Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
File: GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json)
Hash identifier: wc1kJ5xspy4AEy0kVoCD4rKpsxZ++sNW4wSvwciHoRA=
Subject key identifier: 67:12:88:BC:F2:B0:32:84:8C:1D:E1:58:23:CC:2C:86:CC:F3:C3:3C
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Certificate issuer: /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial: 019A4F62CE807EA13606E64865F13BB89BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 15:01:06 +0000
Manifest this update: Tue 04 Nov 2025 15:01:06 +0000
Manifest next update: Wed 05 Nov 2025 15:01:06 +0000
Files and hashes: 1: 5ekJj6RYdmJBNmKWcQ0sEc6eWgU.roa (hash: gPGy8PS0+ecmm07tEkgKLMFDWfNcEFuAsE09yhAQrNo=)
2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: J5LQPhmqW4tbge70I61r3yRgFk1aN57bvo5g0DM06L0=)
3: _YBrb9GHmCpqMjy8GFwAvwaPx90.roa (hash: XWiWSnDHqy5A+xwKGiqSBQrfe6N7eyh2EySgoK4VNNw=)
4: lCgKihl6lv9I1HmInNqD60nii-E.roa (hash: +eRiAGt7XlmYsCebRhtIL5+eM1SWrg49PToO3o+8iRc=)
5: mmY1ARivIWLIbuStJrmVTjbcqd0.roa (hash: pdFIZbB/0pJ15uLsSovmly6F7hKCHQG6LxPg19m7f9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:ce:80:7e:a1:36:06:e6:48:65:f1:3b:b8:9b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Validity
Not Before: Nov 4 15:01:06 2025 GMT
Not After : Nov 5 15:01:06 2025 GMT
Subject: CN=671288bcf2b032848c1de15823cc2c86ccf3c33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:7e:37:7b:ea:28:73:af:c0:5c:36:a7:d5:
c5:2e:ff:9e:00:d0:f5:d3:63:3c:3d:ca:ca:e3:fd:
76:26:bc:a2:30:15:47:c2:59:ad:03:39:1a:f7:f5:
0b:f9:91:a5:62:f7:9c:7a:13:5b:59:d8:78:d0:61:
51:c8:41:4f:76:b0:cd:24:eb:14:85:b4:33:b4:73:
36:4d:c6:96:32:d0:28:f0:a3:97:0e:2a:8d:69:b6:
e4:2e:7d:43:b3:62:12:8c:c1:b8:12:c9:16:20:69:
c9:73:7a:3c:d8:6a:ee:6b:d6:fe:70:20:f0:07:4a:
be:4f:a7:06:11:18:3d:2c:68:65:2e:8b:b5:b2:d1:
f0:fa:5a:91:ae:08:3a:63:01:d0:ed:38:bb:9a:37:
0d:ad:d9:6c:5a:a2:80:1a:54:70:a3:bd:b2:5c:34:
78:72:71:f8:9f:6e:dc:8b:98:2d:a9:16:2e:4a:a8:
f8:61:58:df:39:b0:f2:b1:23:9d:5f:94:9d:82:bc:
1c:0a:5c:5b:ab:42:0e:ef:f2:8d:a2:f9:3e:f5:75:
77:1f:a3:85:8c:3f:b5:a9:b1:fd:2f:84:4a:59:7e:
7b:8b:dc:0d:c4:f7:4c:bd:86:9b:74:67:fe:f1:21:
ef:de:d7:f0:06:55:1b:78:1d:d2:49:ed:fc:3b:47:
85:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:12:88:BC:F2:B0:32:84:8C:1D:E1:58:23:CC:2C:86:CC:F3:C3:3C
X509v3 Authority Key Identifier:
keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:65:10:8f:76:7c:4e:2c:a9:1c:16:58:0f:8e:47:63:e3:dd:
06:f9:c4:01:61:5f:d1:c1:00:1b:8d:89:0b:81:27:c5:87:aa:
76:7c:cd:5a:9f:51:f4:94:7b:8a:b3:15:f4:14:d1:12:94:24:
8b:0b:28:f7:82:56:a8:58:8a:f2:34:91:08:e0:9e:ed:e7:1d:
58:fc:6b:89:50:78:80:72:b7:7d:54:e3:9b:14:53:72:ac:b6:
bd:27:ea:29:c0:29:12:8e:a5:c7:5a:ec:b4:e5:6e:97:1a:31:
e6:93:8c:83:e2:da:dc:63:68:47:79:89:91:50:2c:d2:3e:0a:
c3:4c:e5:08:5f:f5:b1:36:d0:35:9d:e2:81:9b:71:2e:05:15:
7e:fd:b8:22:8e:9e:0c:f4:fe:bc:19:92:c7:05:ee:c3:1d:18:
ff:70:31:be:67:1f:5e:52:6d:24:b7:a1:01:e2:91:1a:c4:a2:
25:0f:df:ba:d5:3a:86:7e:70:3b:92:8d:2e:48:55:53:19:32:
ec:fd:11:a4:78:77:5b:5d:dd:9e:c1:31:a1:aa:4a:17:ee:8d:
34:11:bc:6b:b9:98:9e:3c:6e:11:a7:37:cd:3d:8b:e1:8a:dc:
e0:f7:4c:c9:81:76:1b:84:8f:8b:f7:b0:c9:51:56:b4:8b:c0:
d2:83:dd:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYs6AfqE2BuZIZfE7uJu4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDRjZTI4ZWFlNjgyYzk3YWNkMmQ4NjJmZWUyODk3YzNi
MDk2ZmQwHhcNMjUxMTA0MTUwMTA2WhcNMjUxMTA1MTUwMTA2WjAzMTEwLwYDVQQD
Eyg2NzEyODhiY2YyYjAzMjg0OGMxZGUxNTgyM2NjMmM4NmNjZjNjMzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkd+N3vqKHOvwFw2p9XFLv+eAND1
02M8PcrK4/12JryiMBVHwlmtAzka9/UL+ZGlYvecehNbWdh40GFRyEFPdrDNJOsU
hbQztHM2TcaWMtAo8KOXDiqNabbkLn1Ds2ISjMG4EskWIGnJc3o82Grua9b+cCDw
B0q+T6cGERg9LGhlLou1stHw+lqRrgg6YwHQ7Ti7mjcNrdlsWqKAGlRwo72yXDR4
cnH4n27ci5gtqRYuSqj4YVjfObDysSOdX5SdgrwcClxbq0IO7/KNovk+9XV3H6OF
jD+1qbH9L4RKWX57i9wNxPdMvYabdGf+8SHv3tfwBlUbeB3SSe38O0eFJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcSiLzysDKEjB3hWCPMLIbM88M8MB8GA1UdIwQY
MBaAFBkEzijq5oLJes0thi/uKJfDsJb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDkt
MTVkNWRlYjIyOGRkLzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDktMTVkNWRlYjIyOGRk
LzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGUQj3Z8
TiypHBZYD45HY+PdBvnEAWFf0cEAG42JC4EnxYeqdnzNWp9R9JR7irMV9BTREpQk
iwso94JWqFiK8jSRCOCe7ecdWPxriVB4gHK3fVTjmxRTcqy2vSfqKcApEo6lx1rs
tOVulxox5pOMg+La3GNoR3mJkVAs0j4Kw0zlCF/1sTbQNZ3igZtxLgUVfv24Io6e
DPT+vBmSxwXuwx0Y/3AxvmcfXlJtJLehAeKRGsSiJQ/futU6hn5wO5KNLkhVUxky
7P0RpHh3W13dnsExoapKF+6NNBG8a7mYnjxuEac3zT2L4Yrc4PdMyYF2G4SPi/ew
yVFWtIvA0oPdVQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:11:20 2025 by rpki-client