Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
File: GqGckulmd_X5b2jxygqtn6MR60U.mft (raw, json)
Hash identifier: ykJxJ0LdKcTpAdcMnm7PQVVHxxwh/k8byK6eS4ZKNUg=
Subject key identifier: AB:46:D3:46:A1:1B:73:5A:E7:6A:41:BF:A7:09:80:F1:A9:8C:21:5E
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 0199FBEA807940E02FF4F551A2F17A1FB9F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
Manifest number: 14A0
Signing time: Sun 19 Oct 2025 10:01:13 +0000
Manifest this update: Sun 19 Oct 2025 10:01:13 +0000
Manifest next update: Mon 20 Oct 2025 10:01:13 +0000
Files and hashes: 1: 9PY0CzQO7rCs7a7ACWMmh-gYUMI.roa (hash: MRgHCGLmmsjnvw7chUeEEH655TL4/pWfw0Bh/13k3RE=)
2: GqGckulmd_X5b2jxygqtn6MR60U.crl (hash: yO7yzF2AQmRMxIM/euNV9/R+Vf97U5Y2U69x+GiwQTY=)
3: LUxnI4gkqH7yAwk0S-IwEaOnth8.roa (hash: N89HNSm0vKdgJlvHR+QOPBS6nqPeyhUDVxUtqyfT4hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:80:79:40:e0:2f:f4:f5:51:a2:f1:7a:1f:b9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: Oct 19 10:01:13 2025 GMT
Not After : Oct 20 10:01:13 2025 GMT
Subject: CN=ab46d346a11b735ae76a41bfa70980f1a98c215e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:77:56:67:4b:bb:d3:1c:cf:ec:49:de:a3:
3e:41:71:3c:00:c1:ea:b6:46:02:ee:bf:fc:4b:e7:
3f:2d:d7:e3:20:bb:2a:b1:0d:c4:42:f4:f7:e3:95:
80:2a:d1:04:cf:90:81:ac:00:c4:15:88:2b:8b:dd:
62:66:0e:ae:fb:d9:06:62:9f:5f:d6:80:62:13:6a:
62:e7:6b:f8:0a:c1:0d:51:34:78:35:6f:5d:2b:a6:
8c:80:ab:c3:cd:ba:2f:bc:5f:ef:77:84:8d:af:2e:
50:10:ec:11:f2:36:0d:a3:f8:26:13:22:40:fe:05:
67:04:3f:7c:57:7e:a5:4f:ff:5d:2a:0a:5c:7e:8e:
36:86:9e:c5:e9:71:a6:56:02:f4:27:54:de:44:df:
5c:38:7a:ff:be:71:c8:88:43:69:60:bc:e7:2f:e5:
a6:82:45:38:52:75:a7:89:4a:51:1a:4a:e5:d3:8d:
d0:93:24:56:b0:e3:3e:55:cb:46:5e:83:ba:8d:a3:
2b:f4:c5:01:d3:ad:bf:da:70:a9:4e:21:d7:a6:ab:
83:8b:bc:25:64:e1:84:f4:8b:bc:e7:e6:63:1b:b8:
67:3c:fa:a4:4b:9f:5e:46:c5:d6:6b:bf:48:4a:0c:
2e:fb:3e:9d:e2:a5:01:f7:f8:38:70:b0:5e:76:79:
fa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:46:D3:46:A1:1B:73:5A:E7:6A:41:BF:A7:09:80:F1:A9:8C:21:5E
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:54:07:46:56:36:fc:95:4a:51:d5:af:ec:41:7b:68:0c:cc:
48:75:39:59:32:63:6d:54:99:dd:70:b6:f3:61:af:82:df:45:
46:51:d5:d3:81:ab:d3:22:e5:af:bf:7c:2b:ef:b0:6f:7a:2a:
42:60:da:9b:a0:24:92:a0:1f:66:fd:49:50:3c:08:a6:d0:62:
00:1b:e7:41:9b:43:62:4e:35:62:5f:e6:17:46:72:46:1c:de:
69:f1:2b:0c:56:ba:61:ef:39:1f:b2:c2:6a:a9:e3:a8:9b:a0:
90:1d:7d:c4:ff:78:4d:a9:8e:59:a8:7d:c1:af:31:a7:ed:73:
d8:1a:d1:bf:8c:0e:c2:61:19:10:4c:ff:3a:10:01:ae:8d:d9:
98:f7:fa:af:ed:d6:0a:1d:12:95:04:fa:09:cc:48:b0:83:36:
b8:4b:5b:fc:0c:2b:c8:26:c6:47:62:cc:5b:d7:58:47:76:b6:
04:8d:8d:07:36:44:3d:3a:7b:6f:b3:f1:59:db:c6:f1:82:61:
43:d9:bf:07:18:c9:e5:c7:7b:0a:82:fc:0b:90:6a:7c:ee:33:
c2:52:c9:c8:79:df:fd:c6:d6:14:7d:77:32:76:2d:74:30:e3:
8d:86:78:b3:8d:da:4e:24:5f:3d:d3:6f:86:b1:a3:0e:68:94:
36:25:0d:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76oB5QOAv9PVRovF6H7nwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYTE5YzkyZTk2Njc3ZjVmOTZmNjhmMWNhMGFhZDlmYTMx
MWViNDUwHhcNMjUxMDE5MTAwMTEzWhcNMjUxMDIwMTAwMTEzWjAzMTEwLwYDVQQD
EyhhYjQ2ZDM0NmExMWI3MzVhZTc2YTQxYmZhNzA5ODBmMWE5OGMyMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfV3VmdLu9Mcz+xJ3qM+QXE8AMHq
tkYC7r/8S+c/LdfjILsqsQ3EQvT345WAKtEEz5CBrADEFYgri91iZg6u+9kGYp9f
1oBiE2pi52v4CsENUTR4NW9dK6aMgKvDzbovvF/vd4SNry5QEOwR8jYNo/gmEyJA
/gVnBD98V36lT/9dKgpcfo42hp7F6XGmVgL0J1TeRN9cOHr/vnHIiENpYLznL+Wm
gkU4UnWniUpRGkrl043QkyRWsOM+VctGXoO6jaMr9MUB062/2nCpTiHXpquDi7wl
ZOGE9Iu85+ZjG7hnPPqkS59eRsXWa79ISgwu+z6d4qUB9/g4cLBednn6+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtG00ahG3Na52pBv6cJgPGpjCFeMB8GA1UdIwQY
MBaAFBqhnJLpZnf1+W9o8coKrZ+jEetFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3FHY2t1bG1kX1g1YjJqeHlncXRuNk1SNjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wMGFkYjAtODkwZC00N2FkLWExOGMt
NGFkMGFiZWMyNzVlLzEvR3FHY2t1bG1kX1g1YjJqeHlncXRuNk1SNjBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8wMGFkYjAtODkwZC00N2FkLWExOGMtNGFkMGFiZWMyNzVl
LzEvR3FHY2t1bG1kX1g1YjJqeHlncXRuNk1SNjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFQHRlY2
/JVKUdWv7EF7aAzMSHU5WTJjbVSZ3XC282Gvgt9FRlHV04Gr0yLlr798K++wb3oq
QmDam6AkkqAfZv1JUDwIptBiABvnQZtDYk41Yl/mF0ZyRhzeafErDFa6Ye85H7LC
aqnjqJugkB19xP94TamOWah9wa8xp+1z2BrRv4wOwmEZEEz/OhABro3ZmPf6r+3W
Ch0SlQT6CcxIsIM2uEtb/AwryCbGR2LMW9dYR3a2BI2NBzZEPTp7b7PxWdvG8YJh
Q9m/BxjJ5cd7CoL8C5BqfO4zwlLJyHnf/cbWFH13MnYtdDDjjYZ4s43aTiRfPdNv
hrGjDmiUNiUNeQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:51 2025 by rpki-client