Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
File: gq09xArNGFL8dKzdN9jwe7sCXRg.mft (raw, json)
Hash identifier: c4PPb4CYXZ7iX8I1+BIhw8X3d6VgeDloQQols1xOefo=
Subject key identifier: 1E:BA:04:04:EA:CE:37:A3:FD:97:B2:88:98:37:7D:C3:BF:14:B9:4A
Authority key identifier: 82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18
Certificate issuer: /CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18
Certificate serial: 0199EFAFDA5B69D2A6EB4CAACC78FD46C84A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
Manifest number: 02C3
Signing time: Fri 17 Oct 2025 01:01:43 +0000
Manifest this update: Fri 17 Oct 2025 01:01:43 +0000
Manifest next update: Sat 18 Oct 2025 01:01:43 +0000
Files and hashes: 1: gq09xArNGFL8dKzdN9jwe7sCXRg.crl (hash: 5GtFBtIOGe/z2qop/Y2olpQvvq401z2uNXxq7NzUIKY=)
2: moIHrCUIysvqre1db9iG8YhXiD4.roa (hash: 3qmhRdBwt3IbZM/x/JJkjl8tv0bK7oEsrL8A8nVm2tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Oct 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ef:af:da:5b:69:d2:a6:eb:4c:aa:cc:78:fd:46:c8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18
Validity
Not Before: Oct 17 01:01:43 2025 GMT
Not After : Oct 18 01:01:43 2025 GMT
Subject: CN=1eba0404eace37a3fd97b28898377dc3bf14b94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:d8:87:05:3b:9d:5e:01:c2:0b:05:c6:14:
35:48:b8:23:b2:75:2b:a3:ee:c4:30:74:49:e7:d9:
46:d7:2a:2f:d6:61:37:99:f0:c2:05:e3:88:97:91:
c9:45:2c:bc:9b:76:6b:db:cf:19:28:25:d0:d2:1b:
14:15:9d:c3:59:42:66:7e:df:b8:1e:15:76:ff:a9:
ba:03:f4:fa:c1:1f:cd:0f:25:fe:c2:93:80:fd:df:
25:6c:38:55:c9:75:49:a4:f4:dd:1f:91:4a:64:b3:
24:8c:fb:33:66:0f:c5:dc:fb:82:f5:10:2d:20:10:
fb:0d:0b:63:83:dc:9a:0e:f3:6a:4d:48:fb:6e:fa:
03:8d:f5:a9:c7:8d:6c:2f:39:89:7f:5b:57:ed:04:
9c:e7:15:08:7a:93:5e:42:0b:f9:1b:a8:d9:e5:43:
54:1f:7c:0e:06:a0:f3:ab:24:ee:9c:dc:08:8a:bc:
67:5d:6b:84:ee:6b:08:0d:a6:cd:55:16:c0:e0:d7:
c5:59:c3:b3:86:55:d2:08:e5:f4:5a:62:51:29:7c:
2c:80:25:30:b4:f6:ec:f5:ab:dd:f4:1f:8a:76:b5:
c8:c0:8d:12:38:f6:7e:27:4f:e0:25:87:38:67:f6:
da:63:00:a6:e5:ee:ec:1e:18:e2:99:90:78:f0:cd:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BA:04:04:EA:CE:37:A3:FD:97:B2:88:98:37:7D:C3:BF:14:B9:4A
X509v3 Authority Key Identifier:
keyid:82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d3:6b:52:76:cf:0d:5e:2c:61:68:e5:19:57:f0:19:5b:d5:
d4:45:10:aa:3f:d4:8d:fe:73:2f:c6:4b:8e:d9:44:c4:8f:29:
01:22:b5:7a:59:14:67:b9:12:b5:38:79:55:61:76:97:13:57:
2b:43:05:ea:b7:55:2e:d5:a2:1a:06:65:cb:3e:a3:d7:bc:b4:
b5:30:71:59:1b:0a:55:32:b4:09:86:1b:aa:1b:18:32:75:21:
eb:49:de:3a:11:e4:f3:96:2f:09:2a:2b:1e:40:a5:b8:8a:db:
66:7e:24:63:a2:b6:c4:4b:4f:fa:f9:f1:e8:44:fc:a3:4c:af:
79:c0:0b:b7:1e:c3:a6:5b:b6:a6:21:ab:ae:92:8f:41:ee:15:
a1:9c:7c:69:28:df:15:a3:28:4e:50:ac:6d:30:ff:fc:c5:49:
2c:41:ba:c4:f9:41:8e:ce:73:b1:04:11:66:3f:20:29:82:cb:
0c:40:92:cd:ed:41:55:09:a0:ad:49:bb:5e:32:ed:88:67:bd:
e8:47:97:f7:63:46:e8:2c:95:2a:9d:b4:d9:14:31:3c:97:48:
5b:58:b2:ad:a6:48:81:26:a3:68:75:49:3b:64:5a:76:72:86:
f6:c9:c3:f6:62:9e:42:fc:22:4d:53:96:bc:68:d6:be:48:c7:
88:66:82:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 04:26:21 2025 by rpki-client