Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
File: GqGckulmd_X5b2jxygqtn6MR60U.mft (raw, json)
Hash identifier: RA31pCSUIczNfra6uIOBAYeaclmol71Es0WNtHCi4mo=
Subject key identifier: 5A:FA:A1:7B:32:04:E2:07:81:13:4F:05:84:53:E5:F0:E5:69:62:41
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 0198D65F06A1830B1E407E29BE18186A9F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
Manifest number: 1408
Signing time: Sat 23 Aug 2025 10:00:08 +0000
Manifest this update: Sat 23 Aug 2025 10:00:08 +0000
Manifest next update: Sun 24 Aug 2025 10:00:08 +0000
Files and hashes: 1: 9PY0CzQO7rCs7a7ACWMmh-gYUMI.roa (hash: MRgHCGLmmsjnvw7chUeEEH655TL4/pWfw0Bh/13k3RE=)
2: GqGckulmd_X5b2jxygqtn6MR60U.crl (hash: D9pRh0xxIge8xz7TkfSQ1TR9goSgTD7NAQag0nhAEa4=)
3: LUxnI4gkqH7yAwk0S-IwEaOnth8.roa (hash: N89HNSm0vKdgJlvHR+QOPBS6nqPeyhUDVxUtqyfT4hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:06:a1:83:0b:1e:40:7e:29:be:18:18:6a:9f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: Aug 23 10:00:08 2025 GMT
Not After : Aug 24 10:00:08 2025 GMT
Subject: CN=5afaa17b3204e20781134f058453e5f0e5696241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7b:e8:72:f0:8e:5b:47:0d:25:37:4c:5d:ed:
53:2a:d3:72:99:10:74:df:0b:51:fd:e1:8b:3d:60:
d9:14:a4:3c:13:2b:b4:44:e6:cc:ca:26:67:33:01:
b6:8f:ab:c5:d8:c3:d9:2c:e4:cd:28:aa:3b:1b:3f:
c8:47:f1:21:09:5f:63:ad:c1:26:1d:21:57:73:e6:
f5:a2:0c:d7:fa:16:64:33:66:ae:b5:21:b2:0b:0f:
36:e4:a6:11:eb:42:c9:ec:e8:16:9e:54:fa:8b:d9:
99:7e:c9:a6:b3:ea:92:e8:db:14:d6:b8:90:88:08:
aa:06:49:71:94:d5:6e:2d:d5:df:3a:e1:68:cb:61:
b8:fe:11:4d:d2:62:12:89:f7:9b:62:7b:3e:80:c3:
7c:14:ee:ee:64:af:d8:4e:c6:b1:77:3a:ff:28:59:
fc:4d:9f:8b:ae:cd:7e:5a:fc:c0:fb:3b:b4:13:a4:
b5:dc:64:da:ed:ff:13:7b:3b:8d:7c:44:23:ae:a2:
a5:13:50:ac:71:22:1b:89:91:a6:c0:4b:eb:40:18:
16:70:03:53:87:bf:ad:a3:55:49:f0:ff:b9:bc:33:
1e:31:80:3a:fa:df:96:ef:b1:4d:7b:05:f2:73:70:
80:12:62:6b:b7:6d:c4:e3:7a:0b:9b:c9:80:59:ab:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FA:A1:7B:32:04:E2:07:81:13:4F:05:84:53:E5:F0:E5:69:62:41
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:72:2f:57:ff:dc:d7:aa:54:57:7a:6d:66:1b:5a:32:6e:33:
15:64:a1:83:09:af:80:e9:95:b1:a4:73:a1:46:9c:c1:19:f1:
e8:41:8e:68:6c:02:d3:91:cf:44:4b:6c:be:f7:a4:9d:73:97:
7a:61:db:ec:f9:1b:f7:a2:8e:86:ea:ae:98:4e:86:f0:14:21:
00:ce:51:b6:be:fa:b9:60:7c:f2:64:a5:71:d4:02:53:0b:cc:
49:80:0f:11:20:e7:e1:a6:f3:af:f5:ce:fc:62:0a:97:dc:ac:
56:15:cd:d3:1d:dc:f1:b9:22:30:08:d8:09:b9:31:46:5c:1c:
35:11:e0:dc:6c:8d:df:9d:3e:4e:c3:2a:78:ee:8c:45:5a:e0:
73:34:b7:5d:e2:cb:7e:6e:f4:bd:8e:72:ac:6d:67:9a:a4:bf:
5e:2e:16:e2:db:d7:30:fb:81:a1:5b:a4:86:44:e7:e5:cc:25:
f0:af:4b:da:98:3f:34:8f:ca:77:68:76:b0:2f:38:c3:25:92:
78:62:3d:8b:38:c1:48:23:47:df:dc:a9:70:df:df:3a:dd:a9:
04:e2:be:75:ad:1e:76:1d:12:cb:b7:69:ce:b3:f5:65:d5:a8:
72:84:68:4a:2a:90:5c:69:6e:f7:82:2b:90:cf:ec:2c:a5:ca:
01:8c:4c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:33 2025 by rpki-client