Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
File: GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json)
Hash identifier: AskRNjW0beBNCXAaQwpWWt1Hrx1fOZQCldkQw+LPnw4=
Subject key identifier: 4F:04:8C:E5:79:0C:46:F1:FD:C6:CA:8A:E8:80:D9:50:93:67:9D:D9
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Certificate issuer: /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial: 019A24E5BE585F149659D9F7BCA2631D53D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
Manifest number: 16FD
Signing time: Mon 27 Oct 2025 09:00:27 +0000
Manifest this update: Mon 27 Oct 2025 09:00:27 +0000
Manifest next update: Tue 28 Oct 2025 09:00:27 +0000
Files and hashes: 1: 5ekJj6RYdmJBNmKWcQ0sEc6eWgU.roa (hash: gPGy8PS0+ecmm07tEkgKLMFDWfNcEFuAsE09yhAQrNo=)
2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: oKYbabZtd/otm+PyOCKMO9p5DLXMt2YmXQ1YYPq4wvM=)
3: _YBrb9GHmCpqMjy8GFwAvwaPx90.roa (hash: XWiWSnDHqy5A+xwKGiqSBQrfe6N7eyh2EySgoK4VNNw=)
4: lCgKihl6lv9I1HmInNqD60nii-E.roa (hash: +eRiAGt7XlmYsCebRhtIL5+eM1SWrg49PToO3o+8iRc=)
5: mmY1ARivIWLIbuStJrmVTjbcqd0.roa (hash: pdFIZbB/0pJ15uLsSovmly6F7hKCHQG6LxPg19m7f9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:be:58:5f:14:96:59:d9:f7:bc:a2:63:1d:53:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Validity
Not Before: Oct 27 09:00:27 2025 GMT
Not After : Oct 28 09:00:27 2025 GMT
Subject: CN=4f048ce5790c46f1fdc6ca8ae880d95093679dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:18:94:f4:4f:20:15:c0:24:ab:b6:da:1b:
b5:11:d6:3e:85:14:4a:87:91:69:40:c7:56:55:91:
8c:13:26:6a:07:1a:a0:90:5b:74:af:65:cf:f7:7c:
1d:1a:39:17:7e:09:c9:4d:66:81:9c:ea:c8:52:d3:
1c:8e:0f:aa:f0:63:27:41:a4:7b:7d:9d:d8:e8:cf:
21:56:e1:69:07:49:4d:40:d6:40:fc:80:a0:0b:ac:
f9:74:58:7e:5a:c1:e6:94:b4:66:6c:59:ce:2d:8c:
33:5f:30:c9:49:23:14:b5:96:a0:81:57:85:e6:70:
88:e7:f3:df:27:08:90:3c:cd:61:86:a9:6d:9f:ce:
a4:c9:eb:27:db:5d:6a:ee:19:15:bb:e9:cf:ce:76:
3c:97:75:46:12:bc:9b:a1:a5:a3:3d:e3:20:f2:85:
8e:57:40:7d:fe:22:fe:12:9f:c6:2d:d8:ec:a8:8d:
a9:5a:b1:00:ec:b2:0f:c6:98:d5:31:41:fa:a9:2f:
9a:c7:71:82:a2:6e:9f:ab:47:39:14:65:57:77:17:
1f:98:36:d1:60:0b:80:91:0c:d7:f6:30:8d:a4:c9:
43:5e:48:4f:04:45:00:9e:b5:e8:3e:52:95:84:08:
4b:c6:6c:89:be:76:11:cf:65:f0:3d:75:66:7c:eb:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:04:8C:E5:79:0C:46:F1:FD:C6:CA:8A:E8:80:D9:50:93:67:9D:D9
X509v3 Authority Key Identifier:
keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a5:ed:f0:be:03:d8:86:21:9f:ce:c0:65:88:1c:6b:f6:19:
58:17:d2:56:97:78:68:de:4e:2e:1d:3c:b7:c4:7b:d2:85:a0:
57:61:c7:96:64:ce:5b:46:80:fe:98:f9:40:c6:a3:3b:ed:cb:
77:e4:87:b2:db:a0:98:23:e7:90:d9:eb:74:7d:37:f8:21:01:
d7:a0:ac:51:ca:e2:8a:15:19:91:10:46:ef:5c:c4:0f:8e:f6:
f1:3f:54:34:4f:38:e6:0b:65:c5:fe:76:2b:9a:f1:58:b5:ca:
bf:d0:1e:ae:1a:3c:ab:32:87:d3:cf:30:df:30:6a:0b:85:75:
eb:c8:06:28:e4:40:4f:98:c2:41:5a:57:47:c9:14:27:91:60:
b4:c1:16:86:89:82:a3:c8:20:54:60:c5:96:69:d6:e1:cb:7d:
a9:10:d6:ed:24:0e:06:b1:11:0d:05:ee:4f:e7:3c:9b:76:fa:
37:39:f3:c9:02:f8:32:d4:3f:18:3d:63:36:4e:ba:2b:8c:21:
85:6b:d0:3b:ee:b6:38:83:5b:19:7d:bd:a4:c3:26:e7:4a:95:
0c:47:0b:06:8d:72:6c:51:d9:1f:8d:38:7c:6c:1a:31:6a:67:
5a:9c:43:13:21:26:94:ab:b5:5a:3f:b2:66:d9:0c:81:4e:ca:
86:86:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:05:30 2025 by rpki-client