/LhRhKk0Pv/y2cBi+
Ci4yE4ThiVnGW2EiGuIG4AA2En71ndxBcp+wW6c25N7EKAjY8iHJzNx1VLTDSxuq
qeJt05Nl7+y3olzHbfOJs5ysKe4iaiJIWI6HlAOu1P+kzcgtX3Qc+v+gDRbaSZUA
shy5S4KPiuasdIRnmeHmVPZNy+xCoM2ubEi+kiiCm2sgrq6ISTHfD26OPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCAorDW8nDyFBab5lDXQ0AgJ5cBMB8GA1UdIwQY
MBaAFBvDwb7xX0vMxOdIwIlX7MIpoPHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzhQQnZ2RmZTOHpFNTBqQWlWZnN3aW1nOGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iYzk0ZGYtNzI1OS00MmQxLTgyMmEt
M2Q5ODEwMDk4NzAzLzEvRzhQQnZ2RmZTOHpFNTBqQWlWZnN3aW1nOGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iYzk0ZGYtNzI1OS00MmQxLTgyMmEtM2Q5ODEwMDk4NzAz
LzEvRzhQQnZ2RmZTOHpFNTBqQWlWZnN3aW1nOGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuf1kSOW8
dib+ad8LuSHFSd4BiEd+ZxA+bLPIZaxsvwmtleUhrJNacRABp4WtuVLRWKCCzero
M/lY/etbJIj2eUJpE/7dLcgVWqrxXWoQSqC+GOjf/77TWGDVkM7AhE3qyrcCTJNL
qmyXiahVSVvDdyPY8RreDTCm4uGS3JUpNRVdnOo2/Lh2rMzdpzeXH2coAUmA/ncR
5TrCq7cJergW8oLcRuZcQJKGwSh96937EwAAlWtbV4dinqEGpaR3cDDFvUbOITQ7
SJQlWKRDpcu1+ZY2mgtT87p214Pujo5rDtb+RbFSBE3M2hei2go/18d219m5qDAn
BKkja91yZcZTGg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:42:00 2025 by rpki-client