Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File: GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier: pUGHWF+WZzq4Ux+WG4YBYn6qf0d0zcuMUH9UOtfZCqU=
Subject key identifier: 2E:49:E0:D6:99:10:1C:27:03:9C:4C:F9:0E:C7:E0:53:61:C5:B9:00
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 01993047C39F80A58BEC56805DCE7C611E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number: 0E2F
Signing time: Tue 09 Sep 2025 21:00:33 +0000
Manifest this update: Tue 09 Sep 2025 21:00:33 +0000
Manifest next update: Wed 10 Sep 2025 21:00:33 +0000
Files and hashes: 1: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: eUoMKvd5hKHScKeFslqSeypktW++LSk5rRrtSznq6/c=)
2: HGA6jjVB7UclmIMciEeXUBcTxyQ.roa (hash: blRYsuCoLjuXHy8qGKJB2iPcbmUbbGdoaMO6Z5/ynCQ=)
3: kZQj5c3qTbDNst6FPmlVFTJBwU0.roa (hash: OVYrhsG4NKJtVB+RFz2IORzGEYajNg4HBNGBwkD+aFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:47:c3:9f:80:a5:8b:ec:56:80:5d:ce:7c:61:1e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Sep 9 21:00:33 2025 GMT
Not After : Sep 10 21:00:33 2025 GMT
Subject: CN=2e49e0d699101c27039c4cf90ec7e05361c5b900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:ef:e9:d8:28:67:67:5a:fc:8d:47:1b:d6:
fc:3a:ac:37:4e:9c:d0:47:c5:ff:e3:1a:90:69:0a:
67:54:8a:aa:14:89:b3:d5:10:a8:60:a8:01:c8:b5:
40:41:57:3f:58:2f:07:48:04:2b:11:e6:94:f5:5c:
69:4f:54:e2:59:5f:c0:6d:7f:4f:a6:18:85:4e:50:
35:c0:b7:ef:49:c6:7a:53:30:86:a8:93:4d:40:25:
cf:42:51:64:e9:8b:9a:e1:67:a3:0b:3e:2d:a4:6d:
8f:70:f3:f9:c2:c9:6f:49:cb:64:b9:3b:cb:2f:b8:
bb:fc:52:2f:89:25:32:ba:d7:a4:fe:da:27:c1:34:
27:89:e3:41:2e:47:38:b4:59:1d:7b:6e:aa:32:30:
4a:ef:4a:b3:8b:50:96:42:57:48:c4:00:54:70:8a:
3b:90:02:8d:20:30:01:12:0d:a0:ae:c3:43:f3:d8:
cc:bd:6b:c2:f1:85:ac:80:5c:6d:48:29:dd:10:d0:
81:5f:e6:f8:9c:8a:6c:8b:89:16:d9:70:1c:47:39:
b1:d3:99:70:7d:45:8d:5a:39:41:5d:0e:f8:5e:11:
81:fa:d3:d2:b4:8b:b9:62:cc:dc:9d:91:34:8b:a0:
95:b3:86:54:d4:56:29:de:cb:39:fe:bc:64:f8:48:
8c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:49:E0:D6:99:10:1C:27:03:9C:4C:F9:0E:C7:E0:53:61:C5:B9:00
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ae:f7:e2:e9:d8:eb:38:80:04:97:ba:24:65:37:7a:4c:12:
e6:e3:a5:aa:63:7d:a3:33:1e:9f:67:d7:fd:a9:00:6e:24:d1:
d7:e9:80:c0:5f:c7:cd:8d:26:54:a9:94:4e:ac:67:11:7f:49:
e9:3f:ed:d0:d2:f0:ac:26:10:0f:89:10:24:38:cf:4d:ea:14:
d9:a7:0e:30:e8:ab:8c:9d:95:95:69:87:a4:a4:ea:75:2b:92:
b2:c3:96:1f:29:eb:56:73:9b:e5:91:0f:da:04:b2:9f:89:d4:
1f:e2:d0:a5:f1:65:34:1b:cc:f9:d9:b0:ce:81:f1:37:55:0c:
0f:c6:0d:da:92:ea:71:a6:fc:68:c5:33:23:1c:22:ce:62:b0:
c7:22:94:14:71:ad:0d:17:6a:7d:63:7f:fc:21:0a:d9:09:74:
b2:1a:c4:2e:f7:24:00:25:d3:df:74:00:19:25:d6:96:b3:af:
ec:18:22:a3:b9:26:bd:32:00:9b:b0:f7:be:4c:13:2a:bd:48:
1c:3d:50:f3:e5:bb:3e:cf:1d:e2:ac:e4:68:56:ea:41:a6:77:
e5:cc:b6:f9:df:a8:5a:52:84:2a:fd:49:fa:38:fd:e1:09:b0:
26:e3:62:e2:40:57:3f:fc:f1:3a:07:df:8a:f2:98:be:51:98:
f0:8c:10:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwR8OfgKWL7FaAXc58YR6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYTBhMzI4YzZmZTBmMWJjYTVlNjU5OTA0MmRmZjU5ZTUx
M2IyNWQwHhcNMjUwOTA5MjEwMDMzWhcNMjUwOTEwMjEwMDMzWjAzMTEwLwYDVQQD
EygyZTQ5ZTBkNjk5MTAxYzI3MDM5YzRjZjkwZWM3ZTA1MzYxYzViOTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqDv6dgoZ2da/I1HG9b8Oqw3TpzQ
R8X/4xqQaQpnVIqqFImz1RCoYKgByLVAQVc/WC8HSAQrEeaU9VxpT1TiWV/AbX9P
phiFTlA1wLfvScZ6UzCGqJNNQCXPQlFk6Yua4WejCz4tpG2PcPP5wslvSctkuTvL
L7i7/FIviSUyutek/tonwTQnieNBLkc4tFkde26qMjBK70qzi1CWQldIxABUcIo7
kAKNIDABEg2grsND89jMvWvC8YWsgFxtSCndENCBX+b4nIpsi4kW2XAcRzmx05lw
fUWNWjlBXQ74XhGB+tPStIu5YszcnZE0i6CVs4ZU1FYp3ss5/rxk+EiM+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5J4NaZEBwnA5xM+Q7H4FNhxbkAMB8GA1UdIwQY
MBaAFBqgoyjG/g8byl5lmQQt/1nlE7JdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNDRkMjQtMmUxMS00NjZkLThhZGUt
MzhlODQ2MTQ4Yzc4LzEvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8zNDRkMjQtMmUxMS00NjZkLThhZGUtMzhlODQ2MTQ4Yzc4
LzEvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnK734unY
6ziABJe6JGU3ekwS5uOlqmN9ozMen2fX/akAbiTR1+mAwF/HzY0mVKmUTqxnEX9J
6T/t0NLwrCYQD4kQJDjPTeoU2acOMOirjJ2VlWmHpKTqdSuSssOWHynrVnOb5ZEP
2gSyn4nUH+LQpfFlNBvM+dmwzoHxN1UMD8YN2pLqcab8aMUzIxwizmKwxyKUFHGt
DRdqfWN//CEK2Ql0shrELvckACXT33QAGSXWlrOv7Bgio7kmvTIAm7D3vkwTKr1I
HD1Q8+W7Ps8d4qzkaFbqQaZ35cy2+d+oWlKEKv1J+jj94QmwJuNi4kBXP/zxOgff
ivKYvlGY8IwQ0Q==
-----END CERTIFICATE-----
Generated at Wed Sep 10 04:14:36 2025 by rpki-client