Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
File: GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft (raw, json)
Hash identifier: QF8RA4fY7T+bfEnpCblpePxghQeZDVGJdVPx1SRcOC4=
Subject key identifier: 61:7E:E5:39:9E:13:0C:52:24:A7:E6:9B:CF:07:35:04:C9:92:CF:E5
Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Certificate serial: 019A4E86D25DF81D12FA5841C946F11A6607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 11:00:49 +0000
Manifest this update: Tue 04 Nov 2025 11:00:49 +0000
Manifest next update: Wed 05 Nov 2025 11:00:49 +0000
Files and hashes: 1: 9VHnso7HKhi305msO0E0LZUPW1k.roa (hash: 04hjZ5ZRGMkvxF1mWUhoObmyRw38T7L084gMoET9a40=)
2: GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl (hash: 3lNTTvMyzvLY828PLnR+CqMHS2rA6bl2FwjL4uGsWaM=)
3: Njf2TltOZrdEvD_qof8H0kAWoWg.roa (hash: DfC/KigNnFzfWnrZ4fHRxNqUPwLlnRYcAsAhEzE9YoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:d2:5d:f8:1d:12:fa:58:41:c9:46:f1:1a:66:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Validity
Not Before: Nov 4 11:00:49 2025 GMT
Not After : Nov 5 11:00:49 2025 GMT
Subject: CN=617ee5399e130c5224a7e69bcf073504c992cfe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:3c:26:35:c4:ed:e8:12:dd:d1:60:f1:76:
46:76:68:b4:af:78:95:f0:a5:1b:eb:e2:68:b0:df:
e2:68:69:ef:58:cc:e5:1f:ef:44:62:ac:6c:54:07:
12:d7:14:de:55:4d:af:64:1e:f3:ab:8e:c7:eb:31:
61:f0:b1:8a:f5:50:78:21:c5:ce:52:86:fa:a6:d8:
96:a6:db:f7:64:52:c4:32:38:ab:f0:2e:1d:16:4e:
69:f8:2f:0b:7b:31:41:b6:67:76:b8:0e:ee:8e:c1:
f2:e4:14:b6:15:3a:be:ea:8f:aa:10:24:14:9e:55:
43:c7:d8:94:26:c3:58:c4:f8:25:3d:30:c0:96:bc:
3e:da:8a:60:1b:0c:be:64:2a:d1:2b:f2:23:f0:e3:
42:e6:cf:94:bd:69:73:0d:29:1f:33:23:63:8b:87:
b4:e7:ff:75:fa:94:b1:56:a7:8b:8c:96:04:77:92:
d9:30:57:40:b5:1c:04:49:34:d7:ee:74:44:45:ff:
58:bd:8d:9e:58:90:3f:ba:23:b5:cc:ca:56:f4:13:
bc:c5:ea:b2:2f:53:79:a6:9e:35:5d:55:a9:5d:3b:
2a:e0:3f:85:8a:da:17:d2:ca:6c:9a:1e:d9:64:02:
7e:4f:09:f5:1c:80:23:75:20:72:67:2a:59:55:9c:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7E:E5:39:9E:13:0C:52:24:A7:E6:9B:CF:07:35:04:C9:92:CF:E5
X509v3 Authority Key Identifier:
keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:49:ca:3e:29:22:fa:e9:a9:da:55:85:bf:c4:73:37:b1:0d:
ed:51:1e:8c:2a:1e:11:21:eb:76:4b:1d:ad:c7:9d:6a:75:33:
74:d6:48:3a:73:59:21:07:de:a0:47:6c:d5:3c:a1:52:d3:90:
c2:74:0d:f9:08:31:f8:31:65:46:9c:5a:ed:eb:50:91:ef:0e:
18:14:26:cf:18:82:9c:9e:67:35:0f:00:80:a2:dd:d6:e4:56:
c0:44:8d:5e:2e:c2:89:ae:5f:1d:42:26:cc:ec:d9:90:ae:6d:
91:00:76:87:5d:9c:3f:03:96:b9:5e:94:58:c1:27:8e:c3:6f:
ea:2a:4d:94:28:53:75:48:14:31:20:38:0d:5c:58:e4:1f:af:
f8:d2:4f:66:5e:48:27:e9:c3:46:52:4c:e7:3e:4f:37:78:75:
98:2c:3f:76:34:64:ec:59:d7:ff:bd:cc:54:fc:e3:6a:4b:c2:
70:1d:bf:e2:91:f9:ac:c7:a5:3d:6b:93:46:9f:60:c6:0a:11:
54:dc:0f:66:e6:e8:bc:ab:d0:84:8d:67:73:a1:4f:ff:66:bb:
60:0b:62:c4:fe:51:7f:67:a1:6f:e8:4f:70:51:98:80:5d:4b:
78:32:5b:cf:4a:8e:26:e7:cd:de:c8:c1:07:38:89:f2:5b:55:
8c:15:20:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:31 2025 by rpki-client