Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
File: gbv0m8K-YG6m9Ivb-WJX3natfMA.mft (raw, json)
Hash identifier: X0sxArgsQDIX9wzt6SrEwFJN3BSLGvgckaFdu6MadTk=
Subject key identifier: 27:7C:CE:46:D2:20:B9:07:B8:0F:C4:E1:F7:25:5E:96:A6:2C:A5:EC
Authority key identifier: 81:BB:F4:9B:C2:BE:60:6E:A6:F4:8B:DB:F9:62:57:DE:76:AD:7C:C0
Certificate issuer: /CN=81bbf49bc2be606ea6f48bdbf96257de76ad7cc0
Certificate serial: 0199FBEB044A326C3EB09401BA793C8F1BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:47 +0000
Manifest this update: Sun 19 Oct 2025 10:01:47 +0000
Manifest next update: Mon 20 Oct 2025 10:01:47 +0000
Files and hashes: 1: gbv0m8K-YG6m9Ivb-WJX3natfMA.crl (hash: /sxJCVZi0KGGWfxKtLZiKoDVzI4fU9187674ZsbAQrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:04:4a:32:6c:3e:b0:94:01:ba:79:3c:8f:1b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81bbf49bc2be606ea6f48bdbf96257de76ad7cc0
Validity
Not Before: Oct 19 10:01:47 2025 GMT
Not After : Oct 20 10:01:47 2025 GMT
Subject: CN=277cce46d220b907b80fc4e1f7255e96a62ca5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:94:07:4b:a3:59:38:1a:1d:e9:1a:5b:20:09:
36:26:f5:9d:34:f7:0f:55:22:50:4e:9c:ac:3f:b8:
87:94:6b:7a:2b:27:cc:a7:0a:69:7a:95:05:7c:a4:
0d:72:2e:5f:9d:3f:69:e3:e8:2d:1e:a2:4c:8a:3b:
0e:95:f1:9e:49:bd:ef:44:5d:78:5a:fd:6d:c6:f9:
d7:e6:2d:02:09:ef:8c:d3:17:6c:77:b4:32:9d:ae:
49:32:ab:77:35:60:ff:25:e2:f6:87:d1:64:63:f9:
ac:8e:00:ff:82:e1:7a:92:38:72:b3:81:1d:82:f6:
f3:50:6d:9f:17:26:bf:19:ae:93:47:fc:03:89:5d:
86:90:43:8c:f1:c6:68:61:00:eb:3a:e3:35:7d:ad:
65:1a:1e:8b:e5:0f:eb:56:c1:3b:09:b5:73:e9:3b:
93:3f:86:d3:4c:33:d7:5f:3f:62:2d:71:03:59:a0:
11:08:cd:40:7f:ec:19:28:79:bb:cd:d1:7a:2d:af:
d4:c3:16:4e:25:00:c9:8e:cf:e0:e3:f9:ad:2f:c7:
b6:08:a9:9b:d2:da:86:54:2c:ac:ca:32:56:89:71:
15:aa:24:1b:9b:c3:6a:b4:93:93:65:5a:8e:55:e7:
ef:e3:b8:92:f1:56:28:51:10:cc:48:2f:82:a3:95:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7C:CE:46:D2:20:B9:07:B8:0F:C4:E1:F7:25:5E:96:A6:2C:A5:EC
X509v3 Authority Key Identifier:
keyid:81:BB:F4:9B:C2:BE:60:6E:A6:F4:8B:DB:F9:62:57:DE:76:AD:7C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b7:1a:a5:01:bd:78:8c:1d:3d:d9:2d:6d:be:f6:9f:61:af:
b4:fa:9d:41:f7:96:22:f3:2c:51:ca:8d:ad:79:00:06:cf:33:
f7:f8:68:df:82:79:a7:2b:b5:62:cd:ef:5b:73:cd:34:9e:00:
5b:28:8c:15:b2:eb:5e:ae:39:f5:01:5e:b0:e8:71:e1:d1:73:
71:ea:b3:95:35:2f:44:01:98:9b:37:e6:2d:58:c7:6a:da:f8:
34:db:d2:5e:a8:ad:63:25:65:32:28:aa:ad:26:85:4f:b2:14:
e1:a9:ce:54:f1:96:98:94:54:17:3d:35:aa:54:2f:0c:3f:4e:
e3:0a:3a:aa:15:18:ba:50:f9:97:75:40:6e:74:fb:45:d9:b4:
39:d8:59:41:08:12:21:41:68:b0:89:ed:86:43:df:76:8f:42:
62:35:ea:3f:0e:d0:c7:18:f8:c0:14:8a:e8:69:d5:d5:cb:d3:
29:20:62:43:49:df:c5:80:d1:c3:7c:19:da:da:bb:2a:56:82:
cb:8e:e7:3b:bb:a9:e4:b3:1b:71:3d:22:4d:8a:40:93:a8:4f:
85:15:c5:42:58:f6:cd:d1:09:d8:b8:00:4e:83:2f:7e:7e:cf:
4c:d8:52:0c:28:77:cb:de:c3:95:2c:35:42:fc:09:31:be:a7:
eb:1d:4a:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76wRKMmw+sJQBunk8jxvXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYmJmNDliYzJiZTYwNmVhNmY0OGJkYmY5NjI1N2RlNzZh
ZDdjYzAwHhcNMjUxMDE5MTAwMTQ3WhcNMjUxMDIwMTAwMTQ3WjAzMTEwLwYDVQQD
EygyNzdjY2U0NmQyMjBiOTA3YjgwZmM0ZTFmNzI1NWU5NmE2MmNhNWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypQHS6NZOBod6RpbIAk2JvWdNPcP
VSJQTpysP7iHlGt6KyfMpwppepUFfKQNci5fnT9p4+gtHqJMijsOlfGeSb3vRF14
Wv1txvnX5i0CCe+M0xdsd7Qyna5JMqt3NWD/JeL2h9FkY/msjgD/guF6kjhys4Ed
gvbzUG2fFya/Ga6TR/wDiV2GkEOM8cZoYQDrOuM1fa1lGh6L5Q/rVsE7CbVz6TuT
P4bTTDPXXz9iLXEDWaARCM1Af+wZKHm7zdF6La/UwxZOJQDJjs/g4/mtL8e2CKmb
0tqGVCysyjJWiXEVqiQbm8NqtJOTZVqOVefv47iS8VYoURDMSC+Co5XiwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCd8zkbSILkHuA/E4fclXpamLKXsMB8GA1UdIwQY
MBaAFIG79JvCvmBupvSL2/liV952rXzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2J2MG04Sy1ZRzZtOUl2Yi1XSlgzbmF0Zk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84NjNlZWUtNzcxNC00YmM0LTkyNjgt
NDE2OTQyMDJkZTY4LzEvZ2J2MG04Sy1ZRzZtOUl2Yi1XSlgzbmF0Zk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS84NjNlZWUtNzcxNC00YmM0LTkyNjgtNDE2OTQyMDJkZTY4
LzEvZ2J2MG04Sy1ZRzZtOUl2Yi1XSlgzbmF0Zk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrcapQG9
eIwdPdktbb72n2GvtPqdQfeWIvMsUcqNrXkABs8z9/ho34J5pyu1Ys3vW3PNNJ4A
WyiMFbLrXq459QFesOhx4dFzceqzlTUvRAGYmzfmLVjHatr4NNvSXqitYyVlMiiq
rSaFT7IU4anOVPGWmJRUFz01qlQvDD9O4wo6qhUYulD5l3VAbnT7Rdm0OdhZQQgS
IUFosInthkPfdo9CYjXqPw7Qxxj4wBSK6GnV1cvTKSBiQ0nfxYDRw3wZ2tq7KlaC
y47nO7up5LMbcT0iTYpAk6hPhRXFQlj2zdEJ2LgAToMvfn7PTNhSDCh3y97DlSw1
QvwJMb6n6x1KuA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:51 2025 by rpki-client