Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
File: Gq51omzPhiEiKBakccy3wNXnFuI.mft (raw, json)
Hash identifier: XVIf8ggb4LA0amI7HsSOoxphy9bFX8E07Pr4qt+7uTY=
Subject key identifier: B7:9C:72:0B:2D:E5:5E:42:86:E4:0F:33:BC:4B:B9:0F:41:13:58:DD
Authority key identifier: 1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
Certificate issuer: /CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Certificate serial: 0199541DB0ED350F2FFE3081C412FA0C77A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
Manifest number: 0995
Signing time: Tue 16 Sep 2025 20:00:55 +0000
Manifest this update: Tue 16 Sep 2025 20:00:55 +0000
Manifest next update: Wed 17 Sep 2025 20:00:55 +0000
Files and hashes: 1: Gq51omzPhiEiKBakccy3wNXnFuI.crl (hash: J/plSlIfVwaMHBFkfowPcCGYaF9Wb2rHraEY1Zq7geQ=)
2: e-R839WD2s0lY-SLIuwOK0gz1NA.roa (hash: Br/dbcJ4O349JzP2gYAkSObA1wvRVc0Vvam1hapVqyI=)
3: wQpXfE9JEQ0xae3JNQ5WII9BPtg.roa (hash: Wc6T5r1GtvbV1icqr7Rl021bCXOyiaZtPpB0GH2eHqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 18:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:54:1d:b0:ed:35:0f:2f:fe:30:81:c4:12:fa:0c:77:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Validity
Not Before: Sep 16 20:00:55 2025 GMT
Not After : Sep 17 20:00:55 2025 GMT
Subject: CN=b79c720b2de55e4286e40f33bc4bb90f411358dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:fc:ea:94:07:b5:86:7a:14:4c:8b:29:34:
55:bb:df:76:61:a9:cb:ac:5e:33:5b:01:cf:21:66:
9b:53:db:a4:c8:be:8a:ae:76:50:6a:30:2b:0e:98:
ff:7d:81:af:b2:26:6c:4f:95:9f:10:90:eb:7f:2b:
0d:55:4c:cb:9f:b3:78:fd:4b:2a:b9:b1:7e:18:86:
4a:d3:d7:12:94:7f:d7:d5:54:51:92:29:62:e7:05:
63:4f:62:42:72:85:38:f4:81:ed:95:8e:1f:44:a7:
56:25:76:03:44:ae:29:29:fa:d4:34:41:ba:c0:6f:
d0:a4:78:da:03:48:ab:2e:4e:d6:2e:7c:d3:57:ce:
fa:3e:e5:ec:f0:e2:12:df:2c:96:a9:39:b7:46:b9:
35:88:88:fc:a6:e1:a1:61:9b:e0:e3:9d:81:27:9e:
5f:c0:fd:48:dc:16:8e:c4:a5:ac:97:85:df:9f:14:
5b:0e:5f:c2:87:da:d1:26:f7:89:20:cc:15:7e:77:
ee:7f:b3:ba:4a:e1:2b:73:f4:e6:42:04:b2:6c:70:
ba:c2:cf:f3:a8:cb:03:f4:52:c3:4d:83:5b:b4:23:
26:73:12:8e:45:f5:ac:f4:41:b6:99:c8:52:f1:a8:
6b:40:92:ed:b7:ba:51:ff:f4:ad:67:ac:1f:13:18:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9C:72:0B:2D:E5:5E:42:86:E4:0F:33:BC:4B:B9:0F:41:13:58:DD
X509v3 Authority Key Identifier:
keyid:1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8b:7b:b7:ed:39:c2:ca:79:c0:ad:e1:89:7b:8b:cf:7c:6a:
1a:ac:1e:a3:83:58:da:5f:87:7b:60:51:ea:8c:2c:14:f2:0c:
ce:f1:6c:fe:c8:ea:c4:64:a3:f8:df:f4:1f:c2:dd:04:6f:06:
5e:03:1f:85:7a:6a:39:a9:2a:ba:d4:6c:37:a4:d4:28:39:3d:
7c:92:29:77:be:09:a7:84:be:6b:d8:31:b2:c8:43:1e:99:32:
57:36:03:5d:ec:22:1c:e8:cf:5c:2c:0c:7c:79:46:27:d2:bd:
ff:64:60:b3:e8:21:7e:7e:36:c7:bc:21:6f:2b:98:16:e6:a1:
ee:29:44:98:84:f9:0f:0d:cc:d2:9f:a0:d1:99:b1:13:af:58:
03:80:b4:36:21:5d:c2:2b:05:77:de:9a:e1:7c:a7:e3:4a:26:
08:79:67:95:43:2f:d9:ce:98:7b:51:a0:d9:86:8c:4a:ca:0d:
5c:3b:22:2d:82:9f:37:3d:fb:a5:aa:f6:67:8f:f5:df:2c:1d:
92:2b:9b:b8:c2:2e:96:ff:75:9c:b6:f8:0f:06:fe:e5:31:c4:
ec:a8:2a:af:cf:7a:ab:af:7f:50:f8:31:32:f8:68:ea:83:13:
9c:a8:f8:34:73:6a:3f:c3:fa:d4:69:c4:4b:59:93:02:84:30:
4f:38:33:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 04:06:28 2025 by rpki-client