Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
File: gqo-xYuoRtJ6eXERxVhRUwANug4.mft (raw, json)
Hash identifier: 940Snjgyva14V405AisSmJRhMX/K1lgINVSZWqE+58I=
Subject key identifier: 62:36:1C:0D:08:75:E0:D5:B4:71:51:A7:6F:12:69:81:A6:7E:8A:7B
Authority key identifier: 82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E
Certificate issuer: /CN=82aa3ec58ba846d27a797111c5585153000dba0e
Certificate serial: 019A4E4FC8B1BD23BEC30AC89D0501FBED93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:42 +0000
Manifest this update: Tue 04 Nov 2025 10:00:42 +0000
Manifest next update: Wed 05 Nov 2025 10:00:42 +0000
Files and hashes: 1: gqo-xYuoRtJ6eXERxVhRUwANug4.crl (hash: EoIL5aXLEMcv4srEDoj41TYtP5jRKXj7PEAxGtGAIvs=)
2: lJago70cI_xvyZhFfsg3Aw9OGeM.roa (hash: fi1kzkQyoRujjlEGa/d9WEUMMxSjDAb7GkNQ5Rq5Cis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:c8:b1:bd:23:be:c3:0a:c8:9d:05:01:fb:ed:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82aa3ec58ba846d27a797111c5585153000dba0e
Validity
Not Before: Nov 4 10:00:42 2025 GMT
Not After : Nov 5 10:00:42 2025 GMT
Subject: CN=62361c0d0875e0d5b47151a76f126981a67e8a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:a1:7e:21:a1:3d:a3:f0:c4:84:7f:0e:ec:
1a:14:3f:69:b6:c1:23:8a:ad:fc:b7:10:a4:bd:df:
73:2c:47:6a:0a:aa:4b:ab:73:6b:54:1d:5b:08:a8:
eb:c7:85:b0:45:3b:fb:17:04:ae:cb:16:af:f4:1e:
ae:f7:a9:2d:a9:bb:48:7f:c9:82:0a:6c:80:a2:a6:
2f:82:4d:8c:7d:2a:d0:83:b5:42:dd:92:e0:3f:a4:
5c:8b:a5:45:b1:76:7c:d4:9f:b1:81:7c:a0:00:b3:
52:01:41:27:9a:fc:b4:61:5d:0f:b6:2e:1c:5b:24:
69:cf:73:59:8b:3d:26:ee:8a:d1:39:19:9d:9c:3b:
a1:59:58:3b:30:34:79:29:be:d4:a6:26:5a:d7:13:
99:53:00:1e:b2:0f:9e:3f:04:dd:92:33:98:67:63:
93:c1:f4:e6:2a:aa:7a:b9:35:a6:de:f4:ed:d7:03:
6a:7c:7c:e6:2b:86:b0:ef:e1:4e:b7:e3:fd:7d:99:
b8:25:7b:eb:3c:a4:3e:bb:5d:b8:e5:c6:1b:4d:66:
1e:cc:b4:3a:71:ca:e5:56:96:89:62:06:57:a8:27:
d9:5a:af:98:ae:b8:20:4a:ca:7b:e7:44:67:32:11:
4f:f6:a8:c2:73:bb:46:9c:dd:10:17:ec:aa:c6:63:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:36:1C:0D:08:75:E0:D5:B4:71:51:A7:6F:12:69:81:A6:7E:8A:7B
X509v3 Authority Key Identifier:
keyid:82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ae:52:e4:c9:a2:15:c4:37:55:2e:96:5a:43:9d:98:1c:ba:
8d:a2:26:35:b9:ac:37:65:36:4d:17:3d:2a:cc:4b:bb:30:1d:
8c:60:6c:ae:9d:c2:e9:dc:14:12:db:95:2c:ea:b8:3f:c5:06:
00:84:95:22:4b:e5:c9:57:d1:1c:c5:87:9e:d9:e6:89:f3:d6:
5b:55:77:7b:98:9c:07:9b:b7:39:f4:0d:6a:86:63:f2:25:e5:
8c:ec:86:78:f4:29:5e:f5:c1:e5:3b:85:f5:30:80:99:e1:c5:
a5:cf:2a:73:84:4e:ef:6d:fd:a5:22:01:75:fd:76:67:03:f9:
ed:d4:b2:be:97:21:99:5c:1b:8d:59:db:38:98:71:d2:b6:a2:
3b:9a:f3:cb:a7:64:48:b9:36:20:e7:a3:32:2a:25:b2:76:84:
ad:e1:a8:fa:77:da:50:67:e4:74:d2:c9:5e:60:4f:1f:fb:8e:
8a:82:f4:2f:68:ff:82:d8:96:1e:46:55:07:c1:29:e2:28:e4:
1d:57:b4:1b:2e:7b:35:40:04:77:f4:3b:65:d3:57:e2:a1:0f:
1f:c5:d9:49:ff:74:92:5f:95:e0:5d:77:97:c5:4b:a7:53:7f:
1c:4a:c9:4c:b9:fd:ad:7c:7d:fb:d5:6a:ad:f4:c1:5d:42:d6:
19:c3:25:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT8ixvSO+wwrInQUB++2TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYWEzZWM1OGJhODQ2ZDI3YTc5NzExMWM1NTg1MTUzMDAw
ZGJhMGUwHhcNMjUxMTA0MTAwMDQyWhcNMjUxMTA1MTAwMDQyWjAzMTEwLwYDVQQD
Eyg2MjM2MWMwZDA4NzVlMGQ1YjQ3MTUxYTc2ZjEyNjk4MWE2N2U4YTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP6hfiGhPaPwxIR/DuwaFD9ptsEj
iq38txCkvd9zLEdqCqpLq3NrVB1bCKjrx4WwRTv7FwSuyxav9B6u96ktqbtIf8mC
CmyAoqYvgk2MfSrQg7VC3ZLgP6Rci6VFsXZ81J+xgXygALNSAUEnmvy0YV0Pti4c
WyRpz3NZiz0m7orRORmdnDuhWVg7MDR5Kb7UpiZa1xOZUwAesg+ePwTdkjOYZ2OT
wfTmKqp6uTWm3vTt1wNqfHzmK4aw7+FOt+P9fZm4JXvrPKQ+u1245cYbTWYezLQ6
ccrlVpaJYgZXqCfZWq+YrrggSsp750RnMhFP9qjCc7tGnN0QF+yqxmO49wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGI2HA0IdeDVtHFRp28SaYGmfop7MB8GA1UdIwQY
MBaAFIKqPsWLqEbSenlxEcVYUVMADboOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMWM3ZjktYWQ5Yy00YmI3LWFjNDct
OTI3ZGQ0NTlhYzVjLzEvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iMWM3ZjktYWQ5Yy00YmI3LWFjNDctOTI3ZGQ0NTlhYzVj
LzEvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArq5S5Mmi
FcQ3VS6WWkOdmBy6jaImNbmsN2U2TRc9KsxLuzAdjGBsrp3C6dwUEtuVLOq4P8UG
AISVIkvlyVfRHMWHntnmifPWW1V3e5icB5u3OfQNaoZj8iXljOyGePQpXvXB5TuF
9TCAmeHFpc8qc4RO7239pSIBdf12ZwP57dSyvpchmVwbjVnbOJhx0raiO5rzy6dk
SLk2IOejMiolsnaEreGo+nfaUGfkdNLJXmBPH/uOioL0L2j/gtiWHkZVB8Ep4ijk
HVe0Gy57NUAEd/Q7ZdNX4qEPH8XZSf90kl+V4F13l8VLp1N/HErJTLn9rXx9+9Vq
rfTBXULWGcMl1A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:44 2025 by rpki-client