Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
File: GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft (raw, json)
Hash identifier: YZbNSAqRwXBco8ybxh8xGddE9pzAV3xBLPNoHaShpmQ=
Subject key identifier: 1D:CD:FB:60:43:A8:F4:1D:36:B2:36:A0:7C:2B:63:36:7D:6E:5D:99
Authority key identifier: 19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
Certificate issuer: /CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Certificate serial: 0199FFC73467901521F0B020A4D9E2094950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
Manifest number: 15E1
Signing time: Mon 20 Oct 2025 04:01:09 +0000
Manifest this update: Mon 20 Oct 2025 04:01:09 +0000
Manifest next update: Tue 21 Oct 2025 04:01:09 +0000
Files and hashes: 1: GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl (hash: 9y7enrTjQJ0+x7+WHbn3TX2i9MRNKErkTe3PbJJe2i8=)
2: R9wvbwR8vf6XKX0eGcMmD8X8Klo.roa (hash: MTZzbOkg2UHrN+bJCxm0dSAtniaWbyC3ZD9jm9TIAQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:34:67:90:15:21:f0:b0:20:a4:d9:e2:09:49:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Validity
Not Before: Oct 20 04:01:09 2025 GMT
Not After : Oct 21 04:01:09 2025 GMT
Subject: CN=1dcdfb6043a8f41d36b236a07c2b63367d6e5d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:45:0f:5e:0d:91:1e:92:50:9e:5c:df:fa:
d4:3c:2c:f8:32:00:bb:97:3c:9b:01:c3:8c:cb:1b:
a3:f4:92:70:98:08:17:9f:4f:ad:5e:6e:c8:41:a6:
9b:37:b2:1e:ea:c9:1c:83:4e:c1:8a:bb:5d:f5:50:
0b:c7:9a:17:e3:39:62:4b:f7:24:29:93:52:1d:d1:
1b:bb:45:3c:13:d2:85:fa:5e:75:98:8b:b9:c9:b4:
89:4e:48:08:53:a1:01:02:ed:2f:a2:e8:06:7d:41:
b7:6a:08:ff:42:db:30:4b:ab:b5:68:ac:76:c7:86:
43:99:8e:fa:04:b5:83:5a:7b:10:49:88:df:4f:72:
04:3b:f4:74:33:c3:ff:8a:35:69:a5:d9:d0:a5:e0:
cc:ba:de:ce:a5:2a:00:d7:a4:b3:41:09:c5:26:e9:
79:59:a9:44:fc:0c:3b:1e:75:77:f8:2f:3d:7a:ac:
87:2b:ac:df:35:8e:a0:4e:22:fa:dd:ad:8b:ee:88:
90:4c:1a:12:0b:02:f8:ac:14:ff:5b:07:5d:0e:5b:
ba:0f:63:9c:ab:86:8b:1c:e6:48:6b:49:69:62:7f:
d7:a2:75:c8:ae:81:a9:ae:63:3e:20:01:0d:65:9d:
1b:d1:1c:7b:47:26:a9:81:a7:ef:0e:9d:54:cd:32:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CD:FB:60:43:A8:F4:1D:36:B2:36:A0:7C:2B:63:36:7D:6E:5D:99
X509v3 Authority Key Identifier:
keyid:19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6e:c7:66:68:73:bb:f1:24:94:61:01:6b:3f:13:c6:73:9d:
cc:14:f3:2f:77:ed:73:75:bc:2a:2d:73:13:bc:8f:66:52:e7:
76:b8:0d:6f:e3:ea:1a:b9:59:86:a4:f7:ab:57:47:7c:a1:bd:
95:65:4a:08:8a:60:33:b8:6e:8d:1d:9c:0f:45:17:38:e9:c0:
6a:34:dc:0d:ef:f9:d2:1c:f3:b5:a2:3e:a0:74:8a:27:c3:ca:
d8:ec:df:b4:ef:42:67:e7:13:15:3e:4a:bf:3b:83:23:11:1f:
6f:3f:e0:6c:84:0e:b7:aa:2d:a4:69:87:43:94:0c:48:56:7a:
99:eb:62:94:c5:e4:d7:c5:7e:26:77:6b:f6:ed:a4:b8:5a:c0:
e6:46:ba:be:20:62:af:e0:e8:78:d1:96:eb:92:96:39:e1:18:
e5:3b:4a:a0:0d:af:81:f8:a4:d9:58:4c:59:db:e0:c8:9d:3b:
55:86:04:59:83:13:4f:ba:b0:c8:9f:ca:d7:32:f9:a4:e8:cc:
c7:d7:7f:f8:99:3a:c1:1a:d8:16:91:c3:27:99:1d:c4:44:73:
92:f6:a0:25:02:bd:07:d2:da:1f:69:62:ea:f2:72:3d:9f:97:
5f:89:cb:87:5e:4c:74:ef:99:b2:14:58:de:42:0f:9e:f9:cd:
ae:eb:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:12 2025 by rpki-client