Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
File: GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft (raw, json)
Hash identifier: SWgBlwoekCON/A2PyH4k6CA9bv0bCMaEEcppXmNeCe4=
Subject key identifier: 73:5B:AE:B4:DB:AC:62:A9:BF:80:9B:68:F4:AA:B8:02:5D:0F:06:28
Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
Certificate issuer: /CN=1902391799337601331f5a12af11e9f4f6421159
Certificate serial: 0199FC8F399095FDE16EB9957E416965EF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:08 +0000
Manifest this update: Sun 19 Oct 2025 13:01:08 +0000
Manifest next update: Mon 20 Oct 2025 13:01:08 +0000
Files and hashes: 1: GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl (hash: sP0CtNACzXz4vfV+S9w8csaMXNSkt5eVr/a0yWrH9eY=)
2: MG8GkG1guL2JPQamlCCVL0WmXAU.roa (hash: zOqvBBG8dg13+yUZPiGoLbhSAZEkww5TYWxAzF0vCsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:39:90:95:fd:e1:6e:b9:95:7e:41:69:65:ef:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1902391799337601331f5a12af11e9f4f6421159
Validity
Not Before: Oct 19 13:01:08 2025 GMT
Not After : Oct 20 13:01:08 2025 GMT
Subject: CN=735baeb4dbac62a9bf809b68f4aab8025d0f0628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:80:0d:72:17:b2:ff:a6:45:82:db:e7:ce:
f9:19:d1:14:1b:fb:f2:bb:1d:d5:f1:92:66:f6:7d:
dc:67:26:c2:0b:59:58:84:f8:ea:43:60:44:be:02:
40:cd:65:0c:4f:62:43:c7:b8:f7:e1:19:f9:22:43:
98:d9:01:73:da:ba:45:8a:50:93:6f:31:80:d1:c7:
c7:3e:ea:55:26:3c:2f:96:2c:43:02:76:98:0f:68:
d5:8a:ab:8e:0b:5b:70:f4:41:ab:54:db:0e:f2:74:
e5:78:9c:74:df:fa:a3:ba:43:3e:3f:ae:84:30:90:
e9:0d:0b:bb:40:71:21:31:8d:d0:9e:0c:58:ce:c0:
26:2d:c6:94:c4:e5:99:c3:14:fb:ec:20:87:79:a1:
05:fb:6a:f5:81:c0:89:ec:f8:74:55:8c:cb:1c:e5:
96:ac:30:ae:87:24:ec:34:2a:0d:cf:65:59:d3:e4:
78:6b:b9:62:2d:20:44:f0:3d:6c:39:ec:5f:20:b0:
27:29:12:f8:19:5c:78:58:22:d0:23:a0:fe:80:d7:
36:70:c1:c5:5a:67:2e:55:5e:f7:a6:ac:b2:6f:d1:
ac:0c:55:01:d2:96:60:dc:26:6f:75:0f:b5:50:c4:
bb:58:83:cf:3c:65:9d:3e:51:5f:17:ef:c5:85:18:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5B:AE:B4:DB:AC:62:A9:BF:80:9B:68:F4:AA:B8:02:5D:0F:06:28
X509v3 Authority Key Identifier:
keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3b:9b:e4:f4:d4:1f:71:ab:e2:c3:df:ef:5d:53:c9:88:a6:
46:c6:92:12:44:c7:9a:e7:6a:6a:a1:81:d4:d4:95:7a:a9:3a:
ef:6a:aa:2c:39:65:ca:f7:35:fa:a6:54:d3:fd:ef:da:83:54:
0e:dc:5c:94:87:b6:db:31:29:2a:b2:29:92:89:89:e4:2c:84:
5c:f7:bf:05:2f:cd:df:63:12:4b:6e:e2:98:8e:2b:69:1d:d5:
8c:da:03:68:64:7c:ba:ac:54:d4:66:bb:8d:84:c2:f5:2a:5d:
65:ae:d7:7e:38:18:f2:ba:aa:42:88:51:7f:83:d9:75:49:a6:
58:98:7b:4e:93:21:f3:fb:f2:d5:cc:d4:a3:f0:ae:8d:24:cf:
b9:c0:1e:aa:cc:96:77:12:cc:bb:e2:a3:f0:81:7c:6d:43:c3:
f4:5e:10:0d:e3:e9:aa:63:14:00:a1:40:9c:87:ae:53:92:4a:
7f:f4:ae:a6:88:4e:2f:a9:82:fe:6e:3a:01:38:ef:96:18:6d:
cd:d0:43:27:8d:b1:5b:57:8e:c1:4e:d3:0e:bc:98:f1:86:22:
da:83:a9:29:23:08:84:14:81:b1:76:bf:41:d8:0a:3a:47:b2:
97:02:2a:2f:63:83:70:4e:d0:66:9e:31:55:3e:57:f2:bf:05:
11:11:6b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:56 2025 by rpki-client