Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
File: GgQ5RItijNC6QjLqXcOalo2paW4.mft (raw, json)
Hash identifier: BeT3agmBkQ9Aqg7OAJDnM1YGpWy6J50A1NOtudjw10U=
Subject key identifier: 72:F4:04:2F:80:A4:10:35:D2:05:9D:83:3C:66:22:DA:9D:05:05:C1
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Certificate issuer: /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial: 0199FFFE8BF3B596CAF293C13E593139D4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 05:01:36 +0000
Manifest this update: Mon 20 Oct 2025 05:01:36 +0000
Manifest next update: Tue 21 Oct 2025 05:01:36 +0000
Files and hashes: 1: GgQ5RItijNC6QjLqXcOalo2paW4.crl (hash: 5noQb2H2k8vGlTprrghcmLT/vyRe0L2R09oTk3qsPnY=)
2: awiZZNgesWW0Sbd6K5IRMUenzBI.roa (hash: OVxRXVan7pYiQ6GVr4WHU+GWhPaWUbbRmfzBGki3zjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:8b:f3:b5:96:ca:f2:93:c1:3e:59:31:39:d4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Validity
Not Before: Oct 20 05:01:36 2025 GMT
Not After : Oct 21 05:01:36 2025 GMT
Subject: CN=72f4042f80a41035d2059d833c6622da9d0505c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:f0:20:07:78:21:7b:67:aa:7b:1a:82:b0:
99:e1:2d:49:6d:d5:0b:8a:3a:c3:e4:70:c7:9e:75:
a8:45:44:91:fa:f3:1f:f5:86:41:c0:11:5d:96:84:
60:57:02:2f:ea:6e:70:64:72:ed:93:78:6d:88:28:
84:6c:7e:fb:3f:5d:78:e0:7e:88:8d:19:40:1a:39:
57:62:1d:6e:60:b7:ec:ca:5c:be:76:14:29:e1:89:
35:9f:61:c5:29:1a:74:20:3b:fb:a3:af:68:17:c3:
31:c9:36:26:02:1a:30:50:52:6e:0a:da:78:9e:0c:
e9:ab:0b:07:10:19:bb:e6:11:78:9d:0a:67:98:e6:
16:9d:9e:ff:73:db:fd:93:1f:c1:87:35:4d:b2:ee:
52:d2:5d:85:13:f4:b6:22:af:d5:38:9d:8a:7a:7c:
1a:c0:ce:82:04:78:1c:46:02:32:b4:c1:57:d9:de:
2d:c9:66:06:d2:f9:5a:45:5e:33:62:9d:5e:68:6d:
40:00:6e:2f:04:df:8e:b1:02:10:4a:3c:a6:d7:54:
f9:4d:be:8d:a5:f5:96:27:4b:ee:1f:52:c7:1b:36:
d3:da:cd:c6:2a:14:d2:d0:1f:46:0c:c6:ac:ae:3b:
41:ba:04:82:86:8c:8e:87:38:83:a5:0b:6a:07:6b:
6d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F4:04:2F:80:A4:10:35:D2:05:9D:83:3C:66:22:DA:9D:05:05:C1
X509v3 Authority Key Identifier:
keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0c:b3:8a:88:47:ca:d3:15:db:c3:fe:95:31:03:a9:a8:8b:
6f:b0:3f:f1:b4:ae:19:61:f2:74:0e:68:2e:78:13:e0:0f:9c:
af:87:13:9e:96:07:2c:44:63:b5:05:b6:7e:e8:ea:58:35:65:
35:01:2a:d5:58:4a:21:9b:40:4f:eb:c0:29:28:c1:9d:aa:c2:
e3:b5:68:5f:38:08:04:62:d7:14:46:ae:93:98:ee:84:c6:db:
10:1e:98:30:7a:aa:0e:33:2a:24:70:ae:65:25:3e:e9:c9:e9:
51:68:a5:7b:96:ec:f8:05:c1:a9:3f:04:19:4f:e2:9a:eb:1e:
ce:21:4d:a4:e4:56:84:20:8e:a8:52:52:13:60:10:00:2a:8f:
48:88:3a:7d:db:6e:09:48:28:c3:83:ac:d0:ca:4a:fe:e3:fe:
3e:e7:67:80:4a:80:a6:18:d9:6f:2c:b7:27:3a:41:23:84:35:
73:83:68:df:ed:db:77:c0:c6:ad:38:f1:33:bb:d4:e2:91:5d:
2d:7a:dd:a3:ed:25:44:fb:93:c2:25:7a:26:91:79:2b:0a:a3:
71:9f:5b:f1:d4:04:a9:c5:78:74:26:14:45:df:66:6f:a6:85:
ea:32:f6:0a:64:c9:92:cc:dc:10:da:d2:5c:bb:44:5e:6c:46:
9f:3d:b7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:16 2025 by rpki-client