Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
File: GqGckulmd_X5b2jxygqtn6MR60U.mft (raw, json)
Hash identifier: tRumY5AR79f2OE7lTNuoZ67gXCX4Q3z7fgXscBduUhs=
Subject key identifier: E0:20:C8:F5:6F:6F:83:48:DE:83:97:A4:75:6B:54:0A:31:EC:0C:72
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 019896A536E89DC3E8BC980128039F51279B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
Manifest number: 13E7
Signing time: Mon 11 Aug 2025 01:01:06 +0000
Manifest this update: Mon 11 Aug 2025 01:01:06 +0000
Manifest next update: Tue 12 Aug 2025 01:01:06 +0000
Files and hashes: 1: 9PY0CzQO7rCs7a7ACWMmh-gYUMI.roa (hash: MRgHCGLmmsjnvw7chUeEEH655TL4/pWfw0Bh/13k3RE=)
2: GqGckulmd_X5b2jxygqtn6MR60U.crl (hash: Dzww/nyRS1NJ8P1e9AMGVToafDht/59cP8JhDwVMMRI=)
3: LUxnI4gkqH7yAwk0S-IwEaOnth8.roa (hash: N89HNSm0vKdgJlvHR+QOPBS6nqPeyhUDVxUtqyfT4hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:36:e8:9d:c3:e8:bc:98:01:28:03:9f:51:27:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: Aug 11 01:01:06 2025 GMT
Not After : Aug 12 01:01:06 2025 GMT
Subject: CN=e020c8f56f6f8348de8397a4756b540a31ec0c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:24:c3:ac:0e:d6:e7:1c:bd:c6:60:4c:ce:
12:94:ad:5d:58:61:df:b0:b3:02:9d:5a:31:76:d9:
9b:2f:e2:3c:66:e7:c2:f7:96:bb:83:71:22:6a:da:
2d:7c:c8:ce:cc:09:ee:98:48:34:35:bb:c0:f8:62:
c1:24:1c:a4:bd:19:c3:b1:03:f6:37:49:64:3c:15:
d6:11:ec:f8:de:e6:3d:f1:fc:e4:dc:dc:35:83:8b:
90:8e:37:b9:98:2c:f6:77:b7:75:8d:aa:05:f8:53:
02:89:f5:64:a2:dd:61:c1:eb:02:b8:2d:50:0e:2e:
d8:d5:5b:39:b2:1c:68:4a:a6:31:52:24:e4:41:92:
2b:f7:a6:07:cb:e3:2d:cc:94:f9:30:d3:24:8d:1a:
6c:b8:b3:e1:7d:2a:6f:73:8e:b7:dc:f4:4d:28:6c:
f2:7d:db:e0:a3:4a:b9:5a:6c:75:07:0e:d4:89:d6:
0a:93:b4:cb:3f:0d:01:23:45:0d:1c:77:be:bb:d7:
a9:8f:9b:79:15:fd:4b:2a:cf:e9:ec:74:5e:ae:46:
75:09:3b:f6:ae:65:a2:03:48:a1:73:c5:29:34:91:
47:82:ba:25:9f:3d:e7:83:e5:41:9e:0f:cc:3e:56:
dd:0d:0f:f1:7a:06:bb:4b:74:f0:20:b0:e4:59:90:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:20:C8:F5:6F:6F:83:48:DE:83:97:A4:75:6B:54:0A:31:EC:0C:72
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:c8:83:05:d6:cd:c8:bd:3e:58:a0:29:de:1c:28:4a:0d:bf:
71:37:63:7c:29:80:d7:bc:8b:d6:6d:60:2e:eb:31:52:5f:1b:
4c:5b:6d:b9:c2:62:76:3a:d9:5c:99:b1:d9:cf:43:9a:00:b0:
f6:e5:1c:c0:9c:7a:c3:e3:88:e8:e7:a5:3f:06:c3:39:ff:4b:
99:b4:f1:25:9a:0a:4b:52:b8:a9:29:3d:36:3e:15:94:63:1c:
bb:7d:03:26:ad:7c:dd:98:3d:28:fc:aa:46:28:61:f8:8a:a2:
c6:bf:19:1c:a6:d9:9b:a4:d0:cb:c7:d5:b4:39:f4:9f:3b:24:
aa:42:34:f2:24:b0:56:af:82:63:fb:76:73:7e:9c:7c:85:69:
8a:b0:8d:cb:d3:4c:64:77:2a:99:db:e8:20:bb:48:0d:87:e5:
71:65:89:c9:41:6c:7a:a0:3d:d7:f6:09:42:c8:b8:e2:15:32:
a8:b4:4e:69:ce:5b:60:c8:cc:ba:51:34:44:b1:66:14:d9:9d:
87:12:cb:82:59:98:3a:e9:cd:b8:b9:0a:30:87:60:f4:3b:71:
5b:1d:cd:d5:7e:3f:b4:45:2a:d1:43:19:92:2d:86:2e:1e:a8:
01:39:0d:f2:ee:d4:bf:51:47:b4:d7:4a:7d:ff:20:54:7f:23:
2c:1d:59:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:09:01 2025 by rpki-client