Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
File: Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft (raw, json)
Hash identifier: U1frDdXLmQdqgHIMWyTE7S7j2IsPKjWJviGpZejhefM=
Subject key identifier: 00:6E:B0:A1:D6:35:25:EA:D5:29:BD:73:36:6F:DA:A6:61:48:2B:4E
Authority key identifier: 1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71
Certificate issuer: /CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
Certificate serial: 0199FE47885F5AA35DFB9ADCCE5F3EB132C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
Manifest number: 09C2
Signing time: Sun 19 Oct 2025 21:02:04 +0000
Manifest this update: Sun 19 Oct 2025 21:02:04 +0000
Manifest next update: Mon 20 Oct 2025 21:02:04 +0000
Files and hashes: 1: Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl (hash: bNbEffZV6qOqPNBn12PGMY4abDRON81hPbrd1QbF4nE=)
2: tv0huOh6mK0H4w2Pkxi0zxGdHcU.roa (hash: AhjG9w2zaLD4mADBnCLY0U88JMMTl5C2x9ZxBk5L0+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:88:5f:5a:a3:5d:fb:9a:dc:ce:5f:3e:b1:32:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
Validity
Not Before: Oct 19 21:02:04 2025 GMT
Not After : Oct 20 21:02:04 2025 GMT
Subject: CN=006eb0a1d63525ead529bd73366fdaa661482b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:87:5c:8e:ed:73:4a:9d:15:7c:84:06:f7:
34:65:d7:5b:52:2b:b6:b1:fa:02:10:cb:da:22:80:
13:3b:f1:9b:51:66:84:e7:1b:dc:38:3a:26:d1:38:
67:88:1c:3f:ec:7c:5c:c4:e3:8f:ad:18:6a:06:28:
06:03:b9:ac:5c:26:d8:b0:cc:af:14:5e:68:bd:5a:
4e:00:c2:07:d5:18:6d:60:e2:db:04:b5:d8:8b:3c:
5a:34:63:3b:7b:8f:bb:5a:16:5b:52:bc:8d:36:5e:
f6:ee:45:c7:1b:3e:2d:49:3a:7f:e4:10:93:68:f4:
b3:6e:08:ec:3b:89:1c:c1:1a:f4:fb:5f:91:45:46:
8d:1c:db:cc:70:12:ba:33:b5:31:6f:10:a2:97:ad:
b9:f4:9b:13:0b:14:d3:2f:5c:d7:57:56:ef:b2:c5:
90:5d:0f:bf:63:0b:e6:26:3d:89:7d:b7:4c:b9:6f:
1f:b6:01:41:cc:38:df:32:5e:d9:a7:22:5e:59:12:
7d:1c:5d:f4:51:1a:f2:86:ff:d5:7b:8d:83:02:79:
d7:b5:f8:bb:89:d5:2d:fc:a2:7a:d9:d2:ea:11:d6:
e9:fe:57:d4:6f:2d:aa:fc:75:a5:72:8f:29:7a:c4:
3d:18:ff:1f:0b:70:6d:42:0f:ad:75:77:7c:da:5d:
fb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6E:B0:A1:D6:35:25:EA:D5:29:BD:73:36:6F:DA:A6:61:48:2B:4E
X509v3 Authority Key Identifier:
keyid:1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:82:5e:ed:1f:4a:a3:78:66:46:6f:5f:61:1f:3d:a3:37:b6:
83:d9:20:cb:e4:5c:5f:a2:89:f0:fb:94:65:de:b1:2d:9a:1b:
b9:22:cd:24:d9:fa:c9:ec:3d:e3:86:18:94:1d:1d:21:1c:09:
25:0b:b7:81:c9:cc:0f:97:d3:1d:33:05:77:c1:04:de:ad:df:
cb:03:1e:bf:b4:33:71:b7:76:a0:fd:12:9c:bc:bd:c2:af:ca:
f3:3f:de:83:eb:73:b7:a9:62:06:c8:da:cc:28:ad:85:f8:83:
e6:5a:e8:f3:e2:a0:79:58:d1:5d:01:ec:47:e0:80:dc:cf:31:
fe:bf:57:28:d6:28:c5:91:f0:f0:f9:da:f7:91:59:fb:f4:0b:
1b:bc:62:79:29:a7:54:89:6d:7b:73:10:f3:bf:3d:97:57:55:
8b:e8:e2:55:5a:77:c0:19:c3:52:e3:ee:2b:5b:08:d1:8b:65:
12:9c:b1:48:7d:ba:67:fc:2c:c0:0a:46:e2:20:33:17:f9:e3:
13:d4:65:a0:ed:71:88:55:4e:20:3a:65:ff:39:dd:8f:75:86:
29:02:ab:b2:f7:80:2d:02:fa:8d:00:9a:be:2c:21:d5:1f:07:
c6:c2:db:70:7b:1b:b0:a8:4c:92:99:46:d0:22:9d:be:19:76:
f0:f3:e7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:05 2025 by rpki-client