Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
File: gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json)
Hash identifier: UuB8h9A1mtZT9eH3P3ZhoAEJet+rFxIhWduV9Y8tq60=
Subject key identifier: BA:D0:94:F7:32:CF:11:3E:13:12:B9:CB:E4:16:C3:12:D6:CF:62:76
Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
Certificate issuer: /CN=8293905afa134944f0630c949f3abda40646dac1
Certificate serial: 0199FB7CE462953EB4E98BCE8E7B36FC2996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:30 +0000
Manifest this update: Sun 19 Oct 2025 08:01:30 +0000
Manifest next update: Mon 20 Oct 2025 08:01:30 +0000
Files and hashes: 1: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: bNEtMQwytmOQBn8nT1h1yPlZA27bWFM8Rqvn5UAG+R8=)
2: xqh-TDqxA6PFl_pLopVGhxzgy70.roa (hash: PFQ4rC1LE7WPTBJwr+kRgUbb+SgESq5u6lAAWw+3gVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e4:62:95:3e:b4:e9:8b:ce:8e:7b:36:fc:29:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8293905afa134944f0630c949f3abda40646dac1
Validity
Not Before: Oct 19 08:01:30 2025 GMT
Not After : Oct 20 08:01:30 2025 GMT
Subject: CN=bad094f732cf113e1312b9cbe416c312d6cf6276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:fb:0a:e6:d3:18:18:cc:db:63:7a:37:53:
a4:5e:7d:4d:4a:85:b2:26:6e:7a:2f:73:47:fc:00:
56:ff:f1:a1:ad:db:12:8b:38:47:2c:6a:b9:dc:4d:
1a:78:34:3d:02:d6:05:7e:41:1c:65:eb:95:33:ed:
b1:ae:d4:b7:1e:79:4e:0d:44:24:64:3f:e6:0d:b5:
de:d2:fa:bc:99:19:b6:7d:3a:4d:f4:ec:4f:5e:59:
17:68:9e:97:44:d8:33:d5:d0:34:6a:ab:ba:e6:26:
2d:16:d4:23:5d:6b:db:f1:46:8c:da:2b:f7:bf:1a:
e6:41:0e:2d:49:2d:b8:36:5c:f9:ac:da:a6:31:55:
35:da:af:78:f9:80:2d:1d:3c:d5:f0:5a:b1:e2:ef:
26:75:d9:5f:fe:b4:fd:df:11:87:d5:74:e9:b8:e5:
c9:85:c7:01:c1:ac:95:59:e2:7e:b5:c1:37:1f:ff:
1f:81:1a:06:54:13:78:ea:2c:7c:66:89:3a:60:57:
18:7f:59:5c:2c:2c:e8:e2:6b:3b:e1:c0:3b:e6:08:
a9:33:d6:45:86:28:d0:31:87:a0:37:21:da:fa:dd:
91:2c:f7:56:dd:3d:bc:f5:c6:56:f6:80:0e:f6:82:
d4:3c:d6:0d:4c:dc:54:2c:3f:54:dc:e8:da:10:6f:
4c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D0:94:F7:32:CF:11:3E:13:12:B9:CB:E4:16:C3:12:D6:CF:62:76
X509v3 Authority Key Identifier:
keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ae:ba:0f:cb:89:6e:e8:76:0d:c6:d4:f8:03:ae:37:3b:4b:
75:00:cb:50:7a:16:38:8f:99:41:1c:d3:29:89:2b:17:19:4e:
4c:2a:b4:b6:67:46:fc:e4:6c:d6:29:ae:b4:2f:32:ac:39:6a:
e1:9a:d2:25:d6:08:31:5e:df:a9:f3:04:71:e4:f7:82:42:8e:
69:5f:30:5d:3d:50:25:52:8d:e8:09:ac:28:9d:55:d6:09:bf:
d4:a9:c7:bd:91:57:38:10:08:2f:3a:d4:86:46:9c:ee:53:74:
0c:46:6b:4b:64:cc:07:ee:81:03:f6:fa:fd:23:58:b5:8d:e8:
b2:27:af:88:41:87:ee:24:36:84:b2:54:0c:a6:28:3a:de:c0:
9e:97:91:70:b0:8f:ad:ad:2f:47:82:8a:8c:30:d1:d0:8d:b7:
c7:8a:28:3f:e0:88:73:89:fb:06:fa:e3:eb:80:ce:d9:8c:97:
29:ff:a8:f7:33:3b:0b:4a:48:ae:3d:34:09:d7:ed:33:bd:d0:
6f:db:6c:03:3b:ae:14:cd:f9:bb:2e:0f:c7:f3:8c:d7:01:42:
29:60:05:9f:a7:99:ba:da:d7:c7:84:d2:69:9b:7a:6b:7b:88:
8c:f3:06:f2:7c:1c:80:7f:41:d6:7c:44:3c:e6:65:ff:d5:05:
fd:89:2c:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fORilT606YvOjns2/CmWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyOTM5MDVhZmExMzQ5NDRmMDYzMGM5NDlmM2FiZGE0MDY0
NmRhYzEwHhcNMjUxMDE5MDgwMTMwWhcNMjUxMDIwMDgwMTMwWjAzMTEwLwYDVQQD
EyhiYWQwOTRmNzMyY2YxMTNlMTMxMmI5Y2JlNDE2YzMxMmQ2Y2Y2Mjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpr7CubTGBjM22N6N1OkXn1NSoWy
Jm56L3NH/ABW//GhrdsSizhHLGq53E0aeDQ9AtYFfkEcZeuVM+2xrtS3HnlODUQk
ZD/mDbXe0vq8mRm2fTpN9OxPXlkXaJ6XRNgz1dA0aqu65iYtFtQjXWvb8UaM2iv3
vxrmQQ4tSS24Nlz5rNqmMVU12q94+YAtHTzV8Fqx4u8mddlf/rT93xGH1XTpuOXJ
hccBwayVWeJ+tcE3H/8fgRoGVBN46ix8Zok6YFcYf1lcLCzo4ms74cA75gipM9ZF
hijQMYegNyHa+t2RLPdW3T289cZW9oAO9oLUPNYNTNxULD9U3OjaEG9M/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrQlPcyzxE+ExK5y+QWwxLWz2J2MB8GA1UdIwQY
MBaAFIKTkFr6E0lE8GMMlJ86vaQGRtrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3BPUVd2b1RTVVR3WXd5VW56cTlwQVpHMnNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9lMWMzNzMtNjRmOC00MjI2LTkwNDQt
ODEwOTVhMTNiOWRlLzEvZ3BPUVd2b1RTVVR3WXd5VW56cTlwQVpHMnNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9lMWMzNzMtNjRmOC00MjI2LTkwNDQtODEwOTVhMTNiOWRl
LzEvZ3BPUVd2b1RTVVR3WXd5VW56cTlwQVpHMnNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJq66D8uJ
buh2DcbU+AOuNztLdQDLUHoWOI+ZQRzTKYkrFxlOTCq0tmdG/ORs1imutC8yrDlq
4ZrSJdYIMV7fqfMEceT3gkKOaV8wXT1QJVKN6AmsKJ1V1gm/1KnHvZFXOBAILzrU
hkac7lN0DEZrS2TMB+6BA/b6/SNYtY3osieviEGH7iQ2hLJUDKYoOt7AnpeRcLCP
ra0vR4KKjDDR0I23x4ooP+CIc4n7Bvrj64DO2YyXKf+o9zM7C0pIrj00CdftM73Q
b9tsAzuuFM35uy4Px/OM1wFCKWAFn6eZutrXx4TSaZt6a3uIjPMG8nwcgH9B1nxE
POZl/9UF/Yks/Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:13 2025 by rpki-client