Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
File: GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft (raw, json)
Hash identifier: bWO51zRF4yvzROlAq6KvFj8PjtezlOXUxHvvE3WLx7k=
Subject key identifier: 50:90:16:F6:29:72:02:77:36:EF:3D:BB:9F:79:64:B6:BA:29:01:F9
Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
Certificate issuer: /CN=1902391799337601331f5a12af11e9f4f6421159
Certificate serial: 019A725CD7C04AF5B70F624D4896861596C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:01:18 +0000
Manifest this update: Tue 11 Nov 2025 10:01:18 +0000
Manifest next update: Wed 12 Nov 2025 10:01:18 +0000
Files and hashes: 1: GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl (hash: i8A899du2kR78A4B7EyMl34iysURT+2k08zu6wQysbo=)
2: MG8GkG1guL2JPQamlCCVL0WmXAU.roa (hash: zOqvBBG8dg13+yUZPiGoLbhSAZEkww5TYWxAzF0vCsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d7:c0:4a:f5:b7:0f:62:4d:48:96:86:15:96:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1902391799337601331f5a12af11e9f4f6421159
Validity
Not Before: Nov 11 10:01:18 2025 GMT
Not After : Nov 12 10:01:18 2025 GMT
Subject: CN=509016f62972027736ef3dbb9f7964b6ba2901f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:c1:c6:94:b3:09:55:c4:41:8d:50:be:9d:
45:af:3f:38:41:7f:c0:09:7d:ed:ce:73:41:c8:4f:
31:15:a7:fb:1a:06:8a:e4:7f:ac:6b:bc:81:eb:52:
33:cd:66:c7:f5:43:1e:a9:40:29:49:93:d1:24:ee:
57:6d:aa:25:6d:8f:c8:0e:b9:6a:07:ff:9c:ad:41:
ad:0d:3a:91:2d:a9:74:f5:c4:cc:0e:07:da:91:04:
9a:f1:cc:15:22:74:86:56:af:bd:72:ec:78:8b:98:
3f:28:eb:a6:f2:74:5a:a6:fc:cf:dd:2c:3f:e0:79:
be:ca:6b:14:03:1b:e4:ba:ed:57:98:b6:85:ab:78:
17:f8:89:df:25:45:76:5d:2a:8f:87:5a:56:e5:1b:
90:c2:8c:16:4b:82:cc:33:86:3d:bb:9d:87:4c:9a:
ed:a4:31:f7:86:44:0a:6b:63:92:71:b0:b0:2c:ad:
7c:56:e2:e6:dc:de:da:a2:65:ce:9a:26:26:23:8e:
e8:6d:51:31:31:d5:ba:84:50:2a:b5:de:10:26:a7:
cc:52:e4:c5:c5:55:4c:2b:a8:b0:0b:7a:f7:2a:89:
35:98:df:91:42:e1:29:01:4c:d2:66:92:2a:78:7a:
03:85:3e:94:b5:b2:71:50:c9:a0:13:b2:d6:89:97:
7f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:90:16:F6:29:72:02:77:36:EF:3D:BB:9F:79:64:B6:BA:29:01:F9
X509v3 Authority Key Identifier:
keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d2:18:e1:6d:fa:56:33:eb:98:60:72:ff:5c:3b:2f:f5:01:
e1:42:e3:55:af:94:e8:3d:31:11:da:56:e0:e3:df:f5:de:6a:
85:27:c2:70:38:1c:2f:57:1a:1a:bc:3c:27:84:b8:a7:bd:1e:
a4:b9:03:ec:ea:8b:dc:eb:de:df:c2:bc:93:50:20:20:60:53:
b8:ad:62:59:4a:c7:58:73:03:58:1c:fc:9b:b6:ee:a3:71:ff:
61:9b:85:8c:69:3b:a9:d4:62:45:69:04:bc:4b:82:4d:36:35:
5d:48:e1:8f:fa:77:59:cf:de:87:29:95:61:37:52:79:91:4b:
38:3c:bc:df:0a:fa:e1:64:6b:37:9d:a8:ab:b4:5f:ef:2e:0c:
92:62:24:a7:87:c6:48:29:9c:93:02:78:46:58:5b:2f:a0:6e:
2f:b7:cd:7b:59:ca:c1:a8:98:5f:46:72:bc:09:07:4a:c9:85:
b0:10:75:ca:d4:c8:ec:c4:9a:31:e6:e0:1a:83:71:11:55:33:
a5:42:d8:23:31:dc:da:2e:81:ca:39:61:e5:b2:03:25:db:55:
0a:e3:b8:eb:8e:7f:9a:1b:e6:19:1e:29:12:88:5a:28:d9:f5:
58:85:74:fa:9e:d2:fe:ad:8a:55:34:4c:8c:53:78:68:fc:03:
df:ba:91:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:25 2025 by rpki-client