Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File: GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier: by2Z1/CRmZ0Kvw68Ia1rNRx4b6h0WtOZ15gC1dMsMBw=
Subject key identifier: A8:D4:47:BE:3B:D5:C2:83:4D:1E:18:A7:D1:A8:BF:AC:D6:C9:F7:70
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 019A70DC44E835F0DC5B03E9B9C6740C98FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number: 0ED5
Signing time: Tue 11 Nov 2025 03:01:14 +0000
Manifest this update: Tue 11 Nov 2025 03:01:14 +0000
Manifest next update: Wed 12 Nov 2025 03:01:14 +0000
Files and hashes: 1: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: Plc7kb1f9cWm9g04QMSIOHINpZv/mRyKpo+gQizW+eo=)
2: HGA6jjVB7UclmIMciEeXUBcTxyQ.roa (hash: blRYsuCoLjuXHy8qGKJB2iPcbmUbbGdoaMO6Z5/ynCQ=)
3: kZQj5c3qTbDNst6FPmlVFTJBwU0.roa (hash: OVYrhsG4NKJtVB+RFz2IORzGEYajNg4HBNGBwkD+aFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:44:e8:35:f0:dc:5b:03:e9:b9:c6:74:0c:98:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Nov 11 03:01:14 2025 GMT
Not After : Nov 12 03:01:14 2025 GMT
Subject: CN=a8d447be3bd5c2834d1e18a7d1a8bfacd6c9f770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:52:9c:83:25:7b:ce:86:84:3e:c7:f7:ba:
19:d1:f1:d3:1f:9b:4e:a2:f1:16:87:39:8c:fd:4f:
67:13:9d:5f:92:df:ba:54:27:c6:1c:c4:6a:26:9a:
fd:0d:09:7e:69:de:18:b1:98:37:05:0c:66:7c:a3:
88:6e:85:2f:89:3e:8b:75:54:b2:69:51:7f:0c:00:
34:b4:fa:29:4e:b9:8a:50:e1:d7:65:30:36:cb:82:
26:f5:2f:3d:c3:20:9c:a3:44:9f:a3:4f:e7:e1:ba:
16:52:53:ee:7a:bf:91:d6:30:e4:a0:d5:33:eb:b5:
3d:ef:c8:99:ad:91:2e:a7:4c:61:e6:96:aa:2b:62:
f9:9e:9e:a8:c5:3f:40:fd:d4:2f:33:27:4e:f8:62:
75:c8:66:49:49:dc:0c:da:9e:a3:de:a8:e5:77:b9:
c7:5d:bb:4f:b1:80:40:f9:d7:68:72:80:73:65:67:
c1:4b:45:8d:f1:86:1a:f0:5c:a6:3e:28:30:9c:2f:
80:91:12:5e:86:9f:f3:fe:0e:51:c7:c7:97:1b:c2:
23:ef:23:3a:e2:dc:d5:04:36:90:39:b2:8d:0d:d3:
ba:0d:40:bb:1f:17:0b:8d:8e:7d:96:0d:d0:c3:dc:
3e:9d:0c:93:36:c3:52:af:58:dc:b8:d1:d0:6b:13:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D4:47:BE:3B:D5:C2:83:4D:1E:18:A7:D1:A8:BF:AC:D6:C9:F7:70
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:10:40:81:1a:53:9e:76:dd:7c:fb:77:da:a6:cf:37:8d:68:
82:d7:bf:d6:7d:9a:cf:10:1c:d2:1b:68:e9:cd:a0:74:71:f8:
0f:f4:3f:d7:cf:5a:17:2d:63:b7:2d:a8:52:19:1d:2c:9f:9c:
9c:3c:3e:ea:28:5f:bd:b5:e2:ee:44:46:92:5f:2c:44:ed:8d:
9b:a5:0e:67:7b:cb:f6:27:47:05:50:51:b7:20:7a:af:3f:70:
f3:0c:ac:66:b5:f9:11:ff:48:49:29:18:a1:24:1f:b8:7a:b8:
b1:ce:f7:da:cd:35:5c:48:31:18:95:a7:0e:cf:4b:79:81:c7:
2f:31:aa:7f:1e:03:fa:49:36:5d:8e:45:75:f8:36:e1:b4:da:
e0:fd:f6:cf:64:af:0c:4b:54:b6:8e:df:d8:7e:bb:08:32:f0:
be:2d:c5:68:99:2c:ec:87:3d:fd:55:60:d7:97:69:b6:e3:40:
a5:fc:ec:ce:5d:2c:cf:24:60:25:46:6b:cc:0f:4d:03:61:0a:
31:d6:19:c9:37:03:94:34:44:52:53:b3:07:6c:bf:dd:63:1e:
58:af:61:dc:7d:e8:ae:81:87:24:e5:1c:67:42:d8:fa:4d:99:
da:89:10:d4:57:ea:e3:6c:79:25:f6:68:fd:c7:d5:17:0c:92:
f1:44:49:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:50 2025 by rpki-client