Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
File: GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft (raw, json)
Hash identifier: WzH2lAJKjNyapvca/eXL30GKff9SLG8s/pthDYqG21Y=
Subject key identifier: F7:01:98:8B:85:78:D8:91:43:17:2D:02:DC:4F:22:05:E7:DE:0C:20
Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
Certificate issuer: /CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Certificate serial: 0199FBEB615322A1203B3015DD3CDA537F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
Manifest number: 1501
Signing time: Sun 19 Oct 2025 10:02:11 +0000
Manifest this update: Sun 19 Oct 2025 10:02:11 +0000
Manifest next update: Mon 20 Oct 2025 10:02:11 +0000
Files and hashes: 1: GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl (hash: 2UIvkIm6kEhmGR+Tty7xIrQ0CHYAOnpsQD5MKtcKI4Q=)
2: bioMAYKF1qqrZbXGWoBChN2Rwsg.roa (hash: XBbDJ/525v0nDOlO1cf/FOJnRgOSNpcxMVq1T633zZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:61:53:22:a1:20:3b:30:15:dd:3c:da:53:7f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Validity
Not Before: Oct 19 10:02:11 2025 GMT
Not After : Oct 20 10:02:11 2025 GMT
Subject: CN=f701988b8578d89143172d02dc4f2205e7de0c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f3:45:70:80:6f:8e:81:95:c3:9e:e4:8e:a3:
1d:9c:e8:21:94:8b:20:f1:4e:31:a1:df:52:0e:25:
7b:95:46:76:55:28:e0:c5:19:07:09:29:46:68:47:
f2:67:94:e9:4b:7f:82:3f:54:8a:8a:1b:05:f9:eb:
e1:52:78:18:23:2d:b8:b2:7c:f6:5c:40:c4:ca:0e:
36:57:8f:ed:7f:27:c6:18:c7:e9:ae:2c:be:cc:5b:
f5:f3:24:55:ea:74:01:e3:bc:21:4f:b8:c5:af:f1:
e6:41:68:c7:c1:71:ff:ef:7f:45:dc:17:d7:e9:bb:
5d:c6:5d:e6:2e:7b:bc:ad:6e:64:2b:09:db:67:12:
27:a1:70:7c:6b:0a:0d:65:64:b6:32:f7:37:45:2a:
23:7a:c6:a9:a1:fe:23:c1:d6:0d:b1:20:ab:c1:bd:
4c:34:3e:13:c0:83:d2:63:e3:fc:5f:bf:d5:3d:b0:
24:9a:c8:c7:85:79:46:f7:57:50:9c:45:0e:e0:94:
f4:a0:72:ed:d5:2b:91:01:10:11:a1:da:d3:89:1a:
11:db:85:13:3d:4d:77:9d:34:a5:95:27:12:a1:37:
46:3b:2f:58:61:4c:cd:01:9d:12:f7:ec:13:97:4c:
ca:5f:dd:c9:b4:06:5e:4e:bf:f3:7f:b8:41:c2:7d:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:01:98:8B:85:78:D8:91:43:17:2D:02:DC:4F:22:05:E7:DE:0C:20
X509v3 Authority Key Identifier:
keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b0:b5:4f:84:b1:ca:82:47:25:ef:56:77:83:3c:16:92:6a:
b8:1f:1d:f0:4d:aa:7a:21:cb:6b:cf:6b:3a:eb:f3:7d:9d:f2:
96:30:4c:e8:3c:e2:92:e4:6f:08:fc:db:8b:4b:01:67:b4:00:
31:5a:73:ff:ae:1e:7c:3d:f2:e5:c6:c2:bc:40:7d:b1:33:fc:
0f:27:d9:dd:58:75:d6:52:c8:76:81:eb:0b:b0:5d:be:48:81:
8c:d8:5c:28:ab:52:fa:92:2c:9c:d3:92:bc:7e:8e:58:07:23:
97:75:2d:8c:05:f6:a1:5c:0e:a5:b3:ac:03:0f:f7:3a:02:02:
84:53:c9:d3:3e:ce:fe:f6:10:56:0f:32:8c:77:67:86:04:90:
4a:ae:b8:c9:e3:ff:bb:a7:dc:6e:02:88:99:dc:87:e7:17:dc:
86:9e:10:ec:b6:f7:eb:e5:90:69:c2:fe:1d:2f:ac:dd:80:d6:
20:6e:2f:a5:0a:bb:9c:bb:a4:b4:63:f6:c0:ed:13:9d:46:bb:
4d:46:f8:e1:fd:7f:20:cf:37:31:6b:fc:02:fc:a6:00:b4:cb:
87:56:8e:e5:16:6c:4d:d2:75:b8:30:6b:0a:38:a4:b1:51:57:
ff:c3:49:da:f1:56:13:5a:e7:af:cc:d7:98:af:b0:96:2d:ed:
1a:f1:dd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:03 2025 by rpki-client