Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
File: GQAdVXoGmNrXfEs-3fKn02tyqwA.mft (raw, json)
Hash identifier: PXKF3Yca+gSRYfycCdrLN9goYPwvZmfNDEtTCt3T4ig=
Subject key identifier: 2F:38:D1:BE:BC:DC:9E:2B:1D:9D:3E:2C:62:0B:96:95:72:4E:16:D8
Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
Certificate issuer: /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Certificate serial: 0199FC587592F77496D67EF01C4417FBBF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
Manifest number: 0622
Signing time: Sun 19 Oct 2025 12:01:19 +0000
Manifest this update: Sun 19 Oct 2025 12:01:19 +0000
Manifest next update: Mon 20 Oct 2025 12:01:19 +0000
Files and hashes: 1: GQAdVXoGmNrXfEs-3fKn02tyqwA.crl (hash: BDoOo6kel3+GtPRMNn/+lblzpxE2Mow04l5UpZbRbM4=)
2: _Y3WU0rL_Z5yMospeFK2kheOtgM.roa (hash: qqDo+PPhN0qvkLG+7KSZ3FS8hY7kC2hitlOvSMnc4pQ=)
3: cqleo2TkA-Dax9YzlbPC4oCeXks.roa (hash: WDLbfAf8uLhRV57uZSklRDXJ7tKTUOclgtS0od1R4M4=)
4: spoNsBquI5wjgn7gu8viZ3BO3l4.roa (hash: G+9zvvKyQogrHpfux1dzt3BVRrnfOK8LLcMasK0KKtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:75:92:f7:74:96:d6:7e:f0:1c:44:17:fb:bf:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Validity
Not Before: Oct 19 12:01:19 2025 GMT
Not After : Oct 20 12:01:19 2025 GMT
Subject: CN=2f38d1bebcdc9e2b1d9d3e2c620b9695724e16d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:8a:08:18:0b:af:34:92:66:55:1d:d9:65:
ef:f6:13:37:8b:d1:9c:1d:83:11:42:56:2b:68:f8:
79:c1:ee:c7:54:f3:3b:0c:46:03:af:fc:ff:a7:31:
19:16:f5:59:4f:4a:fe:dd:4e:b6:9e:46:7d:9b:53:
14:8b:9a:c1:64:8c:f1:4f:11:1b:85:07:5e:d8:ff:
c6:85:61:f1:b2:2e:18:7b:fa:74:8e:15:58:de:3a:
82:b8:7c:1a:a1:a9:8e:9e:d5:34:66:c0:63:57:72:
fa:13:11:dd:be:c0:66:59:fc:56:b7:ac:cf:6e:d3:
2f:47:7d:c1:05:4c:c0:8b:33:80:4d:ff:fd:df:89:
b6:72:46:b2:b6:24:53:b2:bb:46:27:a4:21:40:82:
f4:21:5d:7b:e3:95:ef:55:e5:d1:58:ee:f8:b5:76:
92:cc:0e:c4:0f:d4:48:bc:17:aa:2d:db:3e:a9:25:
75:97:17:16:a6:c0:a6:36:97:6e:40:af:07:73:87:
cb:35:9e:65:fd:34:79:e6:3f:81:c4:14:0c:bf:c8:
d4:1d:b2:83:67:d4:57:09:a3:a1:01:d6:0d:96:70:
55:d5:e1:e2:c2:2a:4e:95:9d:03:bf:d4:9b:f8:5d:
e7:87:17:61:5c:78:81:44:71:a4:f1:ea:24:38:75:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:38:D1:BE:BC:DC:9E:2B:1D:9D:3E:2C:62:0B:96:95:72:4E:16:D8
X509v3 Authority Key Identifier:
keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:52:23:c5:21:bd:df:47:a3:8d:fc:84:8a:fb:05:dc:4a:62:
17:04:4c:dc:29:ae:64:4a:0d:43:9e:84:54:07:10:78:25:0d:
c7:c8:39:dd:b5:7c:3d:84:89:b6:a4:2a:f9:9e:33:89:e8:1a:
3c:c7:88:8f:c8:46:24:d2:9c:6f:79:72:30:f3:c1:d3:4d:47:
1c:2b:ac:93:b3:23:21:49:46:e9:da:00:eb:c6:52:1c:7a:96:
ae:83:de:4c:1b:2f:99:36:0d:f7:a3:5f:0e:2f:62:29:84:53:
dc:8c:02:31:9d:16:9b:c0:cf:e7:4c:37:7c:b7:44:71:96:13:
34:24:47:f8:30:80:be:3d:21:cf:ca:18:3c:79:e2:bd:3f:a0:
46:06:bb:53:69:99:3f:b5:4f:b7:2f:ad:a1:d5:6f:90:bd:76:
67:07:4c:cf:dd:2a:d1:b3:3b:e3:34:22:f7:b8:38:38:96:5f:
16:df:25:9f:2a:f1:71:73:6c:52:a5:68:8e:42:31:41:77:b9:
d7:d0:9d:6f:c9:da:3d:00:59:2b:19:26:53:93:95:76:68:c5:
72:18:61:7c:1e:8d:82:58:50:25:63:76:47:e7:ae:1d:f2:44:
4e:97:f1:d4:02:00:fa:7e:6b:eb:2d:6c:19:63:72:ca:5e:8f:
93:53:07:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:40 2025 by rpki-client