Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
File: GgQ5RItijNC6QjLqXcOalo2paW4.mft (raw, json)
Hash identifier: CJa9l9CJOspq00GMINiaL0pA5zY76pzq/fAvrW2QlD4=
Subject key identifier: F1:21:92:A0:62:43:2D:B5:57:46:DE:3F:76:9B:46:95:BF:D3:1F:B9
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Certificate issuer: /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial: 019A66588C545C773DD5857F346A2DC6B5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
Manifest number: 1717
Signing time: Sun 09 Nov 2025 02:01:10 +0000
Manifest this update: Sun 09 Nov 2025 02:01:10 +0000
Manifest next update: Mon 10 Nov 2025 02:01:10 +0000
Files and hashes: 1: GgQ5RItijNC6QjLqXcOalo2paW4.crl (hash: LyWV7nQwRNyxjSSxZN5378z925fQSLCbdhaHC4EpQTs=)
2: awiZZNgesWW0Sbd6K5IRMUenzBI.roa (hash: OVxRXVan7pYiQ6GVr4WHU+GWhPaWUbbRmfzBGki3zjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Nov 2025 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:66:58:8c:54:5c:77:3d:d5:85:7f:34:6a:2d:c6:b5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Validity
Not Before: Nov 9 02:01:10 2025 GMT
Not After : Nov 10 02:01:10 2025 GMT
Subject: CN=f12192a062432db55746de3f769b4695bfd31fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:81:8a:95:ad:68:f7:d9:4b:17:67:43:6a:
d2:93:aa:80:98:61:8d:3a:65:b6:f8:39:77:07:48:
f7:26:2f:ac:7e:7f:6c:49:5e:75:59:04:c5:d1:ed:
5f:37:a2:e6:f2:8c:e7:9e:63:1f:5a:50:bd:92:b4:
5e:ad:c9:b6:b5:4a:2e:b8:8d:11:8b:44:77:9d:84:
c5:38:73:25:a3:c4:4c:a3:0e:61:72:05:82:cc:64:
bb:dc:4c:6c:ac:2d:44:4b:f2:ac:5c:b4:04:9b:4c:
90:f4:53:3e:f9:94:93:70:42:97:72:8d:57:dc:6a:
32:6b:16:62:b5:54:fc:1f:20:10:b0:82:44:c7:b0:
be:78:01:6e:78:f4:fd:86:3d:13:60:27:7c:d3:c4:
a0:ed:a7:f7:e6:7b:78:ff:54:03:57:03:a7:68:1c:
e0:ed:1a:2d:62:37:73:ee:26:ce:8c:12:52:38:02:
32:4a:c6:ec:b1:1d:54:b5:fd:a9:41:ea:75:d4:fb:
24:fd:3a:55:9f:5c:99:ff:5d:72:73:25:42:42:d1:
03:86:be:88:21:ef:42:29:ac:18:78:83:b4:9f:25:
cd:af:00:58:09:09:3f:90:bc:cb:65:23:00:bb:9c:
0f:e4:ef:f9:68:f8:ad:b9:77:23:da:41:1f:f2:01:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:21:92:A0:62:43:2D:B5:57:46:DE:3F:76:9B:46:95:BF:D3:1F:B9
X509v3 Authority Key Identifier:
keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:61:6d:ed:9b:c7:a0:e1:24:62:c7:87:0c:be:91:83:67:ab:
17:17:73:46:91:0f:b8:03:69:e9:cd:29:24:e5:a1:c4:87:43:
bf:39:a9:3b:af:ab:b3:b8:c4:f2:d6:0c:b5:7a:9c:15:f1:27:
5a:31:05:a2:47:a6:09:d0:72:2c:6f:2b:a1:62:fd:61:2a:7d:
d7:a7:24:56:c7:d3:2a:c7:12:6f:bf:3c:76:b6:b3:98:60:26:
7f:e0:e6:05:03:8e:e9:8a:7c:fa:2a:35:f2:1c:8c:0a:97:29:
0f:6d:f1:f8:cb:3e:87:fb:bb:cf:90:5f:74:40:1d:8f:66:c9:
f3:a9:02:3d:62:04:83:07:46:33:b0:9b:9a:a9:1a:5d:31:65:
74:1f:75:6e:11:5e:94:d2:7f:7b:1c:01:d2:2d:ab:f9:e8:f5:
c7:37:7f:0c:c4:9f:94:4e:10:eb:9b:7f:41:aa:58:4c:d8:1d:
88:1a:d3:93:8c:2c:bb:f6:4e:10:42:4e:49:98:38:a5:22:96:
1d:73:63:c3:a4:d5:4a:45:75:fd:75:20:cc:10:61:82:ee:35:
32:9c:cb:f3:16:8a:c7:47:d9:7d:4e:be:dd:21:dd:41:47:c5:
8f:1c:9e:fb:87:08:ad:80:2b:18:f9:a0:fc:23:f0:f0:5e:c7:
f4:32:bf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 11:09:30 2025 by rpki-client