Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
File: gU3w5sDcpazuCDqMcwTUXz0z1W0.mft (raw, json)
Hash identifier: zRLcGbxtENEZ7lsiL45Tei5LDehiynHvy68O2/CR0ac=
Subject key identifier: 02:AA:8D:7F:0D:11:0E:BD:CB:7F:5B:60:94:95:8C:8E:F7:9C:29:78
Authority key identifier: 81:4D:F0:E6:C0:DC:A5:AC:EE:08:3A:8C:73:04:D4:5F:3D:33:D5:6D
Certificate issuer: /CN=814df0e6c0dca5acee083a8c7304d45f3d33d56d
Certificate serial: 0199FDDA4AA7C80AAB89B9717D2E1384A188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
Manifest number: 0DC3
Signing time: Sun 19 Oct 2025 19:02:45 +0000
Manifest this update: Sun 19 Oct 2025 19:02:45 +0000
Manifest next update: Mon 20 Oct 2025 19:02:45 +0000
Files and hashes: 1: gU3w5sDcpazuCDqMcwTUXz0z1W0.crl (hash: HFoJzJUZpdYx6BVu8ASsX+oKmwDXhRXHYLVcgquwxis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:4a:a7:c8:0a:ab:89:b9:71:7d:2e:13:84:a1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814df0e6c0dca5acee083a8c7304d45f3d33d56d
Validity
Not Before: Oct 19 19:02:45 2025 GMT
Not After : Oct 20 19:02:45 2025 GMT
Subject: CN=02aa8d7f0d110ebdcb7f5b6094958c8ef79c2978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:69:31:02:db:5d:84:ff:fd:d4:61:e3:6c:
e7:15:26:61:60:c5:c7:89:f0:58:10:e8:ee:73:4b:
06:6e:b0:1d:da:d8:c3:70:63:c2:3b:07:0c:f0:41:
e4:f3:3c:d1:2f:5e:98:38:09:77:48:24:05:1a:a2:
a4:bc:fb:7f:94:61:d2:85:eb:72:3b:f6:86:f1:64:
fa:0d:87:bd:8f:cf:05:16:b0:ba:d5:e5:da:03:6e:
98:a8:d6:36:7b:8a:ab:20:6d:14:6a:d1:50:a0:fe:
f5:b4:76:9c:60:56:3e:97:7b:29:2e:cc:a5:4e:32:
28:fd:44:22:34:5a:68:9e:b6:6c:b3:fb:8b:0a:4a:
85:cc:90:9f:7b:dd:c2:97:f2:21:f8:87:d0:a7:b0:
38:c8:03:48:80:d0:1b:7a:66:12:b4:a7:4d:fa:0d:
e6:1c:22:e6:41:52:dc:b5:4c:99:2c:22:47:3e:f7:
98:5c:23:7a:36:a2:a1:2b:84:59:7f:68:4a:ec:17:
41:24:a9:4b:97:5c:da:25:af:ba:58:4a:eb:c7:8f:
e2:af:52:e9:64:f7:d9:2b:dc:73:66:db:a2:e3:07:
c8:b9:bf:bc:4f:ef:5a:03:26:68:cb:d4:87:c0:d2:
e0:02:cb:3f:9b:22:6e:c4:23:ed:3f:d6:80:08:1b:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AA:8D:7F:0D:11:0E:BD:CB:7F:5B:60:94:95:8C:8E:F7:9C:29:78
X509v3 Authority Key Identifier:
keyid:81:4D:F0:E6:C0:DC:A5:AC:EE:08:3A:8C:73:04:D4:5F:3D:33:D5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:88:1c:24:24:0f:0d:30:dc:9c:70:87:b8:85:93:33:2b:8e:
97:34:fa:39:17:10:73:79:a5:aa:5a:45:63:6a:2e:61:f3:0f:
b6:f7:ca:ab:a3:71:bc:a9:4c:21:9e:fa:27:db:4e:8e:cf:ea:
9e:a7:e6:76:a8:84:53:01:4e:e7:25:a3:7d:43:2a:ea:00:5f:
2c:0a:e3:26:bd:3f:5c:f4:6d:ca:64:f1:7e:80:e2:8b:fa:04:
92:8b:37:f7:ec:24:98:dc:15:9f:e3:e1:26:53:15:8b:8c:84:
a8:d2:ec:ae:93:b5:82:71:86:01:58:42:3f:09:15:ad:84:b2:
4b:b9:7c:77:f7:c5:aa:cb:a7:5e:94:01:79:35:c4:93:65:08:
a0:52:fe:6a:4e:a9:f3:13:e7:34:3a:94:e2:4a:96:e5:08:a7:
54:6e:2c:cb:c1:01:45:a1:86:39:37:14:55:31:bc:3c:fb:88:
c1:2b:43:6f:02:fc:ef:e5:e9:a1:7b:38:04:f9:6a:bd:f9:f8:
2a:d4:6c:24:fc:1c:b7:d5:7c:59:23:be:4d:e6:7c:20:1d:57:
38:a3:9c:00:57:d9:0b:9c:07:c4:97:1b:90:42:dc:b8:8b:43:
01:b1:5b:1e:91:df:26:4a:f0:b7:93:bf:33:c3:b7:be:d1:fd:
84:d4:22:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92kqnyAqriblxfS4ThKGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNGRmMGU2YzBkY2E1YWNlZTA4M2E4YzczMDRkNDVmM2Qz
M2Q1NmQwHhcNMjUxMDE5MTkwMjQ1WhcNMjUxMDIwMTkwMjQ1WjAzMTEwLwYDVQQD
EygwMmFhOGQ3ZjBkMTEwZWJkY2I3ZjViNjA5NDk1OGM4ZWY3OWMyOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjxpMQLbXYT//dRh42znFSZhYMXH
ifBYEOjuc0sGbrAd2tjDcGPCOwcM8EHk8zzRL16YOAl3SCQFGqKkvPt/lGHShety
O/aG8WT6DYe9j88FFrC61eXaA26YqNY2e4qrIG0UatFQoP71tHacYFY+l3spLsyl
TjIo/UQiNFponrZss/uLCkqFzJCfe93Cl/Ih+IfQp7A4yANIgNAbemYStKdN+g3m
HCLmQVLctUyZLCJHPveYXCN6NqKhK4RZf2hK7BdBJKlLl1zaJa+6WErrx4/ir1Lp
ZPfZK9xzZtui4wfIub+8T+9aAyZoy9SHwNLgAss/myJuxCPtP9aACBtv7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKqjX8NEQ69y39bYJSVjI73nCl4MB8GA1UdIwQY
MBaAFIFN8ObA3KWs7gg6jHME1F89M9VtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1UzdzVzRGNwYXp1Q0RxTWN3VFVYejB6MVcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MTQwZWUtNmZlZi00NmFjLWJlMzIt
ZDBkMmYyY2E4Y2JjLzEvZ1UzdzVzRGNwYXp1Q0RxTWN3VFVYejB6MVcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81MTQwZWUtNmZlZi00NmFjLWJlMzItZDBkMmYyY2E4Y2Jj
LzEvZ1UzdzVzRGNwYXp1Q0RxTWN3VFVYejB6MVcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYgcJCQP
DTDcnHCHuIWTMyuOlzT6ORcQc3mlqlpFY2ouYfMPtvfKq6NxvKlMIZ76J9tOjs/q
nqfmdqiEUwFO5yWjfUMq6gBfLArjJr0/XPRtymTxfoDii/oEkos39+wkmNwVn+Ph
JlMVi4yEqNLsrpO1gnGGAVhCPwkVrYSyS7l8d/fFqsunXpQBeTXEk2UIoFL+ak6p
8xPnNDqU4kqW5QinVG4sy8EBRaGGOTcUVTG8PPuIwStDbwL87+XpoXs4BPlqvfn4
KtRsJPwct9V8WSO+TeZ8IB1XOKOcAFfZC5wHxJcbkELcuItDAbFbHpHfJkrwt5O/
M8O3vtH9hNQitQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:13:21 2025 by rpki-client