Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
File: GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft (raw, json)
Hash identifier: gI7s0Of+cVM98jJbX9FRPSYei37U92zirgIEtCCsczc=
Subject key identifier: 8C:7E:12:E2:41:60:47:CB:D9:60:C3:C6:ED:E1:14:12:24:42:91:8F
Authority key identifier: 1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
Certificate issuer: /CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Certificate serial: 019A01B62484BD3A0178347AA1FCF986AD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
Manifest number: 0A45
Signing time: Mon 20 Oct 2025 13:01:45 +0000
Manifest this update: Mon 20 Oct 2025 13:01:45 +0000
Manifest next update: Tue 21 Oct 2025 13:01:45 +0000
Files and hashes: 1: GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl (hash: oUVLuqVRbAa6Bn6cvTzTVN3qfPo2p5khzAItL3sW7YA=)
2: sQzNar_4JseiL9UNqmWgBSd_A68.roa (hash: 6EjRuBumMEH87fOFnzWurdMoQt/hXzQEoZOF6qbEThc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:24:84:bd:3a:01:78:34:7a:a1:fc:f9:86:ad:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Validity
Not Before: Oct 20 13:01:45 2025 GMT
Not After : Oct 21 13:01:45 2025 GMT
Subject: CN=8c7e12e2416047cbd960c3c6ede114122442918f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:56:ca:42:6a:6b:33:75:5c:3e:3a:3b:c8:
4c:59:af:13:64:8c:ca:12:42:c9:5f:d9:c1:85:8d:
d1:f7:2d:5d:30:9d:36:58:dc:e8:32:5c:0c:f8:3d:
fb:48:af:bb:41:49:9c:17:1a:83:9e:88:42:54:2f:
70:d8:09:1c:d0:80:77:de:76:48:9a:1f:6f:29:e4:
f9:5b:2d:61:72:c0:43:70:e9:75:c4:a5:75:93:67:
8e:fb:e6:03:f1:5c:80:b8:67:ce:9c:a7:eb:05:18:
e8:7e:be:39:ba:92:ba:09:97:9e:50:bd:24:9b:7d:
55:67:99:31:4e:9e:be:81:d5:2e:a9:ae:e3:4a:13:
11:6e:03:b5:7a:dc:4f:40:01:ec:47:af:56:88:3c:
72:60:c5:b4:58:a6:f6:0b:87:9d:76:10:a0:d7:14:
96:3b:63:43:b2:21:8c:52:3d:c6:23:a6:ba:a6:2d:
f4:c8:54:8f:83:b9:ca:ab:b6:14:c9:b4:6f:f6:f9:
a7:90:a7:9f:9c:bf:6d:9c:bc:b2:95:e8:2a:08:2a:
1f:59:3f:67:54:5f:3c:62:8a:8b:35:52:92:ca:1c:
3d:e8:07:30:9c:3d:0c:7d:47:e3:fd:d6:e3:dd:90:
28:03:0d:e5:65:6d:34:52:42:34:f4:49:d9:68:f5:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7E:12:E2:41:60:47:CB:D9:60:C3:C6:ED:E1:14:12:24:42:91:8F
X509v3 Authority Key Identifier:
keyid:1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:26:7d:c9:c1:3a:47:13:06:dd:9e:d9:26:b5:9c:21:46:44:
28:4c:2c:7f:7e:26:6c:6b:9e:f3:57:76:37:1c:86:b1:e7:e0:
5f:56:f4:3f:00:c6:e4:ea:27:4c:58:22:aa:8d:82:9e:f4:59:
3a:6c:5e:4a:46:67:0f:c7:83:2e:72:78:e9:63:dd:e3:9a:8e:
65:a6:d8:c6:a5:f1:b7:31:7e:03:0b:5c:34:e7:07:8c:a0:60:
a7:9e:56:89:1c:ec:d2:30:7c:78:54:93:af:8d:fc:1e:c9:04:
98:62:98:74:2c:1c:27:25:80:96:d2:ef:27:8d:71:7c:e8:bc:
0c:84:8d:00:9c:dc:82:4d:fd:bf:c2:68:56:ef:6d:1b:e0:c1:
d7:f5:d4:46:c3:dc:94:5c:88:00:e7:29:c2:ab:22:0b:5a:c0:
65:c1:61:75:c4:ff:46:0c:a5:f3:e0:50:b2:d7:97:ac:81:79:
08:e0:f0:37:32:6f:70:28:d1:c4:f4:80:25:d2:14:7f:0d:34:
6b:17:46:79:33:76:4d:07:1c:a5:2d:44:0e:f9:61:2c:93:c6:
9b:3c:66:da:12:42:78:00:82:7f:93:22:1b:07:c2:7c:95:47:
05:34:73:88:e0:b9:b6:14:fa:41:50:7f:66:13:e1:4b:3e:e7:
88:98:2d:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtiSEvToBeDR6ofz5hq11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYzI0NTZjNzBmOGFhYTUzYmQ4OTQwZmUyM2YxM2NmYTI3
MGU3NDgwHhcNMjUxMDIwMTMwMTQ1WhcNMjUxMDIxMTMwMTQ1WjAzMTEwLwYDVQQD
Eyg4YzdlMTJlMjQxNjA0N2NiZDk2MGMzYzZlZGUxMTQxMjI0NDI5MThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13pWykJqazN1XD46O8hMWa8TZIzK
EkLJX9nBhY3R9y1dMJ02WNzoMlwM+D37SK+7QUmcFxqDnohCVC9w2Akc0IB33nZI
mh9vKeT5Wy1hcsBDcOl1xKV1k2eO++YD8VyAuGfOnKfrBRjofr45upK6CZeeUL0k
m31VZ5kxTp6+gdUuqa7jShMRbgO1etxPQAHsR69WiDxyYMW0WKb2C4eddhCg1xSW
O2NDsiGMUj3GI6a6pi30yFSPg7nKq7YUybRv9vmnkKefnL9tnLyylegqCCofWT9n
VF88YoqLNVKSyhw96AcwnD0MfUfj/dbj3ZAoAw3lZW00UkI09EnZaPXEVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIx+EuJBYEfL2WDDxu3hFBIkQpGPMB8GA1UdIwQY
MBaAFBrCRWxw+KqlO9iUD+I/E8+icOdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mZjViODMtOWMyMC00ZDk3LTk3Yzct
NWExZDU1ODQzNzhkLzEvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mZjViODMtOWMyMC00ZDk3LTk3YzctNWExZDU1ODQzNzhk
LzEvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyZ9ycE6
RxMG3Z7ZJrWcIUZEKEwsf34mbGue81d2NxyGsefgX1b0PwDG5OonTFgiqo2CnvRZ
OmxeSkZnD8eDLnJ46WPd45qOZabYxqXxtzF+AwtcNOcHjKBgp55WiRzs0jB8eFST
r438HskEmGKYdCwcJyWAltLvJ41xfOi8DISNAJzcgk39v8JoVu9tG+DB1/XURsPc
lFyIAOcpwqsiC1rAZcFhdcT/Rgyl8+BQsteXrIF5CODwNzJvcCjRxPSAJdIUfw00
axdGeTN2TQccpS1EDvlhLJPGmzxm2hJCeACCf5MiGwfCfJVHBTRziOC5thT6QVB/
ZhPhSz7niJgt7g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:37 2025 by rpki-client