Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
File: GqGckulmd_X5b2jxygqtn6MR60U.mft (raw, json)
Hash identifier: Br5i2aNPfWlCxMB4v5mRjrN0KuY96YeO8TR6j0s/r/o=
Subject key identifier: 0C:9F:B2:61:25:33:82:2E:33:EE:E0:1D:9A:B2:85:13:62:B3:2E:3D
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 0198530E5782D69C9656829D79400DCF2D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
Manifest number: 13C4
Signing time: Mon 28 Jul 2025 22:01:45 +0000
Manifest this update: Mon 28 Jul 2025 22:01:45 +0000
Manifest next update: Tue 29 Jul 2025 22:01:45 +0000
Files and hashes: 1: 9PY0CzQO7rCs7a7ACWMmh-gYUMI.roa (hash: MRgHCGLmmsjnvw7chUeEEH655TL4/pWfw0Bh/13k3RE=)
2: GqGckulmd_X5b2jxygqtn6MR60U.crl (hash: ZaYb0XBF6CwCtHfbU/2CKqBrkCiL+vqSXy1bW3Xakw0=)
3: LUxnI4gkqH7yAwk0S-IwEaOnth8.roa (hash: N89HNSm0vKdgJlvHR+QOPBS6nqPeyhUDVxUtqyfT4hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:57:82:d6:9c:96:56:82:9d:79:40:0d:cf:2d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: Jul 28 22:01:45 2025 GMT
Not After : Jul 29 22:01:45 2025 GMT
Subject: CN=0c9fb2612533822e33eee01d9ab2851362b32e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:98:30:6c:29:48:86:fe:46:f3:64:a3:44:cb:
fe:a4:dc:23:72:1b:48:a2:2a:0e:b3:80:5e:f0:76:
bd:76:82:61:7f:65:cc:0c:51:e1:a2:3c:21:89:4f:
0d:be:45:df:e1:36:7f:28:4b:cc:a2:b2:36:c9:b2:
85:dd:e5:d4:b9:48:ac:ef:ea:7d:e1:3a:3f:af:f2:
f7:bd:c1:42:96:d1:1e:0f:7a:a4:fd:99:63:e4:be:
f3:50:d2:28:76:f4:a3:01:74:50:b0:69:b6:c5:61:
c8:a2:49:ee:74:1d:b3:20:5b:b4:34:f3:da:2d:39:
1c:56:d6:71:bc:5a:32:2f:a0:25:e5:5e:06:da:35:
c2:d3:c1:72:b2:77:7d:b9:0c:05:15:39:4c:d3:8e:
49:40:76:0f:77:be:bd:46:42:6b:22:03:65:a5:df:
39:75:cb:40:57:54:36:83:d8:46:58:12:fa:1d:15:
ce:44:45:fb:0a:ef:59:21:05:d5:d0:8c:40:25:40:
44:37:15:0a:c6:43:d5:34:c5:01:8e:b8:cd:16:97:
e2:91:4f:61:70:15:4a:bd:62:64:ad:24:b0:63:04:
bf:da:97:40:74:e1:fd:a0:b8:3a:88:a5:8d:3f:07:
fe:af:11:92:cc:50:ae:d3:cb:48:ae:e1:3e:97:5d:
ce:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9F:B2:61:25:33:82:2E:33:EE:E0:1D:9A:B2:85:13:62:B3:2E:3D
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f2:65:a3:05:28:93:03:51:c2:bf:ac:15:28:b9:08:e8:5a:
36:15:4f:96:69:d2:f2:6f:e6:a6:9f:92:22:7b:8a:f8:07:c1:
da:ae:79:eb:83:a7:d5:0f:13:7f:12:a1:85:e3:6c:e8:fd:b6:
c9:86:44:14:c9:d5:27:14:18:6e:b3:29:3f:32:9a:90:33:0c:
3a:f1:b6:e7:80:b8:e3:57:31:bc:03:d0:8e:3a:8d:0b:ab:30:
29:ce:42:19:b2:b2:75:c8:22:89:ad:7e:26:8d:e4:a4:5e:c0:
4c:63:05:b0:58:a9:42:4e:a5:21:59:99:74:36:38:4a:b3:e9:
8f:71:c6:06:be:9c:20:68:90:4c:1d:49:a5:72:ed:21:55:d2:
2f:50:a1:7b:68:4f:cd:5a:98:0c:28:49:24:e9:58:68:2e:c7:
42:7a:2b:a3:e1:3f:70:f5:f5:2e:68:ca:8c:ec:5f:3b:a1:9d:
b4:fe:18:62:ab:e0:b3:e4:d2:4f:de:25:b9:69:a7:b0:f8:0d:
97:18:40:3d:84:1a:1f:70:ab:60:f1:57:72:b5:19:2c:d6:a5:
00:92:e1:49:ff:e9:4d:fe:d1:74:35:ae:cc:e6:b1:ff:31:9e:
8a:07:3c:2d:fb:38:82:dc:49:87:6e:35:3d:fe:93:9d:18:1b:
0d:45:1b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:51:10 2025 by rpki-client