Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
File: GqGckulmd_X5b2jxygqtn6MR60U.mft (raw, json)
Hash identifier: 7j7aED/cVlte4OGGNvyVsYNvt33EuHGo9Rk0GgjcQq4=
Subject key identifier: E1:D5:BC:32:A1:86:57:33:EB:DB:8C:ED:BB:A5:A2:09:96:7F:B1:A1
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 019A73A6FC6E13A10B596D3D2566FD3E39D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
Manifest number: 14DE
Signing time: Tue 11 Nov 2025 16:01:54 +0000
Manifest this update: Tue 11 Nov 2025 16:01:54 +0000
Manifest next update: Wed 12 Nov 2025 16:01:54 +0000
Files and hashes: 1: 9PY0CzQO7rCs7a7ACWMmh-gYUMI.roa (hash: MRgHCGLmmsjnvw7chUeEEH655TL4/pWfw0Bh/13k3RE=)
2: GqGckulmd_X5b2jxygqtn6MR60U.crl (hash: 7da2wEPeZcnMnUJXhOIH1NBL1pSrQqN//E3h4C6eEH4=)
3: LUxnI4gkqH7yAwk0S-IwEaOnth8.roa (hash: N89HNSm0vKdgJlvHR+QOPBS6nqPeyhUDVxUtqyfT4hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:fc:6e:13:a1:0b:59:6d:3d:25:66:fd:3e:39:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: Nov 11 16:01:54 2025 GMT
Not After : Nov 12 16:01:54 2025 GMT
Subject: CN=e1d5bc32a1865733ebdb8cedbba5a209967fb1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:32:5e:2f:10:6f:ae:80:da:07:dd:4a:d1:
df:7d:df:37:da:63:79:3d:cd:e0:f9:ef:38:32:d2:
8d:42:e0:d5:58:f6:30:b6:0c:47:28:44:58:92:5e:
db:53:1a:c2:02:f5:fa:6d:47:ce:69:f1:cb:5b:53:
1d:46:dd:33:73:03:0d:d4:42:81:ef:77:f4:7a:b9:
25:4b:5e:61:77:0d:99:ef:39:d7:fd:cf:85:cc:da:
4b:d7:ca:3c:61:ef:fb:07:62:84:34:5a:1b:4b:29:
e4:6a:7e:8d:da:bc:93:8c:47:0d:44:f0:65:1c:59:
d6:4d:81:95:36:cb:bb:64:da:f6:96:48:1e:b2:be:
6e:4f:09:9c:2e:47:27:63:43:9a:34:5d:0d:01:6d:
41:ef:9c:d5:a9:40:8c:87:30:d4:6d:5e:e7:21:fa:
ed:64:45:48:8d:cf:b4:d2:33:0f:e5:76:89:13:ab:
36:27:99:bc:c0:35:fb:ec:02:90:a7:f0:06:a8:21:
59:92:45:3d:c5:66:69:7b:fe:b9:82:b1:62:1b:cd:
1f:6b:a3:2a:e4:db:b5:b5:13:f5:1a:e1:e4:93:76:
43:fa:5f:3b:81:ec:2e:f3:38:42:15:3d:ba:ed:00:
8d:ec:b1:46:17:eb:45:a5:ec:1d:2c:89:39:72:0f:
e4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D5:BC:32:A1:86:57:33:EB:DB:8C:ED:BB:A5:A2:09:96:7F:B1:A1
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3f:b4:46:33:87:ad:95:ce:2b:15:56:45:67:dc:ba:49:47:
97:a9:b1:77:22:b0:8c:7d:4d:6a:f4:2a:14:a0:15:48:ad:26:
ae:e3:20:bb:55:47:a4:95:64:1a:04:1c:1c:b3:a4:fb:70:39:
6a:13:a7:88:c4:86:57:28:f0:c4:55:6f:55:6c:a0:e0:30:12:
fa:23:f5:d9:f5:a3:80:5e:a9:ca:0f:00:fa:f6:75:03:1b:67:
e7:f7:f8:1d:e6:26:68:f3:ab:71:1c:b5:fe:84:56:7a:23:f1:
9a:e2:9e:ce:3c:9b:da:da:2b:88:19:61:fb:77:0e:f2:b0:6d:
f8:f3:46:f4:45:7a:7a:96:20:cf:d9:94:4b:0b:cd:9b:a5:66:
af:7a:4a:b3:3f:56:10:a6:9e:ce:03:92:38:ab:a3:44:bd:cb:
fa:02:3a:59:13:16:ae:06:69:2a:f4:33:8d:af:7d:bf:0a:3c:
94:d3:3c:6e:48:7e:91:12:b6:b0:aa:7e:24:e6:a3:eb:85:ce:
29:e6:e6:50:41:e0:04:c6:3c:7c:d5:34:5d:9d:8a:62:bd:83:
af:3b:ca:45:03:e9:e8:af:a1:1c:42:20:8b:cb:d3:11:dd:67:
f0:47:f2:cf:dd:db:ac:94:9c:b5:4d:99:7c:8a:37:31:96:64:
40:9e:2c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:21 2025 by rpki-client