Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
File: Gqq6fafI82yLJ1ynOEkc7cy14xI.mft (raw, json)
Hash identifier: SvBL4Q9j/lCVzZzwbUj/Nuxz+lilZFhDpMC2Ms5G5hg=
Subject key identifier: 0D:08:27:91:A5:F1:0E:6C:20:70:E1:E0:F1:E5:4D:47:FD:C2:55:AA
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 019933B794603A062B41E0C64A79D34DBB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
Manifest number: 0A89
Signing time: Wed 10 Sep 2025 13:01:32 +0000
Manifest this update: Wed 10 Sep 2025 13:01:32 +0000
Manifest next update: Thu 11 Sep 2025 13:01:32 +0000
Files and hashes: 1: Gqq6fafI82yLJ1ynOEkc7cy14xI.crl (hash: 6/4d3/3uOC2Q2X5jl2gCOatizv9SBERFelWZhqtBrpo=)
2: SrGxiEcbv0Zc7-cVhdHTCkDoX9w.roa (hash: iavVdmhGOCEa+iXrvr89fSP+yPeTS+0oRnvgbRj+J3g=)
3: qdU5r0eoyeBHUa1NS90_R0v_QXg.roa (hash: VQ2X9ZLs6HKDrETPNNW9FW4YLxSUU+RRG8UFpA6pPfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:94:60:3a:06:2b:41:e0:c6:4a:79:d3:4d:bb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Sep 10 13:01:32 2025 GMT
Not After : Sep 11 13:01:32 2025 GMT
Subject: CN=0d082791a5f10e6c2070e1e0f1e54d47fdc255aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:83:63:09:66:78:00:f0:14:84:ca:48:31:
d7:86:3b:9e:c7:cd:be:d1:b5:c8:56:21:8e:41:70:
9b:b3:f2:17:8d:ba:5a:04:78:fa:42:be:9f:45:46:
16:39:ae:82:a8:10:82:bb:f1:ca:6a:e4:36:6b:28:
4b:80:58:7c:89:6d:db:0e:3f:4c:46:ce:94:88:03:
7a:b6:49:2e:6a:00:52:6a:23:69:f1:a1:b2:73:7a:
5b:99:ec:58:e7:47:e9:5e:60:0a:a4:54:29:f5:ea:
c1:da:a5:b8:d4:44:85:b1:a8:9b:74:b5:33:83:bd:
cc:ab:78:3d:4d:03:cf:cd:df:b4:fc:a2:5b:d5:e4:
8b:49:eb:98:76:ad:6f:6e:05:ff:5f:5d:af:b6:15:
bc:42:f2:2f:85:74:1a:61:d1:eb:be:d9:45:23:d0:
fd:ee:7c:6b:f1:cd:c5:5b:df:30:90:95:31:63:95:
a1:10:db:a8:8e:58:08:12:11:9b:34:fc:71:55:9c:
d3:02:4a:33:b3:0b:de:7e:07:07:fa:6f:81:b6:58:
95:5b:d8:bc:f5:64:75:e3:bd:73:d3:0e:e3:a0:ff:
a2:f1:7f:aa:f9:4e:2b:eb:c5:a1:c1:87:be:13:22:
c2:5e:c3:0f:60:be:6d:79:32:91:ec:0f:2e:cb:3f:
5e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:08:27:91:A5:F1:0E:6C:20:70:E1:E0:F1:E5:4D:47:FD:C2:55:AA
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2a:b5:bc:76:23:ea:5e:36:37:20:7f:66:2f:b2:5b:e3:df:
ea:07:da:c7:63:a7:b7:e7:24:b9:81:0b:a3:72:c2:78:fa:ac:
eb:74:82:c4:d5:41:45:f5:71:35:42:62:5a:3e:ac:02:61:1d:
1e:92:5e:a5:66:a2:29:f2:d2:d0:ad:b6:00:8b:e1:26:19:19:
20:6d:07:fe:de:3f:b9:85:8f:a2:90:9d:cb:99:44:75:32:83:
0c:a5:7a:8e:77:c8:85:92:40:e5:60:e9:40:53:d7:35:c1:7f:
68:68:77:3c:d5:6e:88:91:6b:b4:9b:9f:ef:af:23:df:56:7d:
08:b2:36:c9:b4:7d:df:be:9c:bc:2c:c0:95:74:6b:4c:f8:38:
95:86:e5:e7:ab:80:58:73:59:a0:12:9c:cf:77:c4:fd:d1:d5:
32:c6:df:2d:eb:da:de:bf:7e:3a:7b:45:f6:59:3d:22:78:94:
c3:be:4a:2a:1b:7b:93:e9:e5:b5:f9:96:83:96:f2:a8:bb:9e:
5d:f1:16:6f:19:eb:6e:d0:33:a1:34:eb:3a:e5:78:3d:bb:2d:
b1:b2:86:51:ad:c9:d0:ea:b1:33:3a:c7:50:a6:cb:b3:5b:22:
13:cd:96:23:c7:cb:09:07:01:16:61:fa:5d:a1:4c:ff:03:20:
30:f3:da:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:28:25 2025 by rpki-client