Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
File: GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft (raw, json)
Hash identifier: uc2h3yWNqcGfaNXRigjZ20a6RGtAoIMT0AUATXv7koM=
Subject key identifier: E5:9E:62:0D:09:9C:F8:83:12:19:1B:1F:25:15:DC:D7:32:26:E4:D2
Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
Certificate issuer: /CN=1902391799337601331f5a12af11e9f4f6421159
Certificate serial: 019922554EE0EC0C1B63A177C082B571E646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 04:00:40 +0000
Manifest this update: Sun 07 Sep 2025 04:00:40 +0000
Manifest next update: Mon 08 Sep 2025 04:00:40 +0000
Files and hashes: 1: GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl (hash: U4R9GvRTVucrY2XYkNFHIw8oQUNT0mjo1cta6PubQ0I=)
2: MG8GkG1guL2JPQamlCCVL0WmXAU.roa (hash: zOqvBBG8dg13+yUZPiGoLbhSAZEkww5TYWxAzF0vCsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:4e:e0:ec:0c:1b:63:a1:77:c0:82:b5:71:e6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1902391799337601331f5a12af11e9f4f6421159
Validity
Not Before: Sep 7 04:00:40 2025 GMT
Not After : Sep 8 04:00:40 2025 GMT
Subject: CN=e59e620d099cf88312191b1f2515dcd73226e4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:ff:da:fd:ca:1e:db:19:71:23:8e:96:d9:
b3:8d:07:be:e1:3b:b7:84:1e:50:bf:3b:df:40:f4:
fb:b3:d9:9c:e5:1e:0e:3b:ad:5e:72:98:63:b5:98:
90:12:41:75:55:f4:57:e9:37:62:c3:30:a2:19:ac:
7b:df:dc:0f:27:4e:4c:14:f5:d3:b2:cc:e4:81:c6:
d4:76:2f:d6:ae:30:ba:2d:13:57:4d:e4:a1:31:7c:
cf:87:41:05:a6:e8:45:11:53:2c:e7:9d:fd:c4:52:
68:12:b1:96:f3:e3:0c:55:be:9f:65:ec:2e:30:91:
e2:32:6b:60:65:c0:6a:db:ad:f9:77:a2:30:63:71:
04:51:c0:6d:5b:96:c3:fc:7c:7b:5e:e5:22:60:15:
f5:3d:13:ad:5a:b1:50:08:66:f9:07:cc:c6:77:f2:
c7:cb:4c:1d:23:c4:d3:42:f1:ac:e8:80:d6:bf:24:
0b:15:a2:d3:b8:d2:4a:8e:e4:41:ee:04:17:d8:bd:
f1:47:bf:49:29:89:e3:b3:f1:c9:fe:a8:61:74:97:
ba:20:4a:0a:2f:f7:00:19:a3:cb:38:dd:16:6d:5f:
b0:89:4d:fe:f7:30:29:6e:f6:8b:19:f0:57:c5:eb:
fc:ee:81:7e:92:f6:8b:a0:69:5c:36:ed:df:99:89:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9E:62:0D:09:9C:F8:83:12:19:1B:1F:25:15:DC:D7:32:26:E4:D2
X509v3 Authority Key Identifier:
keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:91:79:c8:ee:14:2e:cf:8b:32:dc:ab:d6:76:fc:94:65:fe:
56:fd:53:b9:ca:6d:b7:fb:8e:e5:8b:14:9b:44:3d:66:21:79:
99:dd:a7:39:0d:30:79:a9:b0:7c:df:bc:29:32:fb:8c:f9:69:
b0:59:1d:c3:d2:80:1a:4b:61:97:fa:4d:6e:dd:9f:9b:0a:38:
92:a2:3c:66:0b:95:b6:91:f3:1d:54:25:da:fa:7e:f5:37:f5:
f7:bc:a9:18:dd:d4:98:e2:41:73:d3:de:ea:b5:e3:5e:77:6f:
8b:79:ed:dc:97:66:24:36:a8:ab:f6:1f:62:3a:ae:b5:81:e6:
5b:fe:5f:5e:62:bf:cc:f7:25:30:79:d0:fc:ed:b0:31:40:f0:
84:6d:bf:71:ea:aa:01:be:36:50:21:23:79:cd:24:56:95:f4:
7a:9a:42:da:00:f5:55:50:59:9c:4c:3a:9f:82:07:58:e7:04:
db:3e:47:3d:a8:33:ec:51:c6:15:a7:f8:02:40:85:d7:e7:4a:
ae:af:62:dc:fc:86:60:a2:41:53:f7:00:68:0c:8b:75:64:ac:
25:03:5b:3b:19:64:65:ae:2c:20:4b:90:da:d6:94:fc:4f:e7:
0b:4b:23:04:1b:f3:73:15:aa:d5:a0:04:87:bb:8c:df:3b:15:
2a:4a:94:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:32 2025 by rpki-client