Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
File: GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft (raw, json)
Hash identifier: RqHsafqvqFZxbfQAVqEORugFz9/8DSSw0i0LeK155Gc=
Subject key identifier: D5:9D:8B:D5:7F:00:84:BC:EE:9F:71:BA:CA:BD:68:87:BF:D3:A6:49
Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
Certificate issuer: /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Certificate serial: 019A725C410F520804ACE7D3B174830D8D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:00:39 +0000
Manifest this update: Tue 11 Nov 2025 10:00:39 +0000
Manifest next update: Wed 12 Nov 2025 10:00:39 +0000
Files and hashes: 1: D2QGXtZvmL4KeLGdXQs__twf4cc.roa (hash: yx8HKD3i4ZtDorjPhtWxamWyQ9PcoYYTYwiIZAy3Cf4=)
2: GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl (hash: PMApIXd8hnPdgfygX7oaqigeFuqREvgr3k6veB7RK8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:41:0f:52:08:04:ac:e7:d3:b1:74:83:0d:8d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Validity
Not Before: Nov 11 10:00:39 2025 GMT
Not After : Nov 12 10:00:39 2025 GMT
Subject: CN=d59d8bd57f0084bcee9f71bacabd6887bfd3a649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:c7:17:16:bc:91:ad:e7:cd:b8:c0:3b:c6:
3a:b6:eb:5c:eb:7a:78:79:e2:a5:80:33:d9:6c:0e:
9a:38:57:3f:04:e8:76:20:a8:bd:ac:07:8f:d1:bd:
8a:a0:df:b3:7d:7e:55:a3:68:1f:4e:59:4e:22:e5:
a7:51:dd:a6:6e:13:54:4e:49:d9:ce:b3:b2:74:3c:
f3:42:19:e2:bb:89:71:54:c5:29:64:3d:0c:82:0e:
e9:30:3d:5f:65:82:2b:2b:ae:a7:07:d7:e7:7c:e1:
23:0f:b2:00:94:c8:1d:b1:71:a8:28:05:62:98:56:
af:d8:42:5f:c4:cd:80:5c:08:d8:a8:af:56:42:ae:
c7:7f:c0:b3:66:f8:c4:9b:ea:74:9f:68:e8:7f:c0:
d3:84:19:b8:bf:81:26:03:fe:90:df:01:d1:6f:1d:
14:2c:fb:d2:5c:85:29:34:84:79:33:02:60:c2:a0:
2f:b9:fb:ff:74:d3:62:24:4e:66:0c:54:c0:18:0c:
d5:df:6c:77:fa:2f:3b:93:6f:ea:6a:51:5f:ae:6d:
7f:54:3f:24:28:b7:54:3d:94:aa:8b:3b:b3:f2:9f:
73:33:9c:10:f2:ed:3f:42:d1:c8:3d:30:23:81:57:
b0:63:ae:7b:ab:a7:92:14:66:67:b4:32:eb:bc:4c:
a1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9D:8B:D5:7F:00:84:BC:EE:9F:71:BA:CA:BD:68:87:BF:D3:A6:49
X509v3 Authority Key Identifier:
keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:dd:49:b5:62:cf:90:39:ba:d7:1b:03:bf:6e:d2:90:78:d3:
8f:10:0f:cd:20:12:fe:0a:81:bb:a1:42:d5:8f:89:da:07:c2:
de:35:81:71:c5:73:8e:06:29:97:83:64:97:84:f7:de:77:df:
24:c9:da:b2:f7:29:88:19:ae:c3:df:0d:ba:f7:6e:fe:fe:df:
e8:3c:e5:4f:24:95:ae:84:97:c2:fa:8e:e2:9b:79:7c:11:39:
80:93:8c:27:b0:15:a8:7f:2a:51:af:55:5b:2e:40:90:62:b7:
22:6b:a9:1b:d2:58:93:21:73:6b:f2:7c:9d:14:6d:5b:93:9d:
43:85:97:d5:32:1b:69:fa:83:59:e0:67:03:d2:8d:51:2d:be:
73:d5:98:6d:d0:0f:ec:32:2d:cd:c9:cd:77:79:b4:a7:b7:42:
5c:bc:c5:79:a0:8b:43:f7:30:8d:c2:c7:49:fa:d3:41:83:70:
55:31:6d:a8:6a:c8:55:46:40:4e:23:ad:95:8c:a2:85:f5:73:
2e:b3:e9:ff:d9:b0:06:ec:1e:93:a4:90:db:ab:f6:a9:d5:ad:
68:6f:9c:32:c1:7a:c2:1a:ff:b1:22:47:a5:c3:9e:dd:9c:83:
c2:7f:cf:af:56:f1:03:db:c1:00:a0:85:dd:43:d9:89:cc:da:
4b:f4:69:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:53 2025 by rpki-client