Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
File: GQ1bBUO9hajs-WmruFA8nerQ35g.mft (raw, json)
Hash identifier: D30L57ogr0hz6QdC5LXET33DFYmKmz1Rf3WLbX220D4=
Subject key identifier: A7:EE:82:18:55:5A:27:15:C0:C1:31:D0:EF:0A:EF:78:95:6C:8F:05
Authority key identifier: 19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
Certificate issuer: /CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Certificate serial: 0198D6617AE0D7A4CF0F2FFCF67A29FED777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
Manifest number: 0D2B
Signing time: Sat 23 Aug 2025 10:02:49 +0000
Manifest this update: Sat 23 Aug 2025 10:02:49 +0000
Manifest next update: Sun 24 Aug 2025 10:02:49 +0000
Files and hashes: 1: DRozhMtaZ2qQi39QkdO5G1jc7k0.roa (hash: PuORiX2E31wDt+P9sStv2sIXh7s2xmzWRFumBtIrOBQ=)
2: GQ1bBUO9hajs-WmruFA8nerQ35g.crl (hash: zsT5pyRBIo2UvXsX4DdNRPwDT5iWBqLYDkIAv+XexnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:7a:e0:d7:a4:cf:0f:2f:fc:f6:7a:29:fe:d7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Validity
Not Before: Aug 23 10:02:49 2025 GMT
Not After : Aug 24 10:02:49 2025 GMT
Subject: CN=a7ee8218555a2715c0c131d0ef0aef78956c8f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dd:23:e6:3a:e4:a6:23:b1:98:6d:cc:f7:ec:
5c:71:1c:51:42:1e:1c:05:c3:49:16:bf:49:8b:05:
76:a3:35:ea:66:09:bb:d9:cd:1a:52:24:0a:b1:02:
b2:89:9a:e3:5c:20:a1:23:3a:67:31:4a:1e:25:0d:
4b:44:06:1b:90:03:10:f4:e7:bf:33:8f:f3:af:d9:
97:b4:6d:22:dc:7c:35:57:c5:32:c0:69:68:a1:34:
a7:bd:50:ac:a7:1e:13:dd:39:7c:11:cb:22:42:26:
8d:97:3c:68:81:46:2d:ea:5f:d0:ad:f7:71:f3:c8:
62:eb:e4:02:82:44:c7:32:60:37:25:85:06:5e:e8:
e6:b4:a5:16:c0:25:e7:94:16:01:c3:88:92:9e:36:
7b:97:fb:18:ab:5a:5e:06:88:d7:7f:e6:23:5c:67:
9d:c7:87:80:60:c6:e1:69:84:77:0d:ca:ad:2c:26:
89:20:dc:05:eb:58:a6:fb:54:c6:9c:66:33:6d:ff:
0a:c8:49:5b:62:f5:d0:8e:2d:11:1e:a3:20:e9:8c:
77:f8:65:a2:e5:8c:b7:5c:71:0a:46:03:21:de:f7:
c7:f1:8b:92:a5:b5:e4:17:1a:a3:18:91:50:4b:65:
27:e7:2e:0c:68:c2:ee:41:1a:01:f2:39:3f:f8:24:
03:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EE:82:18:55:5A:27:15:C0:C1:31:D0:EF:0A:EF:78:95:6C:8F:05
X509v3 Authority Key Identifier:
keyid:19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f3:71:2d:47:04:e7:3d:9d:98:ed:3d:37:72:8c:6e:4e:49:
1d:e0:5a:7e:46:7d:7e:1f:01:53:79:eb:67:57:8c:39:61:c4:
93:06:79:1c:bd:80:4d:12:fc:46:c1:ec:e6:29:a2:64:44:b4:
80:a2:88:3c:d1:2a:7f:5e:59:44:b9:e2:6c:a9:32:27:09:d9:
fa:ac:80:06:2c:10:8d:bb:f3:cc:d4:53:02:a5:c7:67:f4:53:
d9:d5:d9:a9:64:1d:55:5b:a7:eb:3b:27:ad:a8:78:e3:e1:2a:
70:e4:63:f6:08:a2:1e:bc:78:e5:36:47:75:ea:d0:97:c1:e4:
2a:47:30:7e:4e:7e:77:40:01:4c:3c:aa:1d:af:3f:cf:71:47:
13:77:33:50:d0:f2:8a:fe:c4:d2:5f:39:fd:f5:77:40:63:4c:
33:8a:c1:fe:15:b7:e8:a5:4a:b6:28:8f:cc:ca:f4:63:ee:48:
1d:e4:e9:72:55:d4:d7:00:ce:57:dd:4f:76:58:78:0f:77:79:
14:e5:c0:f4:06:52:39:f6:e0:04:1a:5e:06:ce:84:97:3a:d2:
c3:a3:00:76:69:bd:7f:ef:28:96:a3:d6:81:de:4f:7f:f5:26:
9e:56:4b:67:eb:75:08:61:c6:ae:1a:ef:6a:2c:e5:9d:f1:8e:
cc:91:27:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:08:54 2025 by rpki-client