Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft
File: gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft (raw, json)
Hash identifier: vyQJRDcWwHH5914k73YQg9/7HsAvkicFstFJt9fiZCE=
Subject key identifier: 5E:3E:F2:12:5C:C6:71:A2:43:60:1F:67:CD:B2:86:E0:3C:6E:5D:D3
Authority key identifier: 82:A4:16:1A:CA:BF:66:D4:25:ED:87:8C:5D:A9:6A:7D:5C:B3:FF:E4
Certificate issuer: /CN=82a4161acabf66d425ed878c5da96a7d5cb3ffe4
Certificate serial: 019A71B8DFD66013F090CF291C2B3AE626E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:02:12 +0000
Manifest this update: Tue 11 Nov 2025 07:02:12 +0000
Manifest next update: Wed 12 Nov 2025 07:02:12 +0000
Files and hashes: 1: gqQWGsq_ZtQl7YeMXalqfVyz_-Q.crl (hash: KKWiuxnc6wmv9EN07ps2ku7/SgaO3oo/E4wsB+PN2+Q=)
2: r4535rejwLyNlch_9-1WL9yyNgI.roa (hash: HlBTwouJ/vT3vPrKECrX417tf3S6s+K4qcEjU3ZHOug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:df:d6:60:13:f0:90:cf:29:1c:2b:3a:e6:26:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a4161acabf66d425ed878c5da96a7d5cb3ffe4
Validity
Not Before: Nov 11 07:02:12 2025 GMT
Not After : Nov 12 07:02:12 2025 GMT
Subject: CN=5e3ef2125cc671a243601f67cdb286e03c6e5dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:66:76:67:55:ef:70:80:d7:9f:5d:3d:34:
25:4d:40:d5:b3:2b:3d:68:ce:63:96:4d:45:e7:f9:
5b:d7:82:44:82:0e:a8:79:c8:af:de:ad:5e:bd:bc:
77:c0:9c:70:30:1d:be:8a:4a:4b:06:b1:49:5b:af:
3e:f8:e5:a3:6c:a5:84:96:f8:26:c1:c7:d3:c8:d2:
ba:19:1b:a4:12:1a:e4:6d:39:8d:e1:f2:30:a5:15:
46:fd:5a:c0:27:84:1a:65:25:0d:b7:38:3f:4d:58:
41:15:08:26:76:43:18:44:9e:65:52:ca:fe:ed:cf:
66:88:17:1b:66:aa:07:94:1f:f1:57:5a:06:69:f8:
47:47:65:9b:ea:39:41:15:af:aa:7d:52:e8:3d:fa:
45:40:74:1e:2e:ae:de:4c:e6:9a:56:1c:03:66:d2:
31:e2:3a:1a:e6:3f:46:75:5a:6e:f1:ee:e9:87:57:
3d:07:a8:69:0f:b7:1d:70:6c:ea:02:f4:6f:06:d6:
7f:de:45:3a:ee:ff:0d:e6:c4:fe:87:4c:ec:c0:24:
d0:fe:20:ff:64:37:3a:6f:2f:31:9f:89:c6:9f:c1:
2e:db:f8:82:7c:6e:4c:e9:60:e9:cc:aa:21:a4:1c:
0d:9e:9d:2a:a3:c4:c6:43:18:7a:e3:bb:dc:33:20:
a3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3E:F2:12:5C:C6:71:A2:43:60:1F:67:CD:B2:86:E0:3C:6E:5D:D3
X509v3 Authority Key Identifier:
keyid:82:A4:16:1A:CA:BF:66:D4:25:ED:87:8C:5D:A9:6A:7D:5C:B3:FF:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7f:80:83:c9:43:8a:59:4c:01:be:60:bc:14:d1:75:0c:f6:
ad:01:63:64:eb:cb:f7:06:a6:d7:13:c1:0f:2d:bc:f7:a8:50:
e0:26:9a:0b:49:28:17:b0:49:1a:43:9d:d6:d5:11:7c:ed:94:
0d:fe:30:dc:ed:f7:81:d5:d3:9c:32:8d:50:6e:c2:11:a4:da:
23:b8:92:79:1a:5e:6d:98:b1:88:62:30:1a:9d:be:ef:b0:4e:
10:f4:49:f5:ea:8a:c2:a0:06:80:b2:de:69:0c:e6:1c:f4:c6:
66:3c:f5:e4:85:eb:c2:8d:db:49:d2:f4:3a:40:ea:bf:bd:b2:
6b:74:25:85:f1:04:b5:37:27:aa:f9:6e:0f:00:54:e8:6f:d5:
cf:57:3e:89:28:de:78:a4:4b:93:bd:ce:20:d4:1c:77:d7:c6:
ce:64:a7:42:59:8a:c6:cf:1a:70:db:c8:f4:2f:e1:36:de:5b:
11:6b:31:43:1b:79:50:b7:4b:a2:dc:e2:52:92:75:99:c8:1e:
eb:03:17:05:6d:58:e4:d8:32:5c:5d:40:a7:41:23:44:50:2f:
3c:5b:a2:54:8f:9a:11:be:74:f0:59:16:11:ae:06:46:0c:16:
58:37:4d:5f:ed:fc:fe:69:b3:9a:d6:3f:09:f4:b6:d9:5e:86:
75:9c:55:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:31 2025 by rpki-client