Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
File: Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft (raw, json)
Hash identifier: o4+ynZz7qSchRc9LxFFqBtP7j8WUsx73fjmGwXv1NWo=
Subject key identifier: B9:9A:3B:BB:57:AC:A1:D1:B9:5A:74:02:A7:46:93:AC:82:19:8C:91
Authority key identifier: 1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71
Certificate issuer: /CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
Certificate serial: 0198A0BB3CCB95ECD25BDE6996CD83E36C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
Manifest number: 090D
Signing time: Wed 13 Aug 2025 00:01:21 +0000
Manifest this update: Wed 13 Aug 2025 00:01:21 +0000
Manifest next update: Thu 14 Aug 2025 00:01:21 +0000
Files and hashes: 1: Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl (hash: nZwdYX5MjZ9jdCiJ5IMmWt4jtwkOaR3LsHxXnoK3Hac=)
2: tv0huOh6mK0H4w2Pkxi0zxGdHcU.roa (hash: AhjG9w2zaLD4mADBnCLY0U88JMMTl5C2x9ZxBk5L0+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:bb:3c:cb:95:ec:d2:5b:de:69:96:cd:83:e3:6c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
Validity
Not Before: Aug 13 00:01:21 2025 GMT
Not After : Aug 14 00:01:21 2025 GMT
Subject: CN=b99a3bbb57aca1d1b95a7402a74693ac82198c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fb:b1:99:2b:92:f4:82:bd:b3:a8:f4:3a:95:
15:f5:19:a9:f5:2d:2a:f8:1a:b9:a4:ff:7c:4e:34:
14:fb:3f:c2:3b:5d:db:54:6d:af:b1:81:65:ee:ed:
a9:e1:5d:08:1a:02:c9:56:fb:16:c9:84:c8:52:70:
6c:51:5b:80:86:d3:c0:84:6a:ae:29:d3:95:70:2b:
f0:4d:d5:a5:00:02:5b:55:9b:e2:58:d7:a0:46:a7:
bd:6a:9c:15:ff:df:e0:0d:d7:50:da:1d:38:02:55:
af:68:04:71:b8:3d:a1:b8:2a:d4:f0:63:32:d3:e0:
f0:3c:76:e1:a5:06:cc:c4:ce:84:bd:c3:44:ee:c7:
33:3c:a0:5f:b6:4e:66:ba:54:ad:b0:c4:57:de:d8:
8d:53:58:bc:4e:74:cb:50:61:a2:97:92:38:5f:c0:
90:d1:38:45:76:7e:01:c1:99:60:f7:0b:2c:89:22:
9e:59:d1:50:49:e5:5e:ac:ee:c4:c7:f0:16:d4:5e:
cd:00:05:ea:c7:af:8e:51:63:09:3a:51:26:6c:12:
aa:6a:f5:86:7a:04:bb:08:46:10:8c:0b:49:92:27:
c9:16:d0:d8:dc:0b:d5:0b:49:ce:cd:58:04:b4:3b:
36:64:fe:44:89:f9:c6:53:4d:ab:5d:1f:9d:73:66:
44:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9A:3B:BB:57:AC:A1:D1:B9:5A:74:02:A7:46:93:AC:82:19:8C:91
X509v3 Authority Key Identifier:
keyid:1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:27:56:3b:39:32:3b:8d:f0:29:e2:24:ee:3c:d3:52:db:22:
21:24:5d:c7:f6:f8:14:d1:38:61:7f:b3:c4:a9:12:ee:0e:53:
96:27:5b:c5:a1:f6:4f:00:65:ad:e9:ca:43:e8:97:75:ff:60:
fd:94:72:1e:b2:ef:0c:2b:b5:be:85:d8:53:d1:a5:56:e8:f9:
70:4c:2b:2c:cf:5e:3c:c0:cf:69:55:0c:8b:30:d8:bd:dc:e9:
05:66:1c:b2:90:2f:a1:a8:23:ed:09:73:90:e5:9d:f0:53:a0:
a8:40:d0:e9:b5:a4:c9:bc:9b:2a:1b:da:c9:0f:b2:2c:0e:1c:
7a:c7:6f:77:a3:21:17:ba:d2:74:51:6e:5d:86:53:46:f0:6b:
ab:01:af:96:b3:7b:2f:d9:72:11:f3:10:84:07:96:8f:61:7e:
7d:df:38:21:de:5c:a1:21:a4:b2:26:87:4a:2f:38:a8:a5:09:
13:fa:ca:bb:dc:4b:1b:b7:90:40:57:10:6f:27:92:e8:2f:d1:
46:e4:bf:ce:c7:12:f4:f5:4b:bf:f0:98:c9:fd:31:da:48:fb:
8f:ed:d1:93:6e:d2:6b:bb:c5:c4:88:0a:e2:f9:23:68:ee:52:
f7:2d:16:52:0a:73:f6:75:1b:20:3d:30:86:1d:56:1b:16:0b:
b4:93:c3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:39 2025 by rpki-client