Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
File: GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft (raw, json)
Hash identifier: CzN3PXxwTvGdinLzXiBzo0KAXG0cLruhHjsiFvoS5YE=
Subject key identifier: 41:1A:46:E8:04:7E:73:92:67:D8:F0:09:2A:0E:87:64:C7:99:BB:2C
Authority key identifier: 18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC
Certificate issuer: /CN=186590ee4a796301c422e033f944d263d6adeebc
Certificate serial: 019A71B89C554F5E7EF735107448A1EF8E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
Manifest number: 124E
Signing time: Tue 11 Nov 2025 07:01:55 +0000
Manifest this update: Tue 11 Nov 2025 07:01:55 +0000
Manifest next update: Wed 12 Nov 2025 07:01:55 +0000
Files and hashes: 1: GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl (hash: GtZMyksAM0yJeX3i3NPpLD1s9pyG1rgohf7Sv6rvfdU=)
2: xbbxTo9rn50nwhGlFUGMbwhSzbo.roa (hash: zFleJFRgd2evTBBfHWP3ENqdzORcbjMKg0D2r2qzukQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9c:55:4f:5e:7e:f7:35:10:74:48:a1:ef:8e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=186590ee4a796301c422e033f944d263d6adeebc
Validity
Not Before: Nov 11 07:01:55 2025 GMT
Not After : Nov 12 07:01:55 2025 GMT
Subject: CN=411a46e8047e739267d8f0092a0e8764c799bb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:90:6e:6a:ae:f6:bf:91:ce:82:72:d3:f9:
28:4c:a0:4f:e2:71:4e:d8:ac:0f:91:50:77:2d:d0:
4b:13:82:fc:e8:08:e0:ee:e1:f1:f3:44:2a:7c:38:
97:8b:40:2d:8a:e4:66:74:57:7f:11:a8:b3:bc:52:
10:09:60:88:8c:85:87:c3:36:69:dc:4c:c8:a0:28:
f5:35:5a:90:36:2c:bf:b1:98:8b:aa:a9:ba:2b:32:
32:1c:53:c2:a9:2b:c4:01:34:31:7c:b1:19:d1:02:
a7:b0:8b:67:9a:a2:4f:8f:8b:44:2a:19:23:3f:9e:
67:db:df:0d:02:47:56:5f:ef:62:3e:df:d3:d1:d5:
dc:d0:16:ca:a5:cf:66:3a:ae:33:80:59:a1:d7:9f:
96:ef:6a:96:b3:e7:70:a5:bd:5e:1c:40:87:15:37:
f1:43:f8:82:4e:1e:43:dc:7f:a1:e9:3e:0f:05:b6:
b4:56:d1:85:5d:1d:30:61:c1:53:69:ee:66:4f:d5:
d1:23:6b:48:15:e4:c4:08:04:7a:d7:01:60:f8:b4:
1e:45:33:87:26:63:77:94:15:2c:8e:ca:a9:8f:54:
b6:05:0a:14:c3:ba:5b:00:88:3a:65:e1:97:d4:b7:
9a:dc:76:66:40:6a:74:b5:a7:21:10:47:0b:76:f8:
f5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1A:46:E8:04:7E:73:92:67:D8:F0:09:2A:0E:87:64:C7:99:BB:2C
X509v3 Authority Key Identifier:
keyid:18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:64:76:cc:bd:fd:df:0d:3d:6c:38:0d:1f:b2:29:1d:29:bc:
49:31:97:d8:c5:68:e8:1f:0a:8a:ee:17:4a:fa:67:bf:52:08:
b7:51:f4:1b:9d:a8:75:9e:a1:c0:58:35:aa:6e:6e:9e:14:a0:
0a:f3:6a:e8:b9:76:ab:34:a6:73:78:9f:16:9c:4c:2d:a8:d4:
de:84:df:63:5d:85:5a:df:a6:9f:4f:a5:ed:ac:08:ab:ca:61:
57:d1:71:0f:93:9f:d7:f2:0e:fd:6e:b7:42:8b:9b:1f:fa:d3:
4f:d9:c7:14:05:30:3e:c8:76:62:58:a7:2d:9c:2b:64:8f:63:
a7:6a:9f:54:42:aa:1a:2b:82:90:f2:25:f0:a2:8c:3f:71:9f:
f5:23:eb:f4:3c:23:e2:d9:10:c0:a2:2f:af:0b:29:31:d4:21:
7f:60:ca:47:d8:c8:23:08:6d:2e:33:fc:b5:21:90:f9:b1:09:
d7:90:7c:d2:ed:6d:26:9d:81:5f:b7:89:54:39:75:56:c0:e9:
76:8e:59:35:94:7a:5b:3e:76:b2:24:51:ea:e6:40:93:ea:3b:
92:8c:1a:66:98:58:61:58:b8:ef:4e:a2:82:59:62:02:01:4c:
fd:7e:42:51:e9:7f:3f:81:dc:0d:eb:ef:53:88:ba:79:5f:e8:
30:09:51:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:40 2025 by rpki-client