Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft
File: gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft (raw, json)
Hash identifier: OLak36kNB6Mf1V56z/i112B1OnNyaamouT975aVCmr8=
Subject key identifier: 19:8B:8A:C0:75:B9:C0:9B:8A:6E:8C:6B:9A:F2:BF:4E:23:9A:43:74
Authority key identifier: 81:06:2D:CE:1A:79:1E:73:41:D5:F4:25:98:11:AB:4D:65:F6:B0:75
Certificate issuer: /CN=81062dce1a791e7341d5f4259811ab4d65f6b075
Certificate serial: 0199FBEAB297D385C10D625DDC03D8F04122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft
Manifest number: 1273
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: gPvG8JKXbj-vvJrpNLZ9cDnUs8w.roa (hash: JKRD+vgt19aGbPFmkdV1fkgtJNWsit5Cuia9bEn2uRY=)
2: gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl (hash: f3vhQsUFbt6iN7Ey71JuwMGC04RCuLJSgyAWqR8qdCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b2:97:d3:85:c1:0d:62:5d:dc:03:d8:f0:41:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81062dce1a791e7341d5f4259811ab4d65f6b075
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=198b8ac075b9c09b8a6e8c6b9af2bf4e239a4374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:07:50:eb:1e:4a:47:cf:80:18:d2:be:94:
d3:09:d8:47:83:c8:bf:b2:ff:f5:7c:a9:a3:eb:e2:
3f:5c:b3:da:07:ca:8e:5d:d3:ae:cb:74:99:ee:f3:
bd:45:f0:34:b3:62:c7:0d:3b:84:3b:d6:e9:97:cb:
f4:3a:cd:a4:c0:f2:20:cf:39:57:0d:05:f2:ac:fa:
21:de:8f:47:d1:1e:1d:56:a5:78:cf:ef:02:54:65:
6c:fe:42:6e:1d:30:f2:7f:43:3a:d0:1d:f6:bb:75:
42:64:43:08:fa:77:22:40:da:61:27:7c:8f:be:03:
11:a1:1b:70:ab:91:d9:62:12:05:88:29:51:66:a8:
ed:f1:90:df:ff:d9:aa:88:1e:ff:c7:e0:20:74:18:
e0:08:45:07:da:ee:59:b2:49:2e:db:48:a5:ba:e7:
55:bb:16:5f:af:09:69:57:80:b8:e9:49:51:da:26:
54:38:78:a2:7e:b6:b2:e3:45:1d:61:72:77:cd:2a:
ae:2d:29:dc:dc:c5:64:85:66:e6:32:d9:75:d8:f3:
93:a3:bd:b5:2d:34:9a:91:54:82:fd:8b:4f:d0:bc:
0a:01:b9:48:26:b9:47:46:f3:c8:4e:b0:da:73:38:
da:38:22:47:4b:a6:69:11:0b:97:ad:b7:32:59:27:
b4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8B:8A:C0:75:B9:C0:9B:8A:6E:8C:6B:9A:F2:BF:4E:23:9A:43:74
X509v3 Authority Key Identifier:
keyid:81:06:2D:CE:1A:79:1E:73:41:D5:F4:25:98:11:AB:4D:65:F6:B0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ac:31:6b:aa:cd:be:59:30:32:f8:44:95:f2:46:93:76:b7:
c6:d5:fb:e1:5a:53:7d:60:69:6c:58:f2:77:d6:4f:f2:d9:e1:
dc:b8:27:78:b0:f0:68:82:06:46:fb:c4:59:6c:ea:e6:f8:a1:
60:7c:f5:fe:7c:76:a2:e9:8d:fe:d7:ce:94:ad:57:15:2d:29:
2f:b3:5b:bc:a6:b1:73:fd:dc:d7:76:21:6c:bc:1e:38:d0:ce:
b7:22:e1:0d:27:c1:d6:af:07:0e:9e:9b:4e:14:36:26:1f:7f:
2f:58:1e:f2:68:60:7d:fd:a6:59:3a:de:74:62:9e:2b:22:22:
01:8f:60:58:7b:75:4c:ed:5b:32:c5:1a:bd:b6:db:96:3a:88:
f7:69:9f:0a:e8:76:2b:35:dd:0e:d8:e3:e6:04:9c:aa:64:fc:
3a:83:a6:f8:f3:72:57:89:30:b9:71:9a:10:42:df:a2:b5:f5:
15:2e:20:61:2e:a1:24:93:41:4d:18:6b:62:b1:07:49:ee:41:
a9:da:ac:44:65:5e:d6:65:a5:d9:82:c9:e9:a6:62:31:ea:ae:
54:ca:64:e8:67:1a:e2:32:9f:07:0b:ad:c9:d7:e0:ca:88:d5:
b5:9b:1b:d8:bc:96:55:a9:a4:5c:eb:10:56:39:4d:26:c6:bc:
74:b1:ae:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:23 2025 by rpki-client