Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
File: Gqq6fafI82yLJ1ynOEkc7cy14xI.mft (raw, json)
Hash identifier: MYcDVNKFz884SDDlnnYCcUYcT3Z8qsb4Q5RIV0ScN7g=
Subject key identifier: AD:41:D6:98:D0:CC:B6:A2:87:51:F1:0B:F8:38:B1:66:15:8A:C3:85
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 0199FAA1789347A37F9967A7D3AEEC52C5EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
Manifest number: 0AF0
Signing time: Sun 19 Oct 2025 04:01:50 +0000
Manifest this update: Sun 19 Oct 2025 04:01:50 +0000
Manifest next update: Mon 20 Oct 2025 04:01:50 +0000
Files and hashes: 1: Gqq6fafI82yLJ1ynOEkc7cy14xI.crl (hash: 3ZcA8lzP3jxYd9vdoRgu7idcj1Ib0xwWnzXmkBcTdfU=)
2: SrGxiEcbv0Zc7-cVhdHTCkDoX9w.roa (hash: iavVdmhGOCEa+iXrvr89fSP+yPeTS+0oRnvgbRj+J3g=)
3: qdU5r0eoyeBHUa1NS90_R0v_QXg.roa (hash: VQ2X9ZLs6HKDrETPNNW9FW4YLxSUU+RRG8UFpA6pPfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:78:93:47:a3:7f:99:67:a7:d3:ae:ec:52:c5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Oct 19 04:01:50 2025 GMT
Not After : Oct 20 04:01:50 2025 GMT
Subject: CN=ad41d698d0ccb6a28751f10bf838b166158ac385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:9a:e1:6e:25:51:d3:59:2d:2b:99:80:db:
dc:01:5c:18:4b:70:e7:8c:d1:f4:03:f7:8f:31:32:
91:d3:0c:86:e7:da:f8:ed:67:f0:96:a0:05:50:81:
c5:41:c5:48:ba:8a:f2:94:69:ee:51:41:35:11:1d:
54:f8:47:27:b8:49:5a:cc:c0:02:e8:3b:fb:80:38:
f9:99:a9:bd:f4:b1:6c:da:57:c1:0b:da:9c:a3:cc:
77:f4:42:b8:5f:3f:7d:62:4c:66:4c:07:4c:d4:69:
4a:6f:59:7f:81:04:7e:ab:b5:e0:a8:4a:65:32:87:
bf:e9:a7:f3:67:f8:18:a0:f0:67:9b:87:89:03:bb:
08:5a:64:23:ac:4b:0c:f2:ff:e8:be:cf:76:27:18:
65:ef:e0:38:19:8c:e3:c4:c2:72:92:2d:39:9c:7f:
df:c0:1b:2e:13:1d:ad:8c:0d:43:3f:43:44:1b:4b:
96:aa:f2:fa:56:fb:ed:e9:94:f6:54:c3:91:56:37:
cc:eb:f4:88:dc:64:52:42:a3:bd:c0:59:90:1b:68:
4b:da:eb:00:7d:e1:2b:f9:70:df:06:f1:5c:0e:0b:
08:6d:e1:31:d1:94:65:b2:3b:cc:19:22:e2:69:cc:
76:b9:6c:98:2e:a8:8d:cd:78:e6:a3:a9:fc:08:aa:
44:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:41:D6:98:D0:CC:B6:A2:87:51:F1:0B:F8:38:B1:66:15:8A:C3:85
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:65:61:b9:73:34:51:df:c8:a0:02:03:44:5e:8b:4a:7a:eb:
d1:27:64:5e:17:52:76:e2:4f:7c:fb:6b:10:47:db:78:d4:b8:
c2:3a:eb:7f:8d:72:ea:a9:47:01:dd:a2:b9:1d:14:72:d0:78:
d8:b9:b2:c8:a6:7f:a1:d6:8e:87:db:b2:da:28:fc:48:4b:4f:
39:33:d5:6c:8b:a3:7c:b8:f8:46:84:bc:a8:06:e7:d2:64:e0:
9c:37:62:a6:db:83:23:2c:c7:90:fb:44:d1:2a:8b:7b:3a:8a:
a1:23:86:80:de:fd:5f:1f:f9:53:85:bd:45:20:99:9b:9a:68:
f4:e0:7b:4b:03:da:43:c8:f0:3c:86:ec:3c:fa:68:1c:9d:9c:
c6:10:16:1f:fc:1a:59:9e:45:91:e9:fc:30:e1:41:c6:35:a0:
53:4e:27:62:70:fe:70:fd:99:f3:f0:1a:03:40:64:f7:5d:08:
30:b9:96:0c:07:42:1a:41:70:fb:08:b9:b4:6a:93:48:29:0e:
40:cd:99:07:c8:53:69:87:f3:2b:91:24:f5:43:06:30:24:2c:
08:df:c4:be:19:1b:de:1a:05:6c:70:bb:1a:df:c6:48:87:92:
5c:fc:6d:dc:bb:0e:4a:e8:b5:37:89:1c:20:15:29:47:83:a6:
d1:1d:cb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:39 2025 by rpki-client