Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File: gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier: 0jePct7vCz/I5w13MtIHqJkFdcwW9Gyyr1PLSP77NFA=
Subject key identifier: 5E:71:D6:2B:C2:C9:86:0B:C1:55:01:90:1C:D1:FE:F3:92:1A:DB:FC
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer: /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial: 0198D65FB1FF0AC6E591BF7586165DF7068D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 10:00:52 +0000
Manifest this update: Sat 23 Aug 2025 10:00:52 +0000
Manifest next update: Sun 24 Aug 2025 10:00:52 +0000
Files and hashes: 1: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: KiM6hgPgjZygTyyfxeRUOhruflX77YBcalo+Ia9qLoU=)
2: mzS0mg7LzekXtU0-AI8vjQNsdnI.roa (hash: W1Odlm/4gNw2/x1K4BE4WalP/0rHvCKJa9lik2Xno0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b1:ff:0a:c6:e5:91:bf:75:86:16:5d:f7:06:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
Validity
Not Before: Aug 23 10:00:52 2025 GMT
Not After : Aug 24 10:00:52 2025 GMT
Subject: CN=5e71d62bc2c9860bc15501901cd1fef3921adbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e5:ed:e7:dc:a2:96:1a:fe:ad:5b:72:cc:58:
65:9a:64:22:6f:4f:04:be:77:f6:7c:7f:89:a6:c1:
bd:7a:91:6f:11:35:93:e3:42:b7:36:7d:33:7a:68:
1b:cc:64:43:2e:79:86:a1:05:12:41:19:c6:6b:dc:
56:7d:aa:53:ee:ee:0b:ec:24:54:a5:0f:b7:d1:85:
a4:65:a9:8e:12:2a:ce:88:76:d3:fe:c2:75:bb:f5:
81:37:85:f1:a7:1d:9c:e7:5f:78:5f:cf:2b:6a:b3:
2c:e4:cb:d4:ed:08:e0:c2:15:ac:4a:b1:72:44:58:
d6:f2:6a:0f:a9:d2:3b:d9:aa:29:5e:ec:a6:28:52:
d5:6e:05:68:ee:bf:e3:3a:c3:3f:1e:e9:2e:ae:60:
f8:3c:e2:a6:e6:4b:e4:7e:61:cb:68:c6:19:cf:ae:
1c:5f:0c:77:43:96:5a:4d:70:d9:f6:08:ad:71:e8:
3d:d3:ce:fa:c7:6f:a4:67:7a:70:01:06:db:f1:45:
5a:dd:62:3a:0d:ff:da:22:64:1d:06:4f:ed:bc:67:
58:01:e6:66:1d:7c:11:ab:a3:ef:be:9f:9f:8c:91:
16:70:55:9e:a1:9c:a3:5a:ae:41:50:53:62:6c:3d:
99:e8:89:c4:52:57:fa:97:27:22:74:ef:a9:ac:e9:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:71:D6:2B:C2:C9:86:0B:C1:55:01:90:1C:D1:FE:F3:92:1A:DB:FC
X509v3 Authority Key Identifier:
keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:73:63:84:ea:c9:1a:69:3f:65:de:04:94:e6:ab:b6:2b:3b:
8d:cf:9e:70:8c:c6:a3:6c:7e:9e:d6:4b:02:a5:d5:a5:2c:fb:
70:d8:98:fe:00:ce:91:11:f6:78:c9:96:68:d9:09:2b:82:47:
25:76:1f:49:7f:4e:2f:99:21:1f:e6:7f:6a:a1:f1:50:4c:7c:
a1:15:d6:1d:68:f2:05:69:ee:41:ef:35:ae:8a:54:33:ef:85:
97:80:5a:f3:ca:45:62:4b:fc:a8:99:25:3d:07:a4:d6:f7:13:
02:20:cc:6b:09:67:d8:65:a0:84:54:93:08:7f:9f:d6:3d:88:
31:24:63:4c:f4:96:24:04:f7:d5:0b:65:d1:a0:ce:a7:45:c0:
68:28:f5:c0:7d:47:e1:8a:f2:bc:97:bc:b4:0a:e7:3a:dd:ca:
be:0b:60:a6:18:86:79:1e:39:fd:1b:7e:6d:a2:4c:df:5a:ab:
92:5a:53:ca:c0:f6:87:59:14:3d:07:e8:a8:f6:7f:28:3f:a3:
8a:4a:2e:b9:8d:fd:4f:c3:2a:c4:28:fa:6f:e0:61:7d:dc:3d:
60:12:e5:9f:0b:06:3b:bd:c2:e2:ad:b2:35:da:c4:b5:ba:24:
c5:b3:3f:a4:31:59:f8:6d:4e:37:a7:7f:a6:07:b5:bc:46:eb:
c2:b3:c1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:44 2025 by rpki-client