Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
File: GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft (raw, json)
Hash identifier: 4xQx1OTfqSOPzXiblywZ9RBj3+iYsrtPGvY7BOm6rp8=
Subject key identifier: E9:EA:29:7A:15:14:61:8F:19:54:03:BC:41:85:EF:88:9A:D5:69:DD
Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
Certificate issuer: /CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Certificate serial: 019936EFBD9D1E892EBF8403FCCF360F783D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
Manifest number: 149B
Signing time: Thu 11 Sep 2025 04:01:45 +0000
Manifest this update: Thu 11 Sep 2025 04:01:45 +0000
Manifest next update: Fri 12 Sep 2025 04:01:45 +0000
Files and hashes: 1: GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl (hash: fE8S2qlYd2AWEV/SseEWQNS1SFiYN9lYtysP73KpiIs=)
2: bioMAYKF1qqrZbXGWoBChN2Rwsg.roa (hash: XBbDJ/525v0nDOlO1cf/FOJnRgOSNpcxMVq1T633zZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:bd:9d:1e:89:2e:bf:84:03:fc:cf:36:0f:78:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Validity
Not Before: Sep 11 04:01:45 2025 GMT
Not After : Sep 12 04:01:45 2025 GMT
Subject: CN=e9ea297a1514618f195403bc4185ef889ad569dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:be:9a:bd:cf:b3:ff:09:44:a9:b5:b2:df:
69:4a:69:5a:a3:a5:76:31:3c:3e:8d:83:b6:c8:be:
30:2d:e4:1d:fe:4c:c3:32:ae:c2:aa:6d:57:38:cb:
12:76:50:94:db:cd:88:4a:15:1f:60:bb:19:ee:67:
c1:11:db:41:88:2f:df:69:e8:2e:71:ee:b4:4a:11:
1e:da:67:3c:5c:2f:e7:de:96:49:ea:e0:b2:ae:37:
3f:0f:76:e4:f5:ef:ba:f4:f3:5b:71:ea:83:a6:33:
b9:1f:3f:aa:2f:62:e5:94:1a:9a:5c:dd:b9:77:e2:
42:54:44:01:4e:2a:7d:98:d1:cf:08:36:6d:73:76:
09:aa:c5:19:7b:3f:1f:b9:2d:e5:09:b0:a0:c0:e7:
f0:c0:ff:c6:a5:87:a3:00:b3:40:29:84:3c:0c:7f:
02:df:49:5b:69:cf:60:ab:18:e2:50:03:f4:f1:53:
79:72:18:2d:b1:fa:31:1d:a4:e5:2d:be:3b:64:a7:
ae:6c:d6:39:ff:49:e4:59:58:d1:b1:2a:c7:15:5a:
3c:a2:e0:52:08:cc:b9:0a:00:2d:08:0f:bb:48:8f:
d0:71:2f:5e:bc:36:6e:cb:0e:85:4e:76:e1:d2:c3:
21:b3:c5:30:d8:ca:8e:ec:30:5c:32:e0:49:2a:29:
8a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EA:29:7A:15:14:61:8F:19:54:03:BC:41:85:EF:88:9A:D5:69:DD
X509v3 Authority Key Identifier:
keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0c:c5:0f:b0:de:d7:c3:42:60:bf:5c:62:c2:5f:52:98:50:
28:f4:03:cf:53:b9:5f:46:d4:46:cb:9b:20:54:2e:4b:7d:54:
58:48:cc:a3:62:29:88:22:67:34:d2:81:c7:7b:9e:cf:74:02:
fa:d8:ca:40:eb:d8:ff:ef:1c:7b:26:6a:bb:5b:e0:8f:62:ff:
c4:fa:72:86:f9:4c:19:28:29:b2:01:21:72:e5:35:58:aa:76:
6a:2a:b9:15:ba:21:cd:9c:d7:8d:a3:c7:19:fc:aa:fa:aa:2b:
fc:42:12:43:eb:52:39:4a:7d:3e:46:c1:a6:3f:5f:5a:32:0a:
9f:1d:ab:69:8c:7c:a5:b3:a3:4f:12:59:92:c3:f4:6a:02:86:
a1:dc:76:56:61:8e:16:bb:74:be:71:c3:8e:d9:ab:01:23:03:
88:e1:76:3d:2c:79:54:73:f9:63:66:b7:54:d7:16:48:69:c0:
38:ec:aa:80:33:9d:7e:05:47:c8:1e:e6:9b:17:ec:89:d9:95:
26:9b:09:4b:91:6d:5b:39:37:b5:8c:c0:f9:ac:6e:56:2b:47:
81:37:23:ac:64:d1:90:c2:65:6a:2b:68:8a:1b:65:13:b0:64:
78:6c:70:29:74:f6:cf:9e:42:81:bd:08:c0:f8:e8:fa:8f:ae:
a1:76:93:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk2772dHokuv4QD/M82D3g9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MjQwMDg0MTVjYTE4NWI4ZWRkZWRjMmRjZGQ4ZDA5NDQx
YTc3OTQwHhcNMjUwOTExMDQwMTQ1WhcNMjUwOTEyMDQwMTQ1WjAzMTEwLwYDVQQD
EyhlOWVhMjk3YTE1MTQ2MThmMTk1NDAzYmM0MTg1ZWY4ODlhZDU2OWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq6+mr3Ps/8JRKm1st9pSmlao6V2
MTw+jYO2yL4wLeQd/kzDMq7Cqm1XOMsSdlCU282IShUfYLsZ7mfBEdtBiC/faegu
ce60ShEe2mc8XC/n3pZJ6uCyrjc/D3bk9e+69PNbceqDpjO5Hz+qL2LllBqaXN25
d+JCVEQBTip9mNHPCDZtc3YJqsUZez8fuS3lCbCgwOfwwP/GpYejALNAKYQ8DH8C
30lbac9gqxjiUAP08VN5chgtsfoxHaTlLb47ZKeubNY5/0nkWVjRsSrHFVo8ouBS
CMy5CgAtCA+7SI/QcS9evDZuyw6FTnbh0sMhs8Uw2MqO7DBcMuBJKimKhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnqKXoVFGGPGVQDvEGF74ia1WndMB8GA1UdIwQY
MBaAFBkkAIQVyhhbjt3twtzdjQlEGneUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQt
N2E4MGVkNjIxNzgxLzEvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQtN2E4MGVkNjIxNzgx
LzEvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgzFD7De
18NCYL9cYsJfUphQKPQDz1O5X0bURsubIFQuS31UWEjMo2IpiCJnNNKBx3uez3QC
+tjKQOvY/+8ceyZqu1vgj2L/xPpyhvlMGSgpsgEhcuU1WKp2aiq5FbohzZzXjaPH
Gfyq+qor/EISQ+tSOUp9PkbBpj9fWjIKnx2raYx8pbOjTxJZksP0agKGodx2VmGO
Frt0vnHDjtmrASMDiOF2PSx5VHP5Y2a3VNcWSGnAOOyqgDOdfgVHyB7mmxfsidmV
JpsJS5FtWzk3tYzA+axuVitHgTcjrGTRkMJlaitoihtlE7BkeGxwKXT2z55Cgb0I
wPjo+o+uoXaTeg==
-----END CERTIFICATE-----
Generated at Thu Sep 11 10:10:49 2025 by rpki-client