Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: OxNBJxMDMTg51HDzCaZl057hjovIIh0XAOyKTRjk4a0=
Subject key identifier: 4A:A1:88:9F:5D:0D:46:6F:9A:AA:B2:8C:16:CD:3E:A5:7F:EC:75:E3
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 0198D47303CBF9B0015C199ECBD27642D31D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 0F8C
Signing time: Sat 23 Aug 2025 01:02:43 +0000
Manifest this update: Sat 23 Aug 2025 01:02:43 +0000
Manifest next update: Sun 24 Aug 2025 01:02:43 +0000
Files and hashes: 1: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: ykDXkm2EY9zu79qPl/qxAsbTpfYzKjxCNYPJCbU9w9k=)
2: qWiRXpCL0NKtXzFBLcgeaF0mM4A.roa (hash: V0gkUhFHDtKhWrN/3cVBozf0t4RmZJghnQqebhSHl+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:03:cb:f9:b0:01:5c:19:9e:cb:d2:76:42:d3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: Aug 23 01:02:43 2025 GMT
Not After : Aug 24 01:02:43 2025 GMT
Subject: CN=4aa1889f5d0d466f9aaab28c16cd3ea57fec75e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:a5:61:6c:2c:f0:39:fa:98:c9:a1:cd:83:
c9:b7:c0:9f:19:e1:df:41:92:78:7e:55:de:f7:f6:
83:85:b3:18:d9:42:fc:b8:cb:6b:9b:58:13:bf:b4:
10:f7:76:b2:5d:96:b1:91:28:7c:91:4c:cb:3b:70:
ec:4c:e7:b2:97:20:b8:a1:74:ca:a6:1b:62:8d:ea:
2f:e6:a5:d2:0f:16:7f:19:81:13:bc:f7:da:54:b6:
91:75:7d:f3:c6:a7:86:17:1d:82:b0:d1:0a:f1:0d:
5a:be:fa:13:7d:47:a6:9c:91:ad:9b:f1:18:a0:60:
68:e0:ca:e1:b9:21:33:e7:fd:cd:70:19:13:f0:c4:
d3:fd:15:9d:c7:c7:fc:52:bd:1b:ca:0f:f2:ef:c1:
a9:a4:a3:40:b6:4a:c9:87:53:e1:80:ee:38:70:5b:
77:7f:ed:94:86:88:47:9a:af:fb:fe:ad:bd:29:21:
a2:f0:c1:47:e2:a9:e4:ab:a7:90:3a:1f:91:01:df:
07:9f:29:d3:ea:cc:bd:19:22:03:c7:1e:0f:a9:87:
63:f3:39:fd:f0:7d:b4:66:1d:bc:00:c0:53:a9:74:
51:7b:38:c2:bb:52:69:db:a6:3e:de:f0:a7:db:03:
c3:21:da:db:11:4f:50:f6:55:be:f0:49:ca:12:98:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A1:88:9F:5D:0D:46:6F:9A:AA:B2:8C:16:CD:3E:A5:7F:EC:75:E3
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:af:f7:b4:9c:1c:8c:e7:0f:5c:69:72:cc:cd:77:e1:e8:16:
97:01:7b:12:bc:00:05:62:3c:00:e1:87:41:b7:a2:34:b3:42:
6e:af:34:23:15:87:56:f8:47:74:3c:66:e9:5e:eb:a2:91:d6:
27:ac:a4:47:23:da:a2:41:ef:b8:4c:b0:a9:70:39:53:29:37:
e3:ed:2c:fb:59:0c:c7:80:48:46:04:36:44:ef:ec:0a:e5:43:
bf:b0:a4:1e:62:ff:9f:9c:40:d9:3b:1a:1d:81:f5:16:e4:41:
fe:d7:b1:47:b5:5d:4c:49:be:52:50:ab:2b:4a:13:c3:5f:40:
75:66:03:b7:c7:91:78:7b:ff:62:3c:26:38:cf:2b:0d:31:fe:
20:8e:45:02:5b:3e:91:70:2a:47:99:4f:2f:dd:ce:4d:d3:65:
23:e7:10:91:31:96:7c:91:05:03:fc:b9:75:36:b5:ed:07:83:
03:c1:d2:92:2c:18:06:cf:bd:84:b6:67:fb:61:93:37:68:f8:
26:4b:d3:42:73:8a:cb:6f:4d:52:64:14:5a:60:b4:cf:d7:25:
c3:cb:8a:e6:47:8d:17:81:f7:6b:e2:85:74:56:7a:83:df:29:
4d:cb:d0:bd:e3:f6:0f:77:2d:53:20:d6:f9:81:45:c5:47:e8:
df:9c:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:27 2025 by rpki-client