Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File: GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier: TGxnFk+yw0cJVFt2kwQ6YEoz3mEwgMZEpTsSyOxglWs=
Subject key identifier: 0B:F5:52:0A:53:EE:39:DA:3E:A0:76:88:3F:F7:16:13:0B:F0:E1:B0
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 019A00DA3A86C8398AA65F923BE46B4FE515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number: 0E9B
Signing time: Mon 20 Oct 2025 09:01:32 +0000
Manifest this update: Mon 20 Oct 2025 09:01:32 +0000
Manifest next update: Tue 21 Oct 2025 09:01:32 +0000
Files and hashes: 1: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: 3oBimh3ITp/qKlFNhcDJr/k7k1rtUih8rdPw1IrCtmY=)
2: HGA6jjVB7UclmIMciEeXUBcTxyQ.roa (hash: blRYsuCoLjuXHy8qGKJB2iPcbmUbbGdoaMO6Z5/ynCQ=)
3: kZQj5c3qTbDNst6FPmlVFTJBwU0.roa (hash: OVYrhsG4NKJtVB+RFz2IORzGEYajNg4HBNGBwkD+aFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:3a:86:c8:39:8a:a6:5f:92:3b:e4:6b:4f:e5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Oct 20 09:01:32 2025 GMT
Not After : Oct 21 09:01:32 2025 GMT
Subject: CN=0bf5520a53ee39da3ea076883ff716130bf0e1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:5d:15:e0:df:4a:e0:10:77:99:25:d0:04:
2d:6d:6a:0a:03:03:2c:7b:99:3c:d2:7f:ca:60:21:
69:17:3e:4a:23:7f:d9:e1:c4:48:2c:e8:43:76:0f:
12:cc:d7:93:3a:49:4a:fa:0b:53:b9:fa:6a:f4:50:
86:cb:4b:0d:e1:47:a2:36:89:57:ba:f1:d5:34:b7:
ee:62:56:d5:1a:dc:54:6d:8e:a8:b4:d2:74:78:53:
34:86:97:0e:9d:7f:3b:6c:95:12:0b:1b:d0:6e:f0:
a1:07:30:3e:83:29:0e:f6:f9:aa:f5:c8:14:b0:45:
a9:5c:2a:9b:de:e4:31:dd:20:00:f0:d5:59:4f:1a:
fa:d6:95:22:72:75:db:e4:eb:db:cc:e7:93:56:7f:
13:a3:20:15:a7:aa:ee:5b:7a:25:d4:b8:97:3f:30:
2d:33:2f:41:92:86:bf:78:c0:9d:8a:ac:64:0a:bf:
24:94:a1:63:52:3f:94:6e:50:9d:05:d0:52:2b:f3:
78:ab:42:30:ee:bc:f1:1b:7b:76:5e:9a:d4:5a:92:
19:75:ea:5c:1b:12:56:40:b3:65:00:be:7c:d3:73:
54:b6:ea:2e:c3:ec:49:49:3f:42:8c:2d:9d:0b:48:
41:74:6c:6d:27:9a:aa:7d:03:3a:7c:0e:ee:98:9e:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F5:52:0A:53:EE:39:DA:3E:A0:76:88:3F:F7:16:13:0B:F0:E1:B0
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8a:4f:74:3f:12:77:65:5d:21:48:45:03:b7:5a:dc:4f:58:
0d:81:73:7d:7d:9c:f4:e5:2b:2d:fc:1e:5b:3d:36:e1:41:04:
29:c4:9d:0c:bf:dd:14:3b:47:21:61:8c:94:5b:d3:bd:c7:c7:
c8:f4:9e:b0:df:10:4f:17:89:55:2e:8c:5c:58:09:0d:3a:a2:
a9:e8:47:64:ac:77:b1:e0:e4:0d:12:85:1d:32:d3:cd:66:72:
4b:aa:e2:cc:6f:87:96:a4:67:2b:0f:6f:cc:72:8b:8d:10:d3:
61:42:00:23:19:0c:15:9b:d6:c9:df:bb:4a:31:5b:e7:5f:03:
71:e5:e9:61:1a:35:77:4d:bb:11:89:ba:c8:20:39:06:43:75:
cf:36:49:55:57:4c:2a:2f:c5:06:72:11:7b:b1:11:15:75:09:
36:c7:79:bc:87:9f:9c:58:26:3b:aa:a1:39:58:d5:dc:b7:d0:
e0:81:91:f6:c7:6e:4d:3b:7d:1e:ae:0b:50:49:32:8a:4f:2a:
35:13:69:33:2a:46:c1:fa:89:1e:1c:b1:25:62:0f:72:66:66:
e9:e4:aa:7c:e9:7e:61:15:13:bd:a4:e7:de:b2:64:ec:37:ba:
2e:c8:74:69:c9:b8:71:4b:bf:5c:2f:41:dd:db:98:f3:30:98:
fa:bc:00:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:20:52 2025 by rpki-client