Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
File: GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json)
Hash identifier: yGQuViLUscQKyVmUeQeKL/inlzspFjFLvm6K54mok+k=
Subject key identifier: 0E:86:26:1B:11:B9:9E:5F:0F:5A:A8:9A:11:AB:51:12:04:90:A4:92
Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
Certificate issuer: /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Certificate serial: 019A70A580E4EE78ADA18D784E2FD8E7ED54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
Manifest number: 0988
Signing time: Tue 11 Nov 2025 02:01:25 +0000
Manifest this update: Tue 11 Nov 2025 02:01:25 +0000
Manifest next update: Wed 12 Nov 2025 02:01:25 +0000
Files and hashes: 1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: pu0vROuFRI8Vbv64flcJOeUFJUdk04k1YrD3HYt6PQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:80:e4:ee:78:ad:a1:8d:78:4e:2f:d8:e7:ed:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Validity
Not Before: Nov 11 02:01:25 2025 GMT
Not After : Nov 12 02:01:25 2025 GMT
Subject: CN=0e86261b11b99e5f0f5aa89a11ab51120490a492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:5c:f6:89:19:34:81:6b:c7:47:1b:c9:05:
23:e9:76:22:83:94:ba:9b:a3:c7:a7:d9:ad:be:6d:
3e:74:62:b6:40:f5:a8:7a:4c:0a:9a:0c:af:c0:9c:
d9:6a:02:2e:11:9c:d2:40:65:9f:0c:b8:e2:17:e6:
ad:d0:14:99:0d:46:47:2d:1c:03:9f:d3:49:0f:02:
fe:be:dd:92:98:4f:41:66:36:d8:ec:d9:e3:4f:29:
07:ad:6d:fc:7c:1a:c3:41:5e:9f:2a:b7:f7:49:ff:
f3:25:bb:dd:70:10:3a:6d:9c:af:ce:b9:b0:bd:9e:
50:ef:38:71:3b:2b:f4:10:c7:45:a4:15:d8:bb:c4:
5f:2c:1b:79:7a:e5:9c:84:07:a1:9a:e7:b0:36:16:
52:0c:7b:14:43:34:58:a6:a6:8a:1b:80:16:09:23:
88:f3:bb:b8:39:6d:60:49:c1:82:0c:16:fb:7b:21:
dd:0f:05:76:0c:b4:d8:3c:7e:dd:13:57:9e:be:30:
46:77:c6:e9:49:66:b7:6e:f2:fd:de:55:89:92:df:
63:2d:da:3d:6a:93:6e:e0:e6:ab:53:bc:8e:22:da:
2d:47:31:c5:38:77:0d:a2:96:bc:c2:ec:e5:40:8a:
9c:e8:81:12:56:38:53:a9:76:23:0d:6c:f9:13:18:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:86:26:1B:11:B9:9E:5F:0F:5A:A8:9A:11:AB:51:12:04:90:A4:92
X509v3 Authority Key Identifier:
keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ae:72:50:8b:e1:d7:8d:f9:21:68:38:f7:dd:74:f7:e9:cf:
69:2b:cb:72:83:c9:00:67:96:50:c7:af:65:7c:6f:38:95:09:
49:05:2c:91:22:7d:64:06:d3:46:f2:d8:fe:3f:02:7c:9d:52:
86:fc:6b:33:18:21:f7:71:51:2f:0e:e6:2b:f9:89:ea:92:77:
f4:2a:dd:cb:67:25:9f:6d:53:01:16:a4:00:b6:01:57:65:fe:
1b:fd:7c:38:17:1b:e9:0e:a0:95:51:18:3b:c5:27:b9:b3:e1:
89:04:44:b6:60:1c:d6:db:8c:bd:8e:1d:cc:a3:10:9d:2e:b5:
26:8e:0e:fa:21:27:28:db:47:6c:8e:98:af:8c:15:4e:68:0b:
64:67:8a:02:14:fa:fd:d8:26:dc:27:46:55:c2:f3:cb:a9:1d:
a4:f6:c6:f1:af:36:27:ae:5e:6c:cc:1a:ae:53:7d:ba:d9:d4:
3c:55:bd:09:80:c4:bc:88:36:71:a9:5f:87:db:81:17:15:c1:
c9:8b:00:bf:0a:92:fb:f1:3d:00:1a:8b:0c:f8:81:ab:42:83:
8f:3b:94:4c:08:c9:2b:5a:96:c5:1f:f0:e5:8d:33:8e:9b:34:
48:e7:ec:1c:00:cb:e9:7d:ab:6c:1f:c5:82:d9:61:de:ea:02:
96:a5:f7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:32 2025 by rpki-client