Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
File: Gqq6fafI82yLJ1ynOEkc7cy14xI.mft (raw, json)
Hash identifier: xNePAP8XG+hN6nTjQrsTxeSbRnS9NzCqFth0g7fVpLE=
Subject key identifier: 18:1E:9C:BD:00:4F:B9:6B:D8:7B:B4:8B:A6:3A:A5:83:0B:90:19:83
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 019A28F9B9D9D96A12603C70A06B6D789976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
Manifest number: 0B08
Signing time: Tue 28 Oct 2025 04:00:45 +0000
Manifest this update: Tue 28 Oct 2025 04:00:45 +0000
Manifest next update: Wed 29 Oct 2025 04:00:45 +0000
Files and hashes: 1: Gqq6fafI82yLJ1ynOEkc7cy14xI.crl (hash: R+SOj4pC3UUIAVZqNTBX1V0YsFDGaUM7ZB2byXZn0KU=)
2: SrGxiEcbv0Zc7-cVhdHTCkDoX9w.roa (hash: iavVdmhGOCEa+iXrvr89fSP+yPeTS+0oRnvgbRj+J3g=)
3: qdU5r0eoyeBHUa1NS90_R0v_QXg.roa (hash: VQ2X9ZLs6HKDrETPNNW9FW4YLxSUU+RRG8UFpA6pPfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:b9:d9:d9:6a:12:60:3c:70:a0:6b:6d:78:99:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Oct 28 04:00:45 2025 GMT
Not After : Oct 29 04:00:45 2025 GMT
Subject: CN=181e9cbd004fb96bd87bb48ba63aa5830b901983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:6b:09:1f:f9:c0:74:2a:f6:ec:d0:58:13:
57:38:bf:13:79:5e:69:23:80:8e:3f:83:36:b9:3c:
e3:79:37:7a:b8:d3:6d:48:1c:00:97:7d:44:a6:5f:
cd:aa:87:c4:b1:1a:62:7a:9e:e5:d5:59:bd:3d:a1:
25:1a:31:76:ae:9a:04:e2:97:2f:12:66:b2:f7:b8:
b9:b7:4f:93:bd:8f:00:c2:44:aa:ee:b5:6e:57:8a:
a9:8d:e6:35:24:fb:da:7e:cd:1b:36:7d:27:50:52:
b5:25:d2:db:69:f0:2c:18:86:31:c5:a4:3f:33:2b:
99:58:8e:bf:f0:6b:af:07:ee:b0:aa:1b:07:02:52:
d8:83:69:c9:11:91:dd:3c:06:1e:47:40:09:e3:aa:
7e:72:04:1c:ae:87:e0:4c:6b:d9:d8:0a:28:9a:f4:
15:4f:bc:04:4d:47:d2:d1:9a:c6:3a:f2:46:5d:e6:
7b:38:a5:4f:86:12:a9:ec:55:69:5a:a0:0c:fd:4b:
b5:6e:d4:51:7e:fb:ba:62:5e:98:eb:96:8e:20:c4:
5f:fe:86:38:fc:cd:4b:d0:7a:cb:f7:bf:c1:5a:c0:
33:03:80:38:60:fe:4e:4b:29:2d:f2:74:2d:82:d2:
72:3c:1e:f4:3f:61:13:b2:cf:01:a4:60:35:f4:61:
7a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1E:9C:BD:00:4F:B9:6B:D8:7B:B4:8B:A6:3A:A5:83:0B:90:19:83
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:66:74:1c:7a:5a:99:3c:64:93:54:60:57:1f:96:86:23:22:
a4:db:a9:ec:fa:0e:4d:a6:b9:8d:b6:1c:b8:75:76:ad:b3:7b:
2c:9e:e2:75:35:1a:d5:9d:5d:08:c3:16:55:bc:1a:ba:03:35:
58:f7:a1:2d:47:55:63:31:e7:c5:c1:a3:1e:1a:9a:77:57:c6:
14:58:88:96:9f:91:71:7a:e1:e6:be:b4:4c:d8:c2:10:2c:6e:
7a:3c:ce:5b:06:50:d4:c3:fc:d7:ae:8e:08:c8:c5:a3:b2:f5:
98:41:b9:32:0b:57:c2:0c:9d:66:f8:0b:6d:0b:77:09:65:24:
9e:31:ad:22:a3:01:70:a4:1f:fc:c7:5c:d3:ec:18:84:be:db:
52:28:76:70:12:64:64:3b:04:72:c1:c5:0b:75:42:62:fc:53:
26:4a:91:5c:9f:c1:ba:af:b1:7d:c6:e8:e7:98:06:ba:7d:71:
8f:7b:98:14:54:54:65:2d:5a:98:b4:50:c5:0b:ff:34:d2:4b:
64:ec:62:da:43:1b:f3:1a:e1:97:b7:d5:05:0f:ae:ff:ed:d7:
a9:3c:bd:29:ef:86:b9:32:f0:5c:7f:cb:0b:22:2a:a8:f3:d6:
87:60:28:0a:76:9f:98:45:2c:63:81:28:e8:84:62:e7:e7:2f:
b3:f5:e1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:46:17 2025 by rpki-client