Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier: Qq9hnEWsSTWCHxqiS6LCGmaWqiufo3GQShh0vA+FeVA=
Subject key identifier: F0:42:9A:53:AD:D9:30:51:0C:7B:38:5A:DC:1A:BF:B9:E4:FE:C0:16
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial: 019A00D9E0081B39C53A74E9B2702FFEC6B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 09:01:09 +0000
Manifest this update: Mon 20 Oct 2025 09:01:09 +0000
Manifest next update: Tue 21 Oct 2025 09:01:09 +0000
Files and hashes: 1: Kt54sJQgRqTUq_5CeKj_uNxTFL4.roa (hash: 4RVmGcZHz9ixKOs2qOpourGK4cJrBwsGs1fzppEGkHY=)
2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: AOWv5G6NV6hLokSr8vXbqYuDapcsfEjzKS5MDj0V3/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:d9:e0:08:1b:39:c5:3a:74:e9:b2:70:2f:fe:c6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Validity
Not Before: Oct 20 09:01:09 2025 GMT
Not After : Oct 21 09:01:09 2025 GMT
Subject: CN=f0429a53add930510c7b385adc1abfb9e4fec016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:65:c6:91:a7:db:dc:23:87:33:88:e1:0a:e8:
f7:c7:ac:fc:06:0b:82:55:41:1f:f3:55:f8:f6:41:
e7:4b:ce:16:d8:b4:57:d3:a0:f1:8a:24:5b:d4:17:
76:95:61:d2:f0:7b:41:1f:ab:8e:59:34:51:ee:a0:
f5:6a:bc:da:83:29:c9:f0:de:fd:24:1d:6b:8d:49:
c6:fc:88:98:f3:b2:83:a3:ad:bb:d7:c4:09:18:b4:
65:f7:43:84:bd:e9:95:d6:62:bf:a4:31:bd:dd:1b:
fe:90:96:61:48:12:9d:57:08:f4:0b:3d:82:3e:49:
dc:34:9b:03:ee:83:cb:33:b2:27:7d:70:ef:0a:3e:
52:c3:a7:42:42:e4:5a:5b:5c:ad:9f:94:1b:f8:0a:
65:ef:76:37:2b:73:f8:e1:43:9a:35:d9:7c:4e:de:
b1:bd:22:66:64:91:f5:38:77:9d:46:29:df:19:5a:
49:e5:12:48:8a:8c:1f:3b:20:c0:49:91:8c:e0:2a:
f3:58:76:2c:f4:d8:41:4a:ae:ac:e7:5c:52:fe:9e:
a0:e8:56:2f:d4:ee:b2:76:64:4e:97:f7:94:18:bd:
45:70:c0:6b:e0:2f:87:a0:76:6f:f7:7d:48:d8:22:
38:3c:89:40:2e:03:fa:2c:38:77:1f:c3:cf:47:b5:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:42:9A:53:AD:D9:30:51:0C:7B:38:5A:DC:1A:BF:B9:E4:FE:C0:16
X509v3 Authority Key Identifier:
keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c4:35:ca:15:30:16:48:41:17:df:ba:00:ca:ec:db:cf:a8:
1c:9e:80:ed:0f:25:b8:5b:88:48:20:4f:25:f0:b8:d1:72:25:
9d:b9:2b:69:53:9b:5a:75:5e:65:67:4d:4f:6b:1f:38:44:f9:
f3:8e:34:6c:a4:19:c4:68:e1:38:8d:24:44:a3:1c:38:88:b5:
bc:fb:9b:e6:38:c3:61:2a:43:3f:de:0d:09:0a:d3:25:e5:a7:
ff:c9:c3:26:b0:07:95:44:44:9f:14:1e:c1:c4:eb:d5:65:17:
68:78:24:64:6b:d6:33:c2:55:1e:75:66:6b:b9:e9:f1:34:dd:
4e:21:b1:38:72:0f:d8:d5:a0:ec:69:0d:47:ca:f8:8e:f7:de:
37:b2:42:6f:6a:05:75:91:10:e2:0c:b1:47:53:23:0c:66:fd:
28:4a:35:d6:e1:60:17:18:8e:5c:be:75:0e:12:0b:b7:f0:12:
9e:aa:27:3c:e9:51:b6:b0:cf:ce:ce:8a:6e:46:f3:0e:ee:1b:
ff:32:c9:78:0e:9b:9a:9d:1a:ce:37:2d:8c:c2:db:99:f5:8f:
0d:f6:f1:a7:12:51:c0:ce:e0:ab:10:53:c2:c5:b3:0c:fc:86:
70:e1:e8:87:b2:7c:e5:26:4d:91:28:11:bb:30:d4:cd:e2:39:
1e:cc:69:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2eAIGznFOnTpsnAv/sawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMDZkOTk0YTEyMTkyNTdhM2NlYzllZDkxY2QxODliYzNk
OTNiMGIwHhcNMjUxMDIwMDkwMTA5WhcNMjUxMDIxMDkwMTA5WjAzMTEwLwYDVQQD
EyhmMDQyOWE1M2FkZDkzMDUxMGM3YjM4NWFkYzFhYmZiOWU0ZmVjMDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32XGkafb3COHM4jhCuj3x6z8BguC
VUEf81X49kHnS84W2LRX06DxiiRb1Bd2lWHS8HtBH6uOWTRR7qD1arzagynJ8N79
JB1rjUnG/IiY87KDo62718QJGLRl90OEvemV1mK/pDG93Rv+kJZhSBKdVwj0Cz2C
PkncNJsD7oPLM7InfXDvCj5Sw6dCQuRaW1ytn5Qb+Apl73Y3K3P44UOaNdl8Tt6x
vSJmZJH1OHedRinfGVpJ5RJIiowfOyDASZGM4CrzWHYs9NhBSq6s51xS/p6g6FYv
1O6ydmROl/eUGL1FcMBr4C+HoHZv931I2CI4PIlALgP6LDh3H8PPR7WPQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBCmlOt2TBRDHs4Wtwav7nk/sAWMB8GA1UdIwQY
MBaAFIEG2ZShIZJXo87J7ZHNGJvD2TsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEt
YjM1NGI3OGNjOTY5LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy82OWRjNmEtZTkxZS00YjNhLTkzNGEtYjM1NGI3OGNjOTY5
LzEvZ1FiWmxLRWhrbGVqenNudGtjMFltOFBaT3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsQ1yhUw
FkhBF9+6AMrs28+oHJ6A7Q8luFuISCBPJfC40XIlnbkraVObWnVeZWdNT2sfOET5
8440bKQZxGjhOI0kRKMcOIi1vPub5jjDYSpDP94NCQrTJeWn/8nDJrAHlUREnxQe
wcTr1WUXaHgkZGvWM8JVHnVma7np8TTdTiGxOHIP2NWg7GkNR8r4jvfeN7JCb2oF
dZEQ4gyxR1MjDGb9KEo11uFgFxiOXL51DhILt/ASnqonPOlRtrDPzs6KbkbzDu4b
/zLJeA6bmp0azjctjMLbmfWPDfbxpxJRwM7gqxBTwsWzDPyGcOHoh7J85SZNkSgR
uzDUzeI5Hsxpug==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:36:30 2025 by rpki-client