Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File: GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier: zOvLAzMgkMv4a3TQLMYfP+v7pLHQZ3Pf+GnC5ozx9I4=
Subject key identifier: 6D:06:49:1D:FE:98:D6:47:CB:66:57:58:EB:E0:98:E7:E1:0D:46:B3
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 019844AC7A4B657B0A6AB9B236D765EB77E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number: 0DB5
Signing time: Sat 26 Jul 2025 03:00:10 +0000
Manifest this update: Sat 26 Jul 2025 03:00:10 +0000
Manifest next update: Sun 27 Jul 2025 03:00:10 +0000
Files and hashes: 1: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: I4kPmy+CkuKHNvccmMLopjWK/3KOlh3uv+SFtXVP+jI=)
2: HGA6jjVB7UclmIMciEeXUBcTxyQ.roa (hash: blRYsuCoLjuXHy8qGKJB2iPcbmUbbGdoaMO6Z5/ynCQ=)
3: kZQj5c3qTbDNst6FPmlVFTJBwU0.roa (hash: OVYrhsG4NKJtVB+RFz2IORzGEYajNg4HBNGBwkD+aFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:7a:4b:65:7b:0a:6a:b9:b2:36:d7:65:eb:77:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Jul 26 03:00:10 2025 GMT
Not After : Jul 27 03:00:10 2025 GMT
Subject: CN=6d06491dfe98d647cb665758ebe098e7e10d46b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8e:00:a1:b6:a6:dd:f6:84:69:a5:e5:5e:4b:
36:ce:4f:37:e6:15:30:f1:25:a0:8a:32:ca:1b:f6:
67:26:52:38:3d:37:91:5a:1f:64:cf:68:93:f0:ac:
f2:8e:81:f1:b4:b0:cd:03:76:e5:ca:a9:c4:6a:d1:
bc:fc:0e:96:cc:18:65:ed:23:62:66:a6:b8:24:a6:
a4:a8:3d:57:80:c6:01:c2:00:a6:f1:94:25:bd:79:
6e:f0:17:fa:d6:76:50:6b:27:e5:b0:75:bf:c9:b3:
9b:1e:2c:9c:65:ba:dc:50:08:35:18:a8:07:77:83:
83:53:1d:f4:37:d9:9f:2e:08:95:3e:0d:68:be:2c:
d5:21:24:7a:84:8a:5c:aa:f4:2f:ff:c8:7e:8b:34:
a7:f9:81:b7:38:d3:5b:96:32:16:f2:f9:a2:31:36:
98:28:48:ec:9b:8a:e1:8c:7a:74:c6:1f:09:f1:de:
f7:02:26:24:61:e9:1b:7f:67:00:3c:91:dd:78:cc:
87:d2:64:7c:d4:a4:1f:52:7e:61:a0:47:96:ae:1c:
a8:ed:8a:b7:4e:68:e9:48:18:48:72:1b:9a:13:a8:
00:24:27:0d:73:56:b6:64:3c:0a:55:9b:9c:57:59:
10:1e:33:79:63:4e:1d:3d:6d:eb:a8:fd:e1:b9:37:
e5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:06:49:1D:FE:98:D6:47:CB:66:57:58:EB:E0:98:E7:E1:0D:46:B3
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b6:55:e2:b5:2e:35:ec:36:82:d8:bb:7c:c5:3d:be:72:7f:
60:46:fe:43:3f:16:1f:9b:ef:b5:fb:01:35:88:33:22:7c:ce:
c7:42:e9:37:3d:96:58:99:12:42:e9:b0:93:b1:15:2c:48:91:
71:f6:6b:98:f9:90:93:1e:e2:91:90:bc:b6:f7:26:c0:cf:8e:
81:a2:ca:43:df:9b:77:6a:ca:d3:5b:ab:a5:55:61:af:44:77:
b6:06:38:cb:e6:57:5f:3e:ee:0f:8b:1a:a2:ae:01:c1:ff:87:
be:8e:05:ae:df:49:21:a3:0c:6b:0a:9d:82:d5:39:30:36:58:
05:3f:a5:1b:a4:9f:d4:0a:ab:97:37:4d:8e:14:b5:48:2a:a9:
56:65:a9:7e:43:22:71:92:16:11:83:b1:39:3d:2e:e7:cd:74:
da:98:ad:61:5f:66:8b:df:31:2d:3c:a7:27:97:76:76:3e:b4:
6b:b5:75:f3:7d:71:8f:73:5c:95:cd:8f:11:c5:ac:ee:5e:a2:
3a:ce:ea:00:d6:b3:52:00:c0:db:4c:44:fd:39:3b:1f:96:89:
db:ea:22:ee:da:7b:83:6e:f5:d7:47:66:3f:43:b2:d3:e7:53:
72:d9:8f:a3:80:67:bd:2f:28:b1:9b:c5:de:0d:ad:d0:81:72:
bb:27:db:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:45:12 2025 by rpki-client