Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
File: GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft (raw, json)
Hash identifier: H3vkO9fEWaTe1Xiu+1PnY8sDhoro27bm1L4bPV6ixkw=
Subject key identifier: CB:9F:CA:41:35:E0:BC:9B:27:88:2C:61:20:31:25:06:57:D1:93:81
Authority key identifier: 19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
Certificate issuer: /CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Certificate serial: 019A4EF5F452DF37294420D1651C41A2645E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
Manifest number: 160A
Signing time: Tue 04 Nov 2025 13:02:12 +0000
Manifest this update: Tue 04 Nov 2025 13:02:12 +0000
Manifest next update: Wed 05 Nov 2025 13:02:12 +0000
Files and hashes: 1: GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl (hash: 2h2LBFhMBIk5aRB5TMli7qKApjgflYC4SI+RirfEaxg=)
2: R9wvbwR8vf6XKX0eGcMmD8X8Klo.roa (hash: MTZzbOkg2UHrN+bJCxm0dSAtniaWbyC3ZD9jm9TIAQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:f4:52:df:37:29:44:20:d1:65:1c:41:a2:64:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Validity
Not Before: Nov 4 13:02:12 2025 GMT
Not After : Nov 5 13:02:12 2025 GMT
Subject: CN=cb9fca4135e0bc9b27882c612031250657d19381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:6a:07:7e:69:1b:ad:73:37:ec:29:f3:9e:ab:
78:a9:c2:02:39:96:8e:a7:c3:c5:a3:78:ac:a7:9f:
32:02:2f:a9:15:6c:aa:1f:0c:0e:96:2e:a5:f7:ab:
c9:79:c9:35:c3:b8:09:1b:c4:04:59:35:96:8f:d0:
4a:ca:cb:7e:b7:1b:c5:3d:e2:f2:6e:73:25:3c:ea:
08:ac:5f:e2:bf:ea:a0:e1:00:5c:91:64:c0:83:05:
d1:b3:06:5e:d0:d8:6b:6a:21:1b:0d:90:72:0d:70:
a7:ae:85:92:96:2c:ce:a8:7b:12:77:ea:a4:48:71:
ac:31:0b:3a:a6:fb:c1:fd:63:a4:76:5b:a4:4a:47:
cf:33:71:49:02:ec:9e:fc:c8:c2:99:1b:a3:a6:04:
3e:ca:33:32:29:36:84:f0:15:24:e8:9a:2f:3e:39:
eb:4e:51:58:59:e6:cd:71:97:9f:1e:0d:ae:b5:6d:
42:7d:75:d3:df:8b:74:90:3e:f2:3f:3c:cd:16:13:
53:cd:a0:cc:e2:a7:13:6b:64:71:3a:c5:85:38:41:
47:f5:a9:62:2e:19:a4:24:ac:58:84:e2:01:a4:97:
af:e0:3f:63:34:5e:b0:fb:55:b0:6e:26:9d:0c:fc:
42:63:75:c5:56:7b:6e:9b:4e:1d:03:d8:9f:e3:23:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9F:CA:41:35:E0:BC:9B:27:88:2C:61:20:31:25:06:57:D1:93:81
X509v3 Authority Key Identifier:
keyid:19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0c:96:36:b5:cc:3c:5b:34:bb:e5:c1:63:d9:01:4f:80:f7:
3b:9a:3a:6c:1f:df:93:80:fd:1c:48:80:03:59:b9:a2:6e:9a:
45:ea:49:3b:48:27:e8:9b:7d:4a:a6:a5:46:9a:8e:84:6b:c6:
60:d9:0c:75:fa:67:71:23:bd:06:a0:d1:9d:65:ea:d4:d8:2e:
82:7a:21:76:e8:92:84:4d:e2:6e:52:a2:c4:81:16:45:0d:93:
5c:58:4a:a7:06:91:8c:56:23:1a:d3:5b:10:f8:07:79:3e:6c:
50:d5:8a:fd:56:58:d9:dd:25:57:98:3a:f3:69:18:de:3e:16:
51:24:e5:08:cd:78:18:47:f9:5d:18:03:b8:7d:46:72:21:15:
73:93:87:79:dc:64:60:4a:9e:fa:b7:c3:80:89:17:1f:22:70:
56:9f:2b:e3:3c:8d:47:b9:ba:e7:3b:0b:d8:b5:e8:48:f4:eb:
12:4d:de:c7:4b:9d:4a:61:d6:7d:33:fa:ff:7d:54:00:74:4e:
87:98:4b:31:54:a9:71:d9:77:dc:85:ed:f2:55:18:ca:40:c6:
cd:1d:4f:88:48:8e:a1:bf:e8:86:fc:dd:9b:97:de:fe:b4:4b:
f9:8e:2d:64:37:f1:81:01:b0:9b:ac:b7:f5:66:de:6e:f1:b2:
73:19:25:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:01 2025 by rpki-client