Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
File: GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json)
Hash identifier: gI2E4WWdgxk61VPzoT2J4sW5hZkWUXSj9rQIzo9eqm4=
Subject key identifier: 8B:6E:B9:EA:BE:A5:7B:1D:F4:4D:CC:33:10:93:53:A3:EF:BE:A5:6F
Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
Certificate issuer: /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Certificate serial: 019A4FD04E1F364768FAA57E2F3913426E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
Manifest number: 0977
Signing time: Tue 04 Nov 2025 17:00:42 +0000
Manifest this update: Tue 04 Nov 2025 17:00:42 +0000
Manifest next update: Wed 05 Nov 2025 17:00:42 +0000
Files and hashes: 1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: knkGOm03dwov29m0aF7jrX1BmSlFI14MsVRLm9E+Kro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:4e:1f:36:47:68:fa:a5:7e:2f:39:13:42:6e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Validity
Not Before: Nov 4 17:00:42 2025 GMT
Not After : Nov 5 17:00:42 2025 GMT
Subject: CN=8b6eb9eabea57b1df44dcc33109353a3efbea56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:0d:b3:56:ca:40:7d:15:06:ee:45:aa:87:
b7:a9:5e:5b:c7:3a:ca:67:17:8e:88:96:42:30:88:
09:82:1b:bc:fa:1a:11:02:3c:17:13:39:6e:b9:e9:
52:14:03:9e:3f:bd:1a:cd:c0:d2:b8:de:86:51:df:
49:57:74:d8:20:d1:e6:86:2e:b5:f6:29:4f:66:bc:
da:71:99:d7:f1:08:65:83:ba:a1:90:d5:9f:c5:53:
59:9d:e0:74:e5:3d:63:5e:af:3e:75:d3:06:20:fc:
ba:22:be:24:45:84:8d:3a:6a:37:3c:5f:bf:ba:fc:
8b:4b:51:06:57:d5:55:21:d4:3e:06:aa:9f:8d:48:
f6:4a:39:92:11:b3:35:1b:f6:1f:67:3c:29:36:1b:
00:0a:71:a5:55:22:e6:cb:5c:48:80:e2:9e:00:01:
93:6c:14:ea:18:e8:42:b1:71:2e:c8:5e:be:05:8c:
4d:80:ed:7f:2a:45:44:15:8d:fc:aa:f8:af:e0:bc:
f9:50:f4:ca:9a:97:d9:12:c3:43:ac:bb:7a:f2:a1:
a1:fa:ff:12:f3:15:d1:09:4c:6f:f6:68:66:51:2e:
49:26:e9:96:ca:78:00:e1:c0:3f:f9:03:d2:66:fc:
86:9f:14:68:cc:44:0d:2d:a8:e2:0a:76:c0:d3:a0:
da:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6E:B9:EA:BE:A5:7B:1D:F4:4D:CC:33:10:93:53:A3:EF:BE:A5:6F
X509v3 Authority Key Identifier:
keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d4:b5:7d:87:8e:39:bd:c7:f4:3b:ed:ed:bd:66:25:a8:61:
a3:89:84:2e:8f:74:f0:cf:dd:89:1f:c7:1f:b7:ba:32:a5:09:
a2:9a:e7:b6:29:69:20:77:15:35:13:04:fc:54:bf:20:9c:21:
ab:8a:dd:ae:29:33:6b:b7:28:da:51:86:a3:de:18:36:2c:dc:
f4:43:ea:c4:2e:53:55:5e:cf:aa:52:9a:9a:0f:a2:c7:ee:1f:
c8:98:89:bc:1b:05:18:4d:6a:ad:a9:cb:89:be:e0:d2:fe:d9:
10:9c:ea:2b:9e:e4:91:82:1b:7f:91:e4:f6:34:95:63:4f:64:
19:10:b4:02:ae:9d:87:78:3a:0c:7e:4a:69:b6:71:24:54:4b:
f9:e5:7c:d9:e1:de:cb:a3:36:29:f4:25:c4:aa:bf:59:0e:bd:
1c:3a:41:c1:1a:e1:09:3f:18:c2:9e:bd:34:94:fb:3f:1b:5b:
4e:93:a4:55:03:07:6d:e4:70:35:4a:9d:42:1d:4b:26:57:4f:
31:84:c4:d5:d8:4e:dd:4e:58:be:de:81:3e:eb:51:11:e0:fd:
e0:79:a2:68:ed:85:d2:8e:6e:e5:cc:e4:08:96:54:b1:c2:0e:
34:61:00:6c:60:4c:4c:6c:92:74:b1:c2:39:70:1f:2d:34:70:
02:cb:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:46:21 2025 by rpki-client