Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
File: l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft (raw, json)
Hash identifier: LZnhX1sDeb3WbSNSJpYD9hcIAL7diXaIkPyLdm5uRoQ=
Subject key identifier: E7:4C:FC:D4:AA:47:13:6A:A5:9B:D0:0E:67:48:BD:29:8A:2A:6A:4E
Authority key identifier: 97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
Certificate issuer: /CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Certificate serial: 0199FC2148B3C8AEE275191D57466B80CB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
Manifest number: 17
Signing time: Sun 19 Oct 2025 11:01:03 +0000
Manifest this update: Sun 19 Oct 2025 11:01:03 +0000
Manifest next update: Mon 20 Oct 2025 11:01:03 +0000
Files and hashes: 1: 3MukuvAjChzbkXUiH7AnQDbb0l4.roa (hash: kY3n/ZTy9g9zEH976kSVtvidmHz0YnZOSjj64JdMJqA=)
2: M9icYFpRdfuUP8GszU75Wi0Nv1A.roa (hash: enDVpQ7OlTMZIE4utPL8AG9YkPcxUy6DkUw1A6uMG2w=)
3: l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl (hash: i51KsG6YLmhbt13y8UF6l5ZcWSilanG2II4YaW6DdUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:48:b3:c8:ae:e2:75:19:1d:57:46:6b:80:cb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Validity
Not Before: Oct 19 11:01:03 2025 GMT
Not After : Oct 20 11:01:03 2025 GMT
Subject: CN=e74cfcd4aa47136aa59bd00e6748bd298a2a6a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:5f:e6:87:27:9f:d7:34:b0:48:c9:67:d0:
e9:8d:40:69:91:29:69:d6:9f:9e:88:27:ac:e1:af:
fd:ae:3f:59:54:4e:3a:16:81:57:45:2e:4b:ae:86:
dd:9f:0d:1a:50:be:5d:fd:17:3a:08:2d:47:af:8d:
34:81:10:c2:b0:04:c3:17:38:9b:cf:70:05:7c:26:
ab:17:b1:5f:ec:30:db:10:9d:aa:81:28:73:44:62:
9f:87:c2:52:53:74:d8:15:5a:8e:ba:e6:f6:1f:84:
ac:d8:dc:17:4d:39:bb:49:0d:fd:71:26:72:86:ed:
c2:20:6b:bc:fb:54:de:cc:41:0f:55:ce:c4:8b:d3:
3f:da:73:8f:9c:cf:ac:42:29:a5:3b:50:08:4c:49:
32:0b:e4:0e:bc:76:ea:6f:de:17:e3:67:71:b8:cf:
af:b3:4f:1f:57:4a:d3:f1:a9:f1:6a:fe:c5:fc:b4:
be:f3:1e:82:08:36:00:11:c5:e8:25:d0:0c:d3:1f:
0c:ab:bd:9a:8e:93:e4:60:4e:f9:e2:70:f1:c0:77:
3e:a8:05:8b:d2:aa:a7:ec:88:55:5b:71:40:7d:f5:
69:e5:50:5d:88:fc:d0:6d:72:a8:3d:21:b2:06:66:
d3:33:7e:04:d6:c6:c8:d9:64:e0:ba:6d:7b:fa:e8:
7c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4C:FC:D4:AA:47:13:6A:A5:9B:D0:0E:67:48:BD:29:8A:2A:6A:4E
X509v3 Authority Key Identifier:
keyid:97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:a5:9c:c6:9d:bd:ca:2e:6c:18:4a:d8:1d:42:02:e4:5a:ee:
62:56:fe:90:0b:e3:a2:00:69:ca:01:fe:51:ed:1a:b8:d4:0c:
8a:9e:54:a0:18:bb:5a:51:d3:77:42:37:2b:86:6e:cf:33:a5:
85:fc:7a:ba:09:05:32:97:11:ca:03:02:6c:ee:e1:81:01:e1:
0a:fe:33:42:70:93:bd:e7:bd:95:97:68:5f:71:86:9f:68:c5:
74:d7:f9:b0:dc:33:ec:b9:9e:78:35:9f:1a:38:32:8e:06:64:
87:02:10:91:bd:c3:32:0d:63:50:58:c2:ec:c5:30:ee:70:15:
60:cc:97:4c:af:31:59:4d:00:f3:04:95:16:e0:8f:c3:8f:98:
f9:52:02:4a:b0:08:a6:7b:98:ed:e9:71:07:90:07:61:7e:bd:
fa:e1:23:59:c8:5e:01:11:0e:f1:59:38:57:19:06:99:6e:55:
75:dd:39:5a:57:9f:8a:c9:73:6d:74:f1:eb:aa:a1:ad:04:f2:
6a:6a:1f:a9:54:52:46:4a:ce:f1:a6:17:b6:1e:30:f5:62:dd:
3e:13:c6:64:0d:2f:33:1c:a6:66:5b:46:7c:9c:e6:1b:5c:ba:
c1:f0:a1:00:2c:d9:6d:3d:46:0d:f2:f7:13:1b:48:8d:50:88:
fa:af:16:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:47 2025 by rpki-client