Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
File: GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft (raw, json)
Hash identifier: HGHYlJJBlesbRZIWPFgYOjnH1rAZ7nITTH7L4uVmy+g=
Subject key identifier: 80:CC:03:97:62:34:29:A3:B3:64:E2:9B:6E:60:11:4C:5B:E2:9C:EA
Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
Certificate issuer: /CN=1902391799337601331f5a12af11e9f4f6421159
Certificate serial: 0198D705BCD8459C3AA76D82B459F74D411C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 13:02:14 +0000
Manifest this update: Sat 23 Aug 2025 13:02:14 +0000
Manifest next update: Sun 24 Aug 2025 13:02:14 +0000
Files and hashes: 1: GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl (hash: 13SEHLGUi6rNLm1xhiqouwP9rqla4PRFy6R7T2yw8nw=)
2: MG8GkG1guL2JPQamlCCVL0WmXAU.roa (hash: zOqvBBG8dg13+yUZPiGoLbhSAZEkww5TYWxAzF0vCsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:bc:d8:45:9c:3a:a7:6d:82:b4:59:f7:4d:41:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1902391799337601331f5a12af11e9f4f6421159
Validity
Not Before: Aug 23 13:02:14 2025 GMT
Not After : Aug 24 13:02:14 2025 GMT
Subject: CN=80cc0397623429a3b364e29b6e60114c5be29cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:87:30:93:5b:89:cc:14:41:1d:fd:60:81:e3:
19:25:4e:6a:bc:e9:52:07:6d:10:51:59:bb:8d:11:
86:d4:f3:d3:39:73:8c:6c:33:3c:a3:13:6d:5c:bc:
88:1a:55:55:d8:81:2e:f0:56:e9:76:22:c5:0a:3b:
ff:be:5b:d2:c6:fc:24:24:7f:05:ec:2f:60:04:10:
21:c8:1b:50:3b:20:2e:d1:80:59:7a:8c:bf:d0:a6:
0f:6c:73:40:10:03:84:f7:84:d1:b0:1f:61:90:f2:
c4:ad:a0:56:77:41:e0:fb:60:9f:e9:b9:08:20:61:
d8:b7:c4:64:3f:09:cd:89:01:a2:6e:81:be:3c:fd:
95:06:bd:90:cb:5e:ff:2b:a7:cf:ae:51:e1:0d:e3:
c0:90:49:4d:0b:6c:bb:79:9a:32:3b:27:28:8e:84:
69:9c:9d:ea:25:51:c4:9a:11:9c:33:9c:cd:2f:c5:
6f:87:ff:32:6a:34:c6:84:a2:e5:db:9f:66:dd:d7:
cf:0a:3b:ac:0f:47:29:de:78:14:6d:10:c7:39:0f:
b3:33:1f:b4:a4:78:86:48:18:99:ab:d2:24:8d:20:
2b:7e:fe:b9:14:93:5d:3a:7a:7b:31:01:b6:a3:31:
a6:e5:f1:72:07:3d:89:5a:b0:c1:5b:82:6b:06:f8:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CC:03:97:62:34:29:A3:B3:64:E2:9B:6E:60:11:4C:5B:E2:9C:EA
X509v3 Authority Key Identifier:
keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:c7:64:6c:61:2c:06:70:78:c7:22:bf:e9:5d:46:e4:08:ee:
74:90:93:8a:3a:34:44:0b:0c:3c:9e:bc:f4:73:fa:34:2f:47:
59:a3:8e:45:83:da:be:42:a3:71:12:e4:41:2f:7b:00:5d:54:
b2:bc:19:5a:31:aa:76:64:73:0c:7e:e8:38:8a:88:06:6d:59:
f4:79:7f:d6:66:a4:11:f3:8c:6b:2b:af:8f:b2:b0:34:93:fe:
cc:ca:12:db:b9:ed:0c:b2:ac:79:6d:8f:48:97:ef:01:15:c8:
2d:19:3e:e2:75:e1:0b:7a:6c:6b:99:4a:c5:0b:aa:88:63:96:
8d:76:c4:ad:82:23:07:9c:c6:62:73:d4:16:d9:4d:dd:bb:df:
bf:a9:ab:9a:3b:92:3c:cc:41:55:20:60:ad:31:03:59:d5:4c:
50:ad:03:50:55:65:82:4d:3a:6a:f4:ab:db:dd:94:6e:7f:f4:
e3:85:dc:92:04:a6:09:05:46:dd:6e:74:45:86:7e:2c:e4:e2:
71:ff:66:e9:44:c9:9c:6d:c2:7b:7c:ff:fb:fd:28:b0:ba:77:
26:a1:16:8c:62:16:66:cf:ea:a2:87:24:05:0f:4d:2d:f2:6c:
15:bb:4c:aa:f7:bf:05:ec:cf:54:c9:08:90:42:bc:cf:3d:5d:
dd:81:ca:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:40:54 2025 by rpki-client