Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: FxAObx3d33Hk0zZDMa7xb8uMYKsXCSH2Xcef60OIvkE=
Subject key identifier: 19:1B:0E:99:9B:00:E4:5D:1B:25:04:33:C7:28:F7:FD:24:71:8C:A8
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 019A2478E860AFC9E3FCDB0D189FF21BD6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 103A
Signing time: Mon 27 Oct 2025 07:01:34 +0000
Manifest this update: Mon 27 Oct 2025 07:01:34 +0000
Manifest next update: Tue 28 Oct 2025 07:01:34 +0000
Files and hashes: 1: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: zJRB89Tut2Hz61itX6vgKoAWDm9/M/tThQndLJjF2Hw=)
2: qWiRXpCL0NKtXzFBLcgeaF0mM4A.roa (hash: V0gkUhFHDtKhWrN/3cVBozf0t4RmZJghnQqebhSHl+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:e8:60:af:c9:e3:fc:db:0d:18:9f:f2:1b:d6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: Oct 27 07:01:34 2025 GMT
Not After : Oct 28 07:01:34 2025 GMT
Subject: CN=191b0e999b00e45d1b250433c728f7fd24718ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:a3:de:0a:44:00:b4:7d:af:fb:3e:78:2c:
67:d7:11:b4:59:b4:28:2c:d7:cb:0b:ca:d6:12:61:
87:2d:1a:60:08:f3:e2:55:21:14:f6:5c:c4:9c:63:
c0:c4:9f:6b:4b:a8:be:3d:0e:50:19:d9:9e:0d:b8:
f5:70:41:e8:08:b3:e8:35:99:7a:e0:24:a6:ec:9a:
c3:1d:eb:b1:b8:98:77:ec:49:df:27:c8:14:13:c8:
ce:69:03:c2:58:49:56:79:bb:ee:45:f9:1e:e5:fb:
35:3b:ee:40:ad:f4:93:74:48:a2:2f:e2:13:da:74:
e1:5e:ab:9e:a3:74:ba:28:4f:6d:d0:39:8d:df:2b:
97:ac:25:53:f0:5f:40:8b:15:07:04:45:a0:7f:bb:
24:b0:e0:a6:bb:0a:0f:9a:0c:d4:93:72:dc:8a:87:
1f:72:1d:2e:f9:ce:5b:82:cd:00:23:c3:15:6a:b0:
24:3c:50:2d:b9:61:5c:bc:1d:84:34:4d:1a:94:bd:
94:1d:c5:d0:13:32:6f:f9:e1:c6:a5:09:1b:99:09:
23:8a:6a:89:6e:11:43:53:b0:ac:ba:76:d7:96:af:
1e:b7:8c:5f:ed:d5:06:23:e1:44:db:25:7f:bb:0a:
41:e2:b0:49:5b:4d:ee:f3:a4:99:2e:2d:d2:2b:f4:
7c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1B:0E:99:9B:00:E4:5D:1B:25:04:33:C7:28:F7:FD:24:71:8C:A8
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ec:b7:32:f4:7c:fd:58:18:ae:49:86:bb:01:1d:0a:31:9d:
3c:15:a3:99:ab:23:8d:be:81:f0:fe:4a:5a:9e:2d:c3:5a:62:
02:f4:d7:c5:55:cb:32:65:37:8b:16:68:a3:9b:5f:71:ed:de:
1f:be:7d:ad:b3:79:0a:8d:5d:0c:d1:fa:38:ee:dc:a0:3f:73:
cf:66:9b:ec:66:aa:e1:b7:55:4b:ff:0f:b6:01:c7:95:47:76:
98:30:ab:9b:45:ba:99:ac:35:54:41:53:5c:ac:49:35:0b:c4:
38:72:56:54:22:0a:bb:38:07:e7:24:41:b3:d1:1b:57:b8:e8:
71:53:71:a2:b9:6b:f1:38:f5:04:c5:c7:9c:12:c4:a7:bf:24:
47:95:46:06:52:f9:24:06:14:59:3a:8e:6b:a9:79:39:5a:38:
2d:09:2e:8f:86:62:9d:35:70:30:b1:f1:e3:c1:81:d9:5d:ed:
08:f1:45:72:bb:a3:0d:cd:94:ae:2f:1e:57:52:5a:45:c9:ff:
06:48:98:cd:cd:20:93:1a:ed:22:0f:e8:23:0d:00:d9:fd:78:
dd:ac:4c:72:e4:e0:a6:b1:b3:c2:d1:68:aa:32:07:3f:6b:7d:
83:77:41:7d:0f:59:bb:1d:ff:3a:9c:04:37:b1:3d:10:dc:b4:
31:3b:20:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:07:37 2025 by rpki-client