Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File: gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier: Ls5vSrPXdkLZZspuqgKxPYtaz5WjRgoC1vnTRiD2bdo=
Subject key identifier: 41:76:26:B6:BB:DB:41:1E:1C:66:5E:C4:2A:94:02:8F:6F:1F:EF:CD
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer: /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial: 0199FBEBFFBF4761B498F0F91A6E4A764E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number: 10DC
Signing time: Sun 19 Oct 2025 10:02:51 +0000
Manifest this update: Sun 19 Oct 2025 10:02:51 +0000
Manifest next update: Mon 20 Oct 2025 10:02:51 +0000
Files and hashes: 1: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: c6t5icmZCaeaLqY242W5fXPla6TxA1jT9mahN2v4nto=)
2: mzS0mg7LzekXtU0-AI8vjQNsdnI.roa (hash: W1Odlm/4gNw2/x1K4BE4WalP/0rHvCKJa9lik2Xno0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ff:bf:47:61:b4:98:f0:f9:1a:6e:4a:76:4e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
Validity
Not Before: Oct 19 10:02:51 2025 GMT
Not After : Oct 20 10:02:51 2025 GMT
Subject: CN=417626b6bbdb411e1c665ec42a94028f6f1fefcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:62:fe:a4:53:9f:81:fa:5f:46:ad:f5:9f:
0c:46:94:c9:8d:ea:ac:b5:b3:1e:c4:e1:2e:cb:a0:
23:6c:0b:5f:a1:2c:5d:ee:00:8b:45:e9:9c:72:81:
fa:23:97:e6:d3:ca:ac:0f:fb:12:a1:88:b5:78:19:
3c:77:8d:67:5a:03:34:fd:59:b0:c4:f6:2a:b6:a0:
cd:65:3a:af:f6:b5:c9:18:cd:24:ec:38:db:9a:d1:
cf:58:3d:0f:3e:09:5a:c1:b7:9d:5d:14:27:0f:5c:
06:8c:f0:0b:19:4c:87:e1:f0:b8:c2:69:f8:99:a9:
1c:5e:53:90:74:06:b1:00:0f:42:d0:a8:56:8b:b2:
76:5d:19:63:a0:b1:32:1e:ba:cc:cd:cb:ad:f1:f4:
34:2e:cc:08:f1:8d:2c:16:38:3c:d1:95:4e:fd:48:
6a:37:4a:bb:dd:b0:11:4e:08:93:df:91:f9:b8:45:
15:89:6a:a8:33:f7:ba:86:c5:c0:f8:a8:62:a5:42:
a0:dd:c0:3b:dd:97:39:12:c6:4f:a8:6a:ee:29:92:
88:38:ae:e6:be:7c:80:7e:13:81:c6:21:75:d8:58:
30:2a:66:95:5b:6f:15:fa:17:0d:f2:ba:d0:cd:90:
97:b2:34:11:78:1a:12:19:d3:62:f6:0b:88:d3:e9:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:76:26:B6:BB:DB:41:1E:1C:66:5E:C4:2A:94:02:8F:6F:1F:EF:CD
X509v3 Authority Key Identifier:
keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cf:b5:ca:68:2f:ec:9c:f5:b2:d0:8b:7d:51:e4:f1:3e:47:
8a:c7:7e:fe:5b:89:ae:43:cb:9f:33:0e:2c:82:70:8c:4c:3a:
43:12:60:e1:54:6a:89:98:de:8d:2e:75:67:0f:c8:aa:0c:c2:
87:73:22:63:9b:ac:ab:f3:7a:59:2c:cc:c0:2e:05:15:6c:e6:
ce:7a:b6:33:6d:f5:94:a9:44:54:30:4a:3e:86:fc:a4:1a:d9:
dc:ff:04:ea:d5:e5:78:19:37:32:c1:75:f1:cd:bf:cb:18:62:
88:5c:2d:31:94:27:64:1b:ee:35:7b:83:b7:64:da:47:9b:f7:
8f:ea:16:92:d4:48:e0:c2:99:1e:31:ed:bc:b3:e9:9d:62:47:
a0:73:2a:67:69:b3:ff:38:b6:00:f9:8d:01:39:4e:e5:43:6c:
15:3d:5d:ed:c4:71:76:c7:15:8c:17:36:67:79:08:1c:8e:e6:
50:1b:0e:d3:b7:99:5d:62:2a:04:e7:17:30:21:7a:aa:0e:0c:
f3:51:13:73:38:e9:9f:e2:ca:e6:60:24:f6:5b:35:f5:61:47:
01:c2:b1:23:1c:ca:fe:47:f8:c6:79:62:a3:41:1c:75:d4:97:
70:be:e3:ef:00:71:2b:1e:7c:5a:e5:ec:53:10:0a:b4:d1:14:
d3:a8:d3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:04 2025 by rpki-client