Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
File: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft (raw, json)
Hash identifier: N8JL64ji3f4G9kFBXM5usP2Xy8LcF80eZZQES3kD5GY=
Subject key identifier: 7D:59:00:21:D8:2B:60:2F:F8:40:F3:94:8A:97:7C:3B:B2:33:18:6B
Authority key identifier: 19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
Certificate issuer: /CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Certificate serial: 0199FBEA911B5D2632A19DE9BB1600D7E17C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:01:17 +0000
Manifest this update: Sun 19 Oct 2025 10:01:17 +0000
Manifest next update: Mon 20 Oct 2025 10:01:17 +0000
Files and hashes: 1: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl (hash: B3KMQp5wAjBMW1C5fWQ6XV9hxyDTn08CoGDH0yglC/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:91:1b:5d:26:32:a1:9d:e9:bb:16:00:d7:e1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Validity
Not Before: Oct 19 10:01:17 2025 GMT
Not After : Oct 20 10:01:17 2025 GMT
Subject: CN=7d590021d82b602ff840f3948a977c3bb233186b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:7f:8f:a3:4f:87:cc:2f:e9:20:8f:6f:7d:
17:8b:18:5c:70:7d:cd:c1:10:98:fe:45:51:93:47:
c5:5e:52:7a:a2:b9:f8:61:a7:6d:65:38:c9:de:f1:
f4:7a:7f:cc:a9:dc:eb:53:a7:56:b1:ef:d6:b7:e3:
4a:8a:2e:7b:59:8e:69:cb:f3:0a:65:37:a8:6f:8b:
ad:a6:35:9b:5f:5c:b3:68:d1:bb:45:6c:7d:c4:95:
ce:3e:35:b4:60:b9:51:cf:7c:2f:55:99:08:a7:77:
07:9b:a2:5b:3a:d5:33:eb:0b:79:a3:b2:24:56:85:
96:83:2d:9d:23:47:de:59:56:73:c4:6d:81:f1:95:
b9:e6:a0:b6:61:a6:1a:d0:73:99:41:7a:0b:94:9f:
8a:83:ab:82:48:27:0a:2c:57:fa:fe:7a:88:b6:8d:
95:e0:6a:64:cd:65:cd:16:f0:19:c0:40:5d:81:2e:
0a:97:30:10:73:e3:93:bd:aa:2d:a6:5d:fd:5e:f9:
8f:ee:c4:63:1e:cd:e0:ae:41:b7:38:66:f5:f3:7c:
9b:4f:a0:13:7a:7a:14:1d:a6:a5:56:9f:07:d9:b5:
d7:de:75:97:dc:5a:51:7f:ee:ec:f3:7c:6a:2c:d6:
7d:32:74:be:61:8c:6f:c5:72:5a:8b:d5:64:45:18:
c4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:59:00:21:D8:2B:60:2F:F8:40:F3:94:8A:97:7C:3B:B2:33:18:6B
X509v3 Authority Key Identifier:
keyid:19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3b:94:fe:39:86:bf:13:6b:2c:d5:6d:b9:b8:27:56:84:7d:
30:eb:69:23:cd:63:67:aa:91:db:97:24:9a:20:df:54:f5:50:
4c:09:1f:e6:49:95:f1:b9:41:fc:ac:65:36:59:f1:41:aa:7c:
3f:0a:6d:c8:59:35:38:cf:33:29:97:a3:97:64:f2:04:95:17:
c3:2a:2e:8c:82:25:e5:3f:db:20:27:a7:06:72:9c:07:4a:1a:
3d:39:8b:3c:f3:30:8f:52:c2:30:4a:ca:02:69:2b:10:b1:08:
ed:18:94:6f:14:3c:54:5e:9b:dc:51:f6:c0:7b:db:cd:40:ce:
84:e2:44:db:f5:a6:39:55:5c:13:ca:69:c3:fd:ba:2d:80:2e:
13:48:d1:c7:62:3f:23:34:62:34:d2:89:ef:40:d6:ba:2d:27:
e7:51:80:0a:47:a0:6d:17:ad:e8:a8:14:04:74:42:26:5e:d7:
61:57:94:96:72:4d:50:b0:39:66:9e:c0:b5:ff:c2:91:60:b1:
80:d7:96:32:9d:37:7c:65:84:41:c3:43:81:27:f7:1d:a8:39:
12:35:6a:48:d8:7d:e6:9b:52:ab:5f:37:a7:b5:7b:17:ce:dc:
49:a1:3e:eb:eb:d9:1b:46:bd:5c:c3:27:45:9d:89:50:87:36:
12:a4:67:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:27 2025 by rpki-client