Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: mZk2WPtVCU1JcTemS1euiVIYivNiNN/ZzVKKpsXDQ+0=
Subject key identifier: 39:FC:95:B2:4A:7E:79:DD:7A:17:5C:91:E0:04:60:DA:3A:82:11:ED
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 0199FBEB5A05EDFBF45C8ADCF92A3136CB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 1025
Signing time: Sun 19 Oct 2025 10:02:09 +0000
Manifest this update: Sun 19 Oct 2025 10:02:09 +0000
Manifest next update: Mon 20 Oct 2025 10:02:09 +0000
Files and hashes: 1: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: ixrt5wt7vS2dqemyIxr6Dsb5Hp0c9Djq/QF4Ox+NEb4=)
2: qWiRXpCL0NKtXzFBLcgeaF0mM4A.roa (hash: V0gkUhFHDtKhWrN/3cVBozf0t4RmZJghnQqebhSHl+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5a:05:ed:fb:f4:5c:8a:dc:f9:2a:31:36:cb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: Oct 19 10:02:09 2025 GMT
Not After : Oct 20 10:02:09 2025 GMT
Subject: CN=39fc95b24a7e79dd7a175c91e00460da3a8211ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:8d:d7:0f:3d:b3:90:05:48:02:09:3f:0e:
63:12:06:3e:a3:59:a6:fc:81:e9:51:58:34:3b:fd:
a3:39:76:8d:e6:18:27:28:c0:1f:bb:79:a1:51:4c:
f0:ea:3c:f3:a7:5a:d6:9f:68:de:0d:c2:d2:3e:90:
21:4c:2b:0a:bc:d4:b8:36:e8:4d:f8:48:6d:30:6c:
d0:1b:86:29:9b:ad:a7:31:c3:7f:d0:ca:9f:e9:70:
a9:08:e0:99:cd:cb:2b:26:8b:f4:9c:6e:4a:79:26:
a9:27:93:b2:ed:cb:d1:15:98:68:2c:cd:16:c8:bb:
8b:05:5e:44:8c:6d:67:d4:f5:85:5e:bf:8a:40:f0:
58:25:55:48:6f:42:d5:a7:40:e0:bd:54:bd:30:cc:
00:3a:73:6f:58:06:83:ed:3f:20:71:f7:9b:e2:70:
78:d6:c1:19:63:b1:9d:56:f5:f8:da:2c:13:b7:36:
14:10:75:30:e8:98:32:84:79:48:f4:8a:4b:1c:fc:
8a:9c:3f:9d:7e:0d:24:38:ee:ef:38:57:3d:71:bd:
08:bc:51:88:e5:38:69:9e:25:fc:d7:6c:4b:dd:26:
8b:36:67:11:37:f6:b3:00:11:7d:30:b8:3c:9f:a9:
74:75:02:db:b5:08:21:56:b1:fe:7a:7c:19:23:94:
64:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FC:95:B2:4A:7E:79:DD:7A:17:5C:91:E0:04:60:DA:3A:82:11:ED
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f8:c4:8b:ed:4f:fe:ba:02:70:67:95:63:3d:2d:7e:d3:35:
e4:46:c1:6b:92:eb:a4:fb:db:0a:f5:31:27:65:de:6e:e3:31:
eb:5b:5b:13:d4:59:d6:6c:cd:63:4e:74:52:5d:4d:93:20:71:
bf:17:bd:9b:84:b0:3a:8b:d5:be:ff:38:5c:a4:30:5b:ec:82:
77:90:de:0b:5b:22:93:49:47:13:04:c6:0f:6b:11:6f:30:06:
43:27:e0:a6:01:68:82:f6:5b:3a:99:92:ab:ba:13:bd:d5:fc:
e0:87:7d:ce:aa:e9:a7:c1:19:64:17:e5:a4:bb:d4:11:12:28:
a7:f8:82:c2:56:8a:96:f4:3f:80:c9:a1:ed:e2:ed:ad:f0:01:
4b:24:da:72:a8:c1:25:71:dc:5d:22:aa:8a:f3:c6:22:68:e8:
e2:28:84:4c:bb:af:c1:74:a2:4b:bf:d3:27:f9:4f:ac:88:e8:
e7:6a:7f:88:dd:6a:f4:e5:50:98:22:78:c7:53:20:0d:c1:c5:
96:6d:0b:9f:4f:ce:31:e8:03:f1:7c:89:5f:35:13:6f:51:dc:
e3:e3:9c:76:c9:c8:f0:af:33:2a:3c:4d:2a:5b:42:0e:f2:25:
14:f5:02:9f:29:18:dc:67:97:3e:42:5c:35:83:07:42:bd:a1:
e2:1c:eb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:48 2025 by rpki-client