Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: CyVU1F7d6uzMaAGscCxUoeqMFz7LasmxkhLGygMm1xw=
Subject key identifier: 8E:D5:FA:69:55:6F:DC:68:CF:28:73:56:A1:66:BE:C3:80:F1:FD:8F
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 0199FC8F3DBA4D92FFD431F0046C5D5E4A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: 3n_Nd4cUj6teASapK4pWavXgfU0.roa (hash: KngeXtbNNWR05hMf2WkynvKsVClU9oGlPMx0Mk7lMOM=)
2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: Uu7vy2CgHIDao/Jku4BIt1jA9FUC4XMtMxUHkaTcliE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3d:ba:4d:92:ff:d4:31:f0:04:6c:5d:5e:4a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=8ed5fa69556fdc68cf287356a166bec380f1fd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:f4:68:58:9c:44:80:f9:55:13:20:20:83:
4b:bd:fb:8a:24:6c:4d:91:cc:4f:97:0d:0f:0f:93:
62:bc:d1:1c:da:8f:99:38:86:9a:3b:19:86:3a:fe:
a8:5b:60:a2:27:ca:36:86:cb:3f:61:3a:77:62:79:
11:cc:ee:f4:ab:7d:8b:ff:b0:47:f3:3b:de:e9:55:
48:79:b2:36:d3:bd:10:09:bb:70:aa:46:37:88:50:
2a:95:57:7a:a3:7a:c5:f7:c5:1e:fb:ee:24:25:2e:
c8:4b:43:e4:08:9b:81:3e:a1:29:fb:45:d3:95:f2:
ac:f3:e1:f1:0f:bd:8b:bd:a7:a6:18:56:c8:9e:a6:
c9:aa:5e:9b:08:ec:23:16:6f:b0:b4:0a:65:3d:89:
78:4a:0f:30:d8:5b:11:b3:3b:3f:43:3b:bc:ae:16:
7a:0c:6a:dc:64:0a:ef:37:34:ea:cb:ef:53:fd:c8:
cb:cb:90:2f:09:cd:10:7a:77:40:15:88:3c:d1:3d:
c2:a5:be:bf:c5:8d:38:01:3e:1f:25:10:bc:9e:23:
24:5d:cd:3b:88:3c:3b:27:ac:39:b6:29:8a:03:8a:
1a:59:bd:4a:14:55:e2:6a:dc:40:3f:20:2d:1a:9c:
b7:3d:75:3e:2b:4a:a9:8b:94:1f:69:ff:64:08:b3:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D5:FA:69:55:6F:DC:68:CF:28:73:56:A1:66:BE:C3:80:F1:FD:8F
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:82:d5:27:0c:e4:6b:1c:cd:6b:e7:73:c5:79:5a:5a:e1:80:
7f:db:e7:c0:74:34:5a:12:14:60:27:67:19:90:2a:9c:26:11:
86:31:eb:19:28:ee:a9:fd:b3:b1:26:d5:d1:38:3b:aa:39:f1:
47:72:82:c9:d2:94:7e:f8:0c:35:22:8c:69:90:03:b4:b0:a7:
e0:cb:a2:b2:55:31:15:bd:c1:58:65:37:24:d6:5d:d7:89:a7:
42:f0:63:c0:53:12:2e:69:4e:03:81:b8:bc:d8:d0:18:d9:ea:
7f:1d:7d:04:4b:7f:4a:02:48:52:93:26:90:c9:3c:f6:df:ea:
6d:62:d1:a9:ea:18:06:ed:54:f0:bf:3c:5f:38:a7:24:41:c5:
82:da:54:c4:8e:1d:71:cc:d5:46:d5:4e:3b:ce:f7:5c:3c:58:
3b:86:65:9e:ed:40:b7:89:40:81:4a:68:39:b4:28:50:3a:c6:
6a:8d:a1:39:b6:64:17:6b:03:54:25:45:ae:c4:55:b8:65:7f:
41:41:87:15:2d:fb:d4:4e:ab:f0:7f:85:0e:3f:69:07:f4:a1:
23:8a:e0:c7:c3:dc:d4:33:56:7d:6a:33:19:6e:74:ec:9b:c4:
83:6b:b0:d6:30:b5:36:a1:1d:94:85:fd:a8:c8:51:2b:d9:50:
0b:24:7b:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jz26TZL/1DHwBGxdXkpgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTc4MDkyNzA0NzBkN2MyNTY3MTEyZmI0MGE5ZWY3MTI2
MDA1MTYwHhcNMjUxMDE5MTMwMTA5WhcNMjUxMDIwMTMwMTA5WjAzMTEwLwYDVQQD
Eyg4ZWQ1ZmE2OTU1NmZkYzY4Y2YyODczNTZhMTY2YmVjMzgwZjFmZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pr0aFicRID5VRMgIINLvfuKJGxN
kcxPlw0PD5NivNEc2o+ZOIaaOxmGOv6oW2CiJ8o2hss/YTp3YnkRzO70q32L/7BH
8zve6VVIebI2070QCbtwqkY3iFAqlVd6o3rF98Ue++4kJS7IS0PkCJuBPqEp+0XT
lfKs8+HxD72LvaemGFbInqbJql6bCOwjFm+wtAplPYl4Sg8w2FsRszs/Qzu8rhZ6
DGrcZArvNzTqy+9T/cjLy5AvCc0QendAFYg80T3Cpb6/xY04AT4fJRC8niMkXc07
iDw7J6w5timKA4oaWb1KFFXiatxAPyAtGpy3PXU+K0qpi5Qfaf9kCLOXCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7V+mlVb9xozyhzVqFmvsOA8f2PMB8GA1UdIwQY
MBaAFBoXgJJwRw18JWcRL7QKnvcSYAUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mNDc3MTAtNGEyMy00YmRjLTk1NDEt
OGFmYTc0ZDg3NjlmLzEvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9mNDc3MTAtNGEyMy00YmRjLTk1NDEtOGFmYTc0ZDg3Njlm
LzEvR2hlQWtuQkhEWHdsWnhFdnRBcWU5eEpnQlJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooLVJwzk
axzNa+dzxXlaWuGAf9vnwHQ0WhIUYCdnGZAqnCYRhjHrGSjuqf2zsSbV0Tg7qjnx
R3KCydKUfvgMNSKMaZADtLCn4MuislUxFb3BWGU3JNZd14mnQvBjwFMSLmlOA4G4
vNjQGNnqfx19BEt/SgJIUpMmkMk89t/qbWLRqeoYBu1U8L88XzinJEHFgtpUxI4d
cczVRtVOO873XDxYO4Zlnu1At4lAgUpoObQoUDrGao2hObZkF2sDVCVFrsRVuGV/
QUGHFS371E6r8H+FDj9pB/ShI4rgx8Pc1DNWfWozGW507JvEg2uw1jC1NqEdlIX9
qMhRK9lQCyR7qQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:09 2025 by rpki-client