Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft
File: GqwOVjNDfnAN-YWImWKGzydis5c.mft (raw, json)
Hash identifier: 9yZlkkido9h+YWAsb7sNXpwzHVWJTR1WqzHrrGPzF7w=
Subject key identifier: 6B:D2:A6:C9:72:FA:A1:89:6E:8C:5A:6D:EE:42:25:28:0B:DE:E4:BC
Authority key identifier: 1A:AC:0E:56:33:43:7E:70:0D:F9:85:88:99:62:86:CF:27:62:B3:97
Certificate issuer: /CN=1aac0e5633437e700df98588996286cf2762b397
Certificate serial: 01992331315D6F2BE949279DD6393A54F46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqwOVjNDfnAN-YWImWKGzydis5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft
Manifest number: 0126
Signing time: Sun 07 Sep 2025 08:00:50 +0000
Manifest this update: Sun 07 Sep 2025 08:00:50 +0000
Manifest next update: Mon 08 Sep 2025 08:00:50 +0000
Files and hashes: 1: GqwOVjNDfnAN-YWImWKGzydis5c.crl (hash: GuNYi3MIRu/CAByGKI7yRPb1IbVkYvqcxO+SHf+H8ZE=)
2: Z7scd0bqOcooSWNO6P1-J8lD1ZI.roa (hash: KdiHC1KssZd8y+s+NZVmdEHh2GbufRCimiylYpM1VS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqwOVjNDfnAN-YWImWKGzydis5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:31:5d:6f:2b:e9:49:27:9d:d6:39:3a:54:f4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aac0e5633437e700df98588996286cf2762b397
Validity
Not Before: Sep 7 08:00:50 2025 GMT
Not After : Sep 8 08:00:50 2025 GMT
Subject: CN=6bd2a6c972faa1896e8c5a6dee4225280bdee4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f5:a1:1d:a8:d6:8e:de:47:bc:b3:d8:40:dd:
89:a2:f3:3f:ba:47:d4:36:7b:30:ea:cb:46:2c:9f:
16:9b:0b:b2:a1:3a:53:e8:25:b3:55:c5:3f:61:0b:
e9:84:ce:67:6f:0c:bd:9e:f8:28:7d:ca:96:6e:1d:
bc:d5:ef:60:f1:70:cb:d3:ef:99:e5:86:24:f8:c4:
11:98:34:2f:a5:e9:9d:ff:10:f3:96:57:dd:83:ff:
5c:2a:85:06:3d:b1:a6:48:dc:2e:94:e4:b6:52:78:
32:fc:93:92:dd:74:72:d3:2c:ce:d9:47:56:ab:6b:
d9:52:60:62:c4:00:01:9a:cf:db:6e:05:22:1c:c9:
80:df:03:a5:f7:06:ed:6b:e5:25:21:6d:6b:55:1f:
fb:9a:ac:1f:b3:cf:f1:94:ff:fe:87:d2:96:55:ed:
2f:a8:08:56:4f:55:50:c3:5f:84:14:ed:b8:08:2d:
7a:29:60:b1:a2:ca:73:9b:3d:97:9f:4f:84:61:33:
41:91:27:b9:de:39:a0:fa:20:85:c9:e1:7c:1b:46:
14:92:ea:60:bb:cb:f4:6d:9f:a4:bc:85:2e:be:81:
1a:0c:6b:b6:88:d7:f6:a6:25:f8:d6:61:6e:ac:67:
49:66:b7:56:3d:d9:c6:89:70:3d:95:68:b8:8c:07:
a9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D2:A6:C9:72:FA:A1:89:6E:8C:5A:6D:EE:42:25:28:0B:DE:E4:BC
X509v3 Authority Key Identifier:
keyid:1A:AC:0E:56:33:43:7E:70:0D:F9:85:88:99:62:86:CF:27:62:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqwOVjNDfnAN-YWImWKGzydis5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:e7:46:66:e5:20:b4:02:d6:69:78:00:59:ba:cb:04:36:c0:
1e:97:25:2a:56:74:34:3c:98:bb:ee:0a:27:0a:2a:d9:92:8b:
db:31:41:81:ab:c5:0a:bd:b5:47:47:c6:a2:4b:d6:10:e7:96:
f8:9c:6d:78:e8:70:08:90:97:80:2e:7e:b4:7f:7d:d4:10:4e:
36:5d:3a:51:d9:e7:12:de:ba:4f:8c:50:b0:da:15:90:77:7a:
f0:09:90:9f:c9:7f:e8:7e:30:64:92:92:9e:b7:c5:d8:09:d0:
25:2b:67:02:dd:13:97:17:08:85:4f:4e:59:e7:c3:5b:a8:08:
78:97:6a:73:10:73:58:50:e4:4a:84:7f:6d:f7:e5:f7:78:f6:
1c:00:55:2f:53:96:f9:98:12:4c:b5:f5:e3:e9:fa:a5:7b:07:
57:b4:c0:c8:ca:a1:8e:e2:98:df:4d:b0:c4:89:13:ae:56:b5:
47:43:5c:30:58:e0:e6:08:c3:b1:37:d3:1d:53:4c:90:29:1d:
c6:9a:b3:5e:ad:cd:ae:dc:a8:43:00:2f:41:0d:38:55:c3:bd:
7a:61:2c:e6:30:32:2a:66:89:e8:a1:cf:48:a7:5b:b0:e6:11:
b5:f7:e8:7c:00:3f:e4:0a:eb:8e:b2:52:79:b2:b4:05:2c:62:
ef:c6:12:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:52 2025 by rpki-client