Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
File: GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json)
Hash identifier: ICsU+wlVixxM1HOkyzjEXg3V1yR3KNujc3LhVLWUOt4=
Subject key identifier: 16:F1:39:54:BF:97:B6:8A:B5:68:5C:ED:62:C9:E6:CC:01:38:E3:CC
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial: 019A11294058DFCEBB04129FE4BAF3E5123C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
Manifest number: 16EC
Signing time: Thu 23 Oct 2025 13:01:47 +0000
Manifest this update: Thu 23 Oct 2025 13:01:47 +0000
Manifest next update: Fri 24 Oct 2025 13:01:47 +0000
Files and hashes: 1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: /D/SGlQzwuHQR5SgA1IolbX7zkDImdMZdxDLnHH2Oaw=)
2: qjOZ0ypY-v05Ar9oVOzV-LgMvAA.roa (hash: /cIFZv0Z52Y5+S3hgVxJBf+tIN9m9T+pJ4ZgMnUSMa0=)
3: uVBTeEzfoyB7JY96y5uQlYBoA00.roa (hash: 1QuqtDmpz5L96A5DhcdUsvLbu6XhjJTyVS+t4jv+5BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:29:40:58:df:ce:bb:04:12:9f:e4:ba:f3:e5:12:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Validity
Not Before: Oct 23 13:01:47 2025 GMT
Not After : Oct 24 13:01:47 2025 GMT
Subject: CN=16f13954bf97b68ab5685ced62c9e6cc0138e3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:48:a9:10:d8:82:e5:6c:cb:6e:00:1f:d5:0e:
71:e7:34:e2:33:5c:e8:d1:f3:6e:5a:0d:59:40:fc:
2b:78:98:71:22:dc:55:95:7d:7a:b2:1c:d2:f9:f0:
af:ef:1f:af:d9:cc:c5:94:ac:45:8b:d8:f1:a4:5a:
ed:7a:31:ae:36:2d:62:a9:45:89:01:3f:de:7f:cf:
f7:c4:d1:f3:8f:09:5a:73:b2:2b:98:c3:a7:6c:92:
bb:a2:a7:07:7b:26:dc:14:8d:02:c1:00:15:c9:ba:
04:53:37:d8:72:b0:10:91:03:ff:9f:96:4e:a4:0c:
8a:27:2d:95:d9:0e:b2:45:c0:a1:da:85:49:30:ff:
2a:33:28:d8:d9:f8:ba:90:e1:b1:e8:17:7f:15:62:
18:2c:27:8d:a8:d9:74:9d:95:41:32:ef:15:94:56:
ac:e7:c7:70:95:a3:cf:b7:86:16:4c:22:00:1c:18:
ec:e9:9a:05:d2:50:a1:e4:d5:7e:57:68:b7:bc:79:
6c:7c:4b:b3:32:7a:47:e3:b6:fe:1b:66:42:d4:92:
75:ff:b3:af:aa:91:17:a7:3e:2f:df:48:92:57:57:
c9:b5:2d:f2:9d:1e:92:e4:3a:5b:dd:60:08:42:06:
10:26:6d:6e:05:bc:0b:14:ad:aa:f4:e4:56:a9:d3:
7f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F1:39:54:BF:97:B6:8A:B5:68:5C:ED:62:C9:E6:CC:01:38:E3:CC
X509v3 Authority Key Identifier:
keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4c:9c:51:4c:38:24:bf:9c:0b:3c:b5:e4:03:35:fc:1e:82:
03:f3:1f:3e:fb:ed:4d:5a:98:8d:bb:46:26:18:56:d1:39:e5:
1a:1f:ce:b9:5b:5b:82:eb:72:66:40:5c:8f:55:8c:db:3f:57:
ea:d7:57:e2:45:74:3d:4d:51:64:84:2c:c1:5b:90:98:63:37:
b3:dc:be:fc:aa:35:d7:3d:00:b6:92:0a:ef:7f:55:18:e3:d4:
f7:7f:64:ab:9c:8a:e5:7a:00:4e:e5:2f:f0:39:91:ab:d8:a7:
79:06:f3:1d:d3:41:8b:53:07:0c:71:25:f7:a1:2b:3c:af:4e:
60:7f:39:f6:0c:ce:81:06:75:81:84:ee:b0:68:66:fc:b7:ad:
ff:f0:54:ea:cc:3f:c2:d0:37:50:32:8a:26:74:cf:9d:58:f9:
33:15:fd:90:ff:aa:14:b6:fe:4b:ef:e5:85:11:e7:2a:84:f1:
34:0a:39:10:3b:78:15:76:10:5e:3f:1d:a9:5d:01:71:79:4c:
cc:f9:e0:62:ad:f5:bb:fe:e1:2e:c8:dc:b6:0e:a9:3a:c4:c1:
b4:99:a4:47:76:c7:8c:8e:91:09:e4:71:72:82:69:fc:28:69:
dc:8a:85:e9:e9:37:a8:e3:e2:97:7f:1d:f6:de:08:7c:89:75:
19:e4:6e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 21:50:55 2025 by rpki-client