Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
File: GQ1bBUO9hajs-WmruFA8nerQ35g.mft (raw, json)
Hash identifier: sJp1+nah2ZUB4QWQbqXVFogq/gmQ4nuHxk+/SfYMuMQ=
Subject key identifier: 78:9E:A6:3F:B6:90:08:07:C5:D1:05:73:AF:6D:99:93:49:82:6D:CD
Authority key identifier: 19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
Certificate issuer: /CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Certificate serial: 019A71B8E62962BAFC1F9FE234A8A4BA3142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
Manifest number: 0E00
Signing time: Tue 11 Nov 2025 07:02:14 +0000
Manifest this update: Tue 11 Nov 2025 07:02:14 +0000
Manifest next update: Wed 12 Nov 2025 07:02:14 +0000
Files and hashes: 1: DRozhMtaZ2qQi39QkdO5G1jc7k0.roa (hash: PuORiX2E31wDt+P9sStv2sIXh7s2xmzWRFumBtIrOBQ=)
2: GQ1bBUO9hajs-WmruFA8nerQ35g.crl (hash: YFazEQiVk2c3X+NB4Dhlinr0oZrKEBX3Ki/q6o0jYdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e6:29:62:ba:fc:1f:9f:e2:34:a8:a4:ba:31:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Validity
Not Before: Nov 11 07:02:14 2025 GMT
Not After : Nov 12 07:02:14 2025 GMT
Subject: CN=789ea63fb6900807c5d10573af6d999349826dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:92:39:2d:1f:ce:fc:b4:82:da:e4:53:e2:
47:db:56:1d:d8:5b:aa:0f:62:d9:a7:a8:1a:ad:50:
b0:c1:d9:4b:0b:f9:0f:71:14:b3:80:46:6f:fd:dc:
df:ad:d6:02:5f:6d:f2:8e:ff:14:52:06:11:47:be:
eb:8b:f7:65:14:6c:18:ad:7a:b9:a4:68:9e:c0:04:
fd:b4:62:9a:52:84:d4:05:33:b6:a5:fa:07:77:40:
20:3d:44:30:54:dc:0a:df:66:a0:6c:a3:f9:fd:44:
64:fb:20:cf:83:6d:d5:32:47:a3:97:ae:d0:78:d3:
c0:f1:b8:74:af:68:50:d0:eb:c4:2b:d2:1c:cd:ca:
5a:c6:f1:a2:2e:64:e3:23:5a:22:0e:e8:77:69:b1:
11:9d:d5:ef:c9:09:a0:b9:bd:d9:01:2e:de:aa:01:
c3:5c:a0:43:02:e2:e8:10:cc:f5:7c:f4:a4:5f:9a:
5d:f9:4f:4e:79:cb:10:80:66:d6:f4:62:d3:06:45:
75:b0:1f:af:00:2b:16:3a:82:12:ff:a5:c9:a4:ee:
cd:70:89:1e:dd:7f:29:9d:a1:46:de:a8:08:ba:e8:
f1:23:f7:48:91:f7:c1:fa:fe:26:d7:19:b0:b2:f9:
d1:9e:aa:58:42:39:05:4e:83:35:5a:c6:9b:44:09:
03:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9E:A6:3F:B6:90:08:07:C5:D1:05:73:AF:6D:99:93:49:82:6D:CD
X509v3 Authority Key Identifier:
keyid:19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:78:99:55:18:e0:9c:22:af:a8:f7:ab:80:75:d9:9f:b1:bf:
b1:d0:f2:95:e9:88:44:88:3d:72:a1:f4:7f:a9:15:02:33:7a:
d1:fe:83:8a:56:83:0b:4f:a8:1f:bd:1f:cd:17:02:4a:48:5c:
94:2f:f5:0d:03:3f:85:7a:3b:51:e7:d2:e0:03:72:e2:cc:0b:
3c:2a:8b:bf:d0:36:cb:1b:c0:e8:bf:cd:b4:1a:f3:40:36:92:
8f:ee:62:96:13:54:36:6d:50:26:a5:8b:fa:b4:fc:c6:08:e2:
5d:2c:4d:f3:52:b3:4b:43:92:f8:66:a1:bc:d0:ba:03:e2:09:
f2:5c:67:08:f8:7b:1b:40:67:9c:dd:d8:fb:3d:67:14:68:04:
3f:0a:e7:a1:22:b3:ac:11:48:22:e3:88:4c:85:c8:63:c1:95:
55:99:b8:27:2d:6c:25:66:4c:b7:fd:69:0c:ef:12:87:db:29:
28:ff:c7:4f:5f:bd:2e:d5:65:1e:5b:f8:fa:09:8f:42:9a:1d:
59:18:56:91:82:7c:77:d5:2e:c5:c1:84:2d:f4:60:50:4a:29:
17:ea:23:04:1b:be:b8:89:25:20:de:85:9d:4e:bf:9c:f9:95:
e0:39:f6:ed:d1:8d:6b:ed:d2:29:3c:d6:3b:1a:8d:ef:fc:11:
94:55:b7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:39 2025 by rpki-client