Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: +YGVU8gbvM1UTbjJMfFiy3emGy7Pqo6I88SaK2EnO7I=
Subject key identifier: C9:A3:88:BD:73:95:1A:A6:8F:4D:C6:F8:98:0D:47:C1:E6:18:33:BA
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 0198530D76BBB746C0F5698A5A3ED2890E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 0F49
Signing time: Mon 28 Jul 2025 22:00:47 +0000
Manifest this update: Mon 28 Jul 2025 22:00:47 +0000
Manifest next update: Tue 29 Jul 2025 22:00:47 +0000
Files and hashes: 1: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: 7zX2TMm6AsMx26e0FQlu4or2UI9ZuyHAQddkNPxhyT4=)
2: qWiRXpCL0NKtXzFBLcgeaF0mM4A.roa (hash: V0gkUhFHDtKhWrN/3cVBozf0t4RmZJghnQqebhSHl+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:76:bb:b7:46:c0:f5:69:8a:5a:3e:d2:89:0e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: Jul 28 22:00:47 2025 GMT
Not After : Jul 29 22:00:47 2025 GMT
Subject: CN=c9a388bd73951aa68f4dc6f8980d47c1e61833ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:8b:de:6b:8f:21:3a:3e:d5:5a:04:60:f7:
19:bd:3e:1d:7a:88:2e:12:cb:17:02:37:04:1f:65:
64:ff:5b:8d:97:b8:dc:00:7b:45:96:9f:e1:2c:a8:
b4:e3:c1:8e:1e:3a:69:91:7e:78:19:28:f8:7b:f9:
cb:e8:d6:71:7d:93:cb:df:74:ca:5c:05:90:6c:b2:
34:4f:2a:e0:dd:6f:1b:de:aa:f7:b2:8a:f9:c5:82:
43:1d:18:cd:9a:5c:83:ab:73:75:65:47:41:0c:c8:
9e:92:56:5b:98:8f:54:54:c6:4c:3e:08:ba:26:1b:
66:c7:11:be:76:ef:81:ab:a4:2b:cc:79:0a:15:8e:
04:bb:32:07:89:7e:32:2d:3a:12:bc:60:3f:c1:b1:
8f:74:5b:28:fe:6f:2c:8e:44:b4:2f:8c:25:35:08:
c2:92:f9:1d:3d:8b:c8:2e:a8:66:54:d6:94:fd:01:
a8:6e:25:66:69:c4:7a:68:90:93:14:4a:a5:95:9e:
08:a9:b2:e9:01:05:5a:3c:b4:f5:c1:13:e2:da:1d:
34:ea:bd:70:bb:cc:00:1b:51:4f:03:07:27:bd:98:
e6:e5:ba:9d:26:41:e1:1d:4b:06:62:56:82:6c:80:
bc:ea:53:ef:79:c7:6a:8d:9e:f5:4d:f9:28:24:eb:
76:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A3:88:BD:73:95:1A:A6:8F:4D:C6:F8:98:0D:47:C1:E6:18:33:BA
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9d:e6:bf:ee:6b:12:aa:b2:d9:42:2c:c7:19:da:a9:13:f8:
c8:bf:be:01:47:c2:fc:fc:9a:4b:3c:da:23:3f:ad:2c:71:3c:
33:86:84:b6:3c:7e:f3:11:98:14:46:5f:f1:97:a1:64:38:52:
11:35:9a:72:a1:8e:bc:a0:d3:71:9b:57:92:98:ce:e6:e8:41:
ab:0e:db:f1:01:0c:f6:10:03:b9:b8:b0:56:d1:49:94:c5:f9:
2e:f0:7b:73:b6:93:a3:02:a4:31:75:e3:94:eb:cc:63:54:d5:
60:1a:63:82:3d:b9:a6:cc:80:56:fe:b0:46:91:53:22:51:a8:
84:0a:28:7c:90:a8:ca:80:be:c4:a2:93:fc:b9:3f:4f:b0:72:
24:06:8b:cc:04:2d:69:6d:5a:de:bd:80:dd:03:8f:91:de:89:
c8:7a:2e:f4:4a:1e:51:e3:f0:b6:99:7e:5c:f9:76:ab:ef:51:
fd:8b:d2:7b:f9:99:54:9a:d6:c6:67:bb:7f:29:c7:9c:37:d2:
34:67:80:d2:0a:b9:94:02:b2:20:f0:f2:bd:d3:ca:f7:78:f7:
6a:09:f9:36:71:c3:fc:eb:48:41:f3:71:a9:62:0e:bd:90:23:
98:a8:03:26:9a:f5:5d:4c:3c:ae:d1:ca:0d:87:c7:94:de:b2:
3c:50:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 06:17:47 2025 by rpki-client