Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File: GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier: VuNuz9TU6dixyOma1ztbl3gYKh+LCerwemHE1a3KTRY=
Subject key identifier: 9A:F5:B2:AE:0D:46:38:DE:E9:CF:82:65:28:DE:A3:80:5C:70:AF:35
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer: /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial: 0199FD33EB43B3DA7190D3085F182136D1D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 16:01:02 +0000
Manifest this update: Sun 19 Oct 2025 16:01:02 +0000
Manifest next update: Mon 20 Oct 2025 16:01:02 +0000
Files and hashes: 1: 1-xyQHxf_deE9-ViNoog6kflfJho.roa (hash: QIveh9vpkORylUTH9OU36DpDEaTwHICeGuuojxGmoA4=)
2: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: RE7fvTelajV0V7dSL+HQG9mvXEVezWTQxqGrhMAdBr4=)
3: vDjAWnb2U_Zni3rwGpwjWOad_gQ.roa (hash: YF5FP9GizLuKXZzGN/kv4NsbvKt5L3RdIPXM7DuHQbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:eb:43:b3:da:71:90:d3:08:5f:18:21:36:d1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Validity
Not Before: Oct 19 16:01:02 2025 GMT
Not After : Oct 20 16:01:02 2025 GMT
Subject: CN=9af5b2ae0d4638dee9cf826528dea3805c70af35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:de:11:6a:13:3c:e8:fe:06:ec:23:ad:f9:d8:
6b:13:27:05:2f:9b:a9:b0:67:95:9f:5d:1a:d8:64:
9f:d7:e9:55:a2:91:5b:3c:cb:61:5e:f0:19:12:88:
f9:6d:9d:d1:d1:ab:4e:61:86:c9:b3:81:44:a1:6f:
2c:43:79:99:16:ce:1e:19:ec:61:9b:40:9c:48:e7:
12:60:d8:8b:5e:a7:db:dc:65:72:5d:32:c5:b9:6f:
eb:a3:27:2c:88:0d:b7:4d:f0:3c:e5:6f:46:6a:fb:
5f:56:9f:14:83:86:35:71:91:78:91:70:5d:09:53:
6d:65:fb:b3:14:81:9f:ff:52:31:dc:79:36:e5:5f:
a3:87:8c:0c:0d:d6:a1:4a:41:95:6f:33:c3:93:3d:
4e:07:d9:b4:93:ec:87:84:d9:73:9d:94:36:c7:09:
72:f7:6c:51:d3:4a:27:ff:62:90:25:c9:8d:a3:f4:
94:8d:63:4e:1e:33:f7:39:fe:c7:a5:1d:15:d3:e8:
03:31:d1:d6:f3:12:de:1b:70:68:b3:d1:59:ea:dc:
c9:a3:88:e2:a3:7c:bf:b1:e5:39:0c:40:1f:94:86:
e1:0e:de:e8:80:e5:9a:ab:7f:82:e9:61:cd:6d:aa:
ba:17:d1:90:fb:04:d3:46:f1:92:8e:5b:cc:5c:37:
ab:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F5:B2:AE:0D:46:38:DE:E9:CF:82:65:28:DE:A3:80:5C:70:AF:35
X509v3 Authority Key Identifier:
keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:28:45:41:8d:94:2f:ec:4c:e1:fc:cc:cb:90:d3:62:de:d1:
9b:96:a2:d0:ba:7e:3b:00:36:3d:72:f8:49:48:a9:48:11:3a:
8c:e5:c3:d9:3a:89:be:37:55:7a:af:cd:4c:cb:bf:b2:9e:00:
93:f2:29:56:69:0f:9b:d9:a8:de:82:a2:fe:f1:0d:08:cb:48:
db:89:79:f8:43:df:fc:83:d5:76:36:7a:66:f3:fb:03:a2:30:
3d:8a:f4:63:68:83:c3:93:2a:51:4e:fc:61:cb:aa:be:38:20:
53:6d:6e:40:6f:9c:22:d4:53:66:d8:07:03:f6:32:2f:95:80:
69:b2:1f:72:71:d8:40:fc:f6:29:15:08:25:ba:b3:ea:74:8a:
d5:32:f8:40:d6:a0:b9:c5:e6:9f:54:75:b1:a0:55:62:91:a3:
ba:ef:28:54:f9:a8:f4:b3:e2:99:65:4e:ed:e9:6c:2e:77:2e:
31:b5:3d:a8:a2:13:b8:64:32:92:01:a7:1f:32:72:d1:e9:21:
84:bd:15:40:7b:e9:6d:40:43:57:75:b9:93:65:ec:82:56:79:
ea:a1:35:03:27:94:a8:fe:c8:c9:f3:87:fb:34:3f:91:15:95:
80:be:77:07:db:24:af:b0:9a:21:32:32:b9:31:91:17:75:81:
c6:3b:4f:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M+tDs9pxkNMIXxghNtHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhOTljNzVmZTU3NzdlMTM2NTczZTFlNTFlZmJhNjc4MWYz
YTViMTYwHhcNMjUxMDE5MTYwMTAyWhcNMjUxMDIwMTYwMTAyWjAzMTEwLwYDVQQD
Eyg5YWY1YjJhZTBkNDYzOGRlZTljZjgyNjUyOGRlYTM4MDVjNzBhZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N4RahM86P4G7COt+dhrEycFL5up
sGeVn10a2GSf1+lVopFbPMthXvAZEoj5bZ3R0atOYYbJs4FEoW8sQ3mZFs4eGexh
m0CcSOcSYNiLXqfb3GVyXTLFuW/roycsiA23TfA85W9GavtfVp8Ug4Y1cZF4kXBd
CVNtZfuzFIGf/1Ix3Hk25V+jh4wMDdahSkGVbzPDkz1OB9m0k+yHhNlznZQ2xwly
92xR00on/2KQJcmNo/SUjWNOHjP3Of7HpR0V0+gDMdHW8xLeG3Bos9FZ6tzJo4ji
o3y/seU5DEAflIbhDt7ogOWaq3+C6WHNbaq6F9GQ+wTTRvGSjlvMXDerIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJr1sq4NRjje6c+CZSjeo4BccK81MB8GA1UdIwQY
MBaAFBqZx1/ld34TZXPh5R77pngfOlsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3BuSFgtVjNmaE5sYy1IbEh2dW1lQjg2V3hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83MTE3M2ItMTkzOC00ODM1LWFmMDAt
YTY5OWJjYjA4YWUzLzEvR3BuSFgtVjNmaE5sYy1IbEh2dW1lQjg2V3hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi83MTE3M2ItMTkzOC00ODM1LWFmMDAtYTY5OWJjYjA4YWUz
LzEvR3BuSFgtVjNmaE5sYy1IbEh2dW1lQjg2V3hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJChFQY2U
L+xM4fzMy5DTYt7Rm5ai0Lp+OwA2PXL4SUipSBE6jOXD2TqJvjdVeq/NTMu/sp4A
k/IpVmkPm9mo3oKi/vENCMtI24l5+EPf/IPVdjZ6ZvP7A6IwPYr0Y2iDw5MqUU78
YcuqvjggU21uQG+cItRTZtgHA/YyL5WAabIfcnHYQPz2KRUIJbqz6nSK1TL4QNag
ucXmn1R1saBVYpGjuu8oVPmo9LPimWVO7elsLncuMbU9qKITuGQykgGnHzJy0ekh
hL0VQHvpbUBDV3W5k2XsglZ56qE1AyeUqP7IyfOH+zQ/kRWVgL53B9skr7CaITIy
uTGRF3WBxjtPUA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:56 2025 by rpki-client