Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
File: GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft (raw, json)
Hash identifier: fdjeil/mTSk5ce6NuOkklmg7RCtshvD3WAeC7xJ/CVU=
Subject key identifier: 77:9A:ED:33:AF:73:38:55:50:29:D4:37:8A:F1:9A:8F:BD:2A:CE:10
Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
Certificate issuer: /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Certificate serial: 019A706E6C88290CD8FBED6A112E05BE7CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
Manifest number: 0BC9
Signing time: Tue 11 Nov 2025 01:01:16 +0000
Manifest this update: Tue 11 Nov 2025 01:01:16 +0000
Manifest next update: Wed 12 Nov 2025 01:01:16 +0000
Files and hashes: 1: GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl (hash: 3dtAd3CLrPeereJYAlywFaqvLiZjRqFHF3JRuj5Kq/s=)
2: ddpb_wuKnMlAr7zHGIm8AB82iUA.roa (hash: B1F9vY9BeWV/mZWmkHXRYrhz+CLltzOE+dJil3lfRag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:6c:88:29:0c:d8:fb:ed:6a:11:2e:05:be:7c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Validity
Not Before: Nov 11 01:01:16 2025 GMT
Not After : Nov 12 01:01:16 2025 GMT
Subject: CN=779aed33af7338555029d4378af19a8fbd2ace10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bb:8c:1c:07:de:20:e4:55:ac:06:ef:b1:0b:
ec:d1:12:fe:b5:ca:ad:a5:7a:99:a4:e5:3e:31:84:
36:43:5d:9f:c7:d2:a3:b8:77:51:a0:5d:24:a9:72:
1a:02:81:79:be:c3:7a:d9:af:49:65:6f:0d:38:d7:
f8:d2:da:b2:0f:89:cf:01:79:f3:05:f6:7c:c1:2f:
c1:a0:e3:de:32:03:70:d6:e9:cb:90:9d:ba:41:1f:
73:aa:0d:c1:fc:ca:a0:fc:a2:0d:fe:bd:c7:47:24:
af:dd:a2:a2:0b:13:3d:53:03:19:ed:c2:ed:76:c6:
54:7b:12:f2:ca:36:de:8f:dd:b1:54:c8:a4:9b:57:
90:a3:39:2e:18:2d:1e:bf:ec:2d:d5:8d:1c:32:0a:
2f:4d:9b:6c:a1:1e:ee:9b:ee:aa:d7:50:06:63:49:
73:be:3e:16:4b:a2:8c:f0:3a:ea:94:0a:28:17:6a:
f1:8e:a7:7e:51:9a:6c:4a:fe:ab:d6:79:91:e0:10:
0f:d3:d2:ac:97:bc:cb:07:7a:81:d8:e4:04:db:59:
5b:1f:f8:db:a2:90:ed:6a:17:4b:f3:1b:e2:98:30:
a8:47:b4:7b:52:10:bf:c8:04:8c:2e:a1:3d:37:9f:
4f:d1:e8:0c:9c:be:b0:7f:09:a9:13:b4:e4:5e:5f:
be:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9A:ED:33:AF:73:38:55:50:29:D4:37:8A:F1:9A:8F:BD:2A:CE:10
X509v3 Authority Key Identifier:
keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c7:57:1c:eb:66:31:00:3f:69:03:9a:63:14:29:14:8e:b6:
0f:b6:f0:23:c3:47:f4:5c:48:35:78:6f:14:7e:a6:57:b0:2b:
21:7a:37:73:0a:52:70:95:5a:26:6b:01:0f:16:06:86:24:0b:
ec:30:11:10:95:c8:c1:2a:cf:f6:bd:3d:c6:2d:18:34:01:9a:
67:41:ac:4d:9f:d6:b9:50:eb:c8:0e:62:7f:3c:7b:67:c4:c8:
b8:0b:3e:cd:c9:89:5c:88:30:01:3f:d0:1c:34:53:fa:aa:d3:
a4:a5:96:54:23:19:27:1a:40:a7:8d:95:49:0b:e0:d9:85:d4:
f1:36:ce:88:78:53:c7:71:aa:cc:21:29:3b:f8:cb:e8:7f:30:
e7:00:1a:52:ac:9f:13:32:2e:9d:f7:25:94:24:d7:dc:a3:9f:
d5:96:a1:ba:db:8d:ea:20:ab:b7:23:9d:b6:24:f3:c0:10:b4:
40:8b:bb:b9:0d:6b:88:7b:66:db:1c:d4:03:60:78:93:7b:fa:
27:74:83:c6:31:39:f7:85:50:33:df:9f:08:cd:42:8e:92:e0:
2b:b4:ae:76:2a:d2:77:34:bd:28:ff:47:11:2e:62:fe:ae:7f:
79:dc:2c:33:9b:9e:2b:ce:30:ce:11:58:4f:c1:df:d9:e4:2f:
5a:5f:94:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:55 2025 by rpki-client