Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File: GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier: Pyc7ERs8+jYYUSNoO6SndfhUucJnnbW3/ZuXmzIWz9k=
Subject key identifier: A8:F2:C7:68:50:94:59:C8:6E:10:7F:2E:D4:20:60:61:7A:70:07:C3
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 019A4E18B1F21D61FEECD3FA2D865542D363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number: 0EC3
Signing time: Tue 04 Nov 2025 09:00:32 +0000
Manifest this update: Tue 04 Nov 2025 09:00:32 +0000
Manifest next update: Wed 05 Nov 2025 09:00:32 +0000
Files and hashes: 1: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: wKWWdP3hCQcPIDfNWG05mwX3MZN0vF7VYeybvVe+z4s=)
2: HGA6jjVB7UclmIMciEeXUBcTxyQ.roa (hash: blRYsuCoLjuXHy8qGKJB2iPcbmUbbGdoaMO6Z5/ynCQ=)
3: kZQj5c3qTbDNst6FPmlVFTJBwU0.roa (hash: OVYrhsG4NKJtVB+RFz2IORzGEYajNg4HBNGBwkD+aFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b1:f2:1d:61:fe:ec:d3:fa:2d:86:55:42:d3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Nov 4 09:00:32 2025 GMT
Not After : Nov 5 09:00:32 2025 GMT
Subject: CN=a8f2c768509459c86e107f2ed42060617a7007c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:db:78:2f:b6:39:50:2c:77:1f:70:5f:4c:
91:31:65:fb:c7:6c:fc:fe:78:07:4a:40:8a:54:30:
80:39:65:6b:38:d3:89:b7:07:9c:bb:28:88:b2:af:
08:78:1e:23:bf:dd:a4:91:1a:25:f1:07:88:0e:b8:
87:1b:33:d4:3a:b9:cb:45:75:39:e6:50:2c:51:8e:
a2:c7:fa:9b:36:f7:ac:1c:b0:c6:0e:d1:af:71:37:
7c:9a:f9:c7:48:b2:e8:42:24:f1:42:95:ae:12:71:
85:41:6c:2f:d7:97:c5:cb:99:ca:e9:a9:c4:cd:43:
08:9d:e9:97:94:ff:77:e9:c4:60:71:57:40:af:0f:
bd:76:bf:af:97:12:34:81:20:73:43:65:35:b4:65:
7a:5b:07:f4:67:fa:93:4f:1f:cd:61:2e:d9:36:36:
6d:e4:b1:54:21:c3:ae:80:90:85:f7:ef:95:99:ef:
26:dd:6c:dc:14:3f:60:79:73:c6:30:ef:b8:ef:b3:
49:6f:fb:0e:cf:b1:3a:07:42:8a:8a:d2:54:45:6a:
d2:2c:92:25:b2:1d:49:81:a8:a9:de:94:88:28:81:
1b:bc:79:fb:15:fd:b6:90:26:8a:c5:3c:e2:e4:be:
35:41:4d:05:d5:e9:dc:14:9a:f3:ff:b9:96:a4:05:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F2:C7:68:50:94:59:C8:6E:10:7F:2E:D4:20:60:61:7A:70:07:C3
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b6:bc:09:ae:c4:b5:fc:3b:85:23:45:6f:9a:07:d2:27:51:
4e:7a:61:87:24:0c:2a:2f:66:87:d6:fe:b9:31:2e:36:69:e2:
ea:a6:22:23:1f:69:9d:24:48:5b:5d:1d:a6:bd:44:33:f0:79:
1b:13:ee:40:71:18:84:30:97:38:d9:ce:8d:e4:8e:09:a4:3e:
5c:2f:8e:01:90:b5:56:c4:f0:5f:ab:f2:76:ec:c5:01:0c:3a:
e8:84:6f:d4:e6:7d:32:b9:0e:78:15:7d:92:eb:e7:13:c1:09:
be:6c:58:ca:0a:61:12:84:d9:09:fa:cf:f3:a7:59:c8:61:ba:
67:32:bd:11:d8:b0:15:a0:b2:37:0d:76:3c:a6:39:77:9c:b6:
4c:b0:4e:e3:a5:fa:f2:41:15:c1:ad:db:f0:a9:ee:ee:a3:a6:
90:c9:6e:94:dc:b6:d8:7a:4b:a3:ba:37:bc:df:b8:56:be:2c:
0e:3f:0a:28:de:cd:00:b3:c2:a0:f9:e3:52:54:12:9b:b8:1e:
3a:04:b8:d0:ad:bf:cf:80:32:35:4e:e8:3c:ba:f4:3f:3a:29:
3d:c8:73:57:6e:8c:bb:43:4e:f5:3e:6e:a6:80:2c:3a:20:06:
42:b9:41:6e:08:2f:13:ba:f5:4a:f2:db:2e:b2:7d:70:7c:de:
65:eb:c5:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGLHyHWH+7NP6LYZVQtNjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYTBhMzI4YzZmZTBmMWJjYTVlNjU5OTA0MmRmZjU5ZTUx
M2IyNWQwHhcNMjUxMTA0MDkwMDMyWhcNMjUxMTA1MDkwMDMyWjAzMTEwLwYDVQQD
EyhhOGYyYzc2ODUwOTQ1OWM4NmUxMDdmMmVkNDIwNjA2MTdhNzAwN2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGvbeC+2OVAsdx9wX0yRMWX7x2z8
/ngHSkCKVDCAOWVrONOJtwecuyiIsq8IeB4jv92kkRol8QeIDriHGzPUOrnLRXU5
5lAsUY6ix/qbNvesHLDGDtGvcTd8mvnHSLLoQiTxQpWuEnGFQWwv15fFy5nK6anE
zUMInemXlP936cRgcVdArw+9dr+vlxI0gSBzQ2U1tGV6Wwf0Z/qTTx/NYS7ZNjZt
5LFUIcOugJCF9++Vme8m3WzcFD9geXPGMO+477NJb/sOz7E6B0KKitJURWrSLJIl
sh1Jgaip3pSIKIEbvHn7Ff22kCaKxTzi5L41QU0F1encFJrz/7mWpAUfIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjyx2hQlFnIbhB/LtQgYGF6cAfDMB8GA1UdIwQY
MBaAFBqgoyjG/g8byl5lmQQt/1nlE7JdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNDRkMjQtMmUxMS00NjZkLThhZGUt
MzhlODQ2MTQ4Yzc4LzEvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8zNDRkMjQtMmUxMS00NjZkLThhZGUtMzhlODQ2MTQ4Yzc4
LzEvR3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApba8Ca7E
tfw7hSNFb5oH0idRTnphhyQMKi9mh9b+uTEuNmni6qYiIx9pnSRIW10dpr1EM/B5
GxPuQHEYhDCXONnOjeSOCaQ+XC+OAZC1VsTwX6vyduzFAQw66IRv1OZ9MrkOeBV9
kuvnE8EJvmxYygphEoTZCfrP86dZyGG6ZzK9EdiwFaCyNw12PKY5d5y2TLBO46X6
8kEVwa3b8Knu7qOmkMlulNy22HpLo7o3vN+4Vr4sDj8KKN7NALPCoPnjUlQSm7ge
OgS40K2/z4AyNU7oPLr0PzopPchzV26Mu0NO9T5upoAsOiAGQrlBbggvE7r1SvLb
LrJ9cHzeZevFdw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:37 2025 by rpki-client