Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
File: l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft (raw, json)
Hash identifier: RXxDl8p4hmTds9VBy+/txwfTp1vCr9bHGd4b/B6Scec=
Subject key identifier: 42:04:FB:B4:92:4B:69:A9:89:11:D6:35:24:76:EF:79:85:81:90:2A
Authority key identifier: 97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
Certificate issuer: /CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Certificate serial: 019A53085418DE1E91C17C854F3B53CF2C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
Manifest number: 44
Signing time: Wed 05 Nov 2025 08:00:45 +0000
Manifest this update: Wed 05 Nov 2025 08:00:45 +0000
Manifest next update: Thu 06 Nov 2025 08:00:45 +0000
Files and hashes: 1: 3MukuvAjChzbkXUiH7AnQDbb0l4.roa (hash: kY3n/ZTy9g9zEH976kSVtvidmHz0YnZOSjj64JdMJqA=)
2: M9icYFpRdfuUP8GszU75Wi0Nv1A.roa (hash: enDVpQ7OlTMZIE4utPL8AG9YkPcxUy6DkUw1A6uMG2w=)
3: l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl (hash: 8kKeik8qYOtThBLGT1wz0UwiMs6sLJCA+jBBxS36i7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:54:18:de:1e:91:c1:7c:85:4f:3b:53:cf:2c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Validity
Not Before: Nov 5 08:00:45 2025 GMT
Not After : Nov 6 08:00:45 2025 GMT
Subject: CN=4204fbb4924b69a98911d6352476ef798581902a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:a3:aa:c9:8b:90:dc:35:b0:1a:78:cf:5f:
80:0b:ab:7f:79:00:73:f7:22:f1:f8:5b:36:69:c6:
92:3f:c0:96:c8:86:bf:d1:2f:99:96:a5:b7:9a:0a:
5c:f8:ff:51:d5:92:82:bc:d3:aa:14:26:b2:b0:ad:
2c:9e:99:e3:5c:de:72:d7:cf:cf:3d:2a:cd:f9:e6:
52:62:2f:81:8d:f0:2d:09:dd:4c:61:26:dc:a4:f8:
fc:36:f2:c2:47:c2:a8:13:65:c4:4b:d3:05:17:5b:
6c:d9:68:b1:c6:66:a2:42:a1:82:d5:2e:49:1f:a1:
7f:f3:f1:fc:05:2a:5e:57:63:be:7e:1d:41:d9:19:
d2:c7:91:cd:73:73:7e:03:bc:41:93:e4:6c:b0:0f:
44:0b:4a:c8:6f:b4:98:21:d9:03:33:2c:bb:35:98:
3b:d5:6f:48:fc:87:fa:be:29:a4:71:9a:46:fe:71:
a4:17:65:e5:4e:5d:f8:4b:39:7a:2f:4d:ed:71:1c:
3c:05:ef:2b:c1:e1:4d:f2:86:4f:4b:4b:c8:57:19:
0e:d7:31:f6:cf:20:8e:af:80:dc:d7:74:65:90:eb:
98:05:8f:d8:f6:d2:9a:ba:f2:bf:62:96:9f:cc:61:
e9:6e:e8:35:e0:69:b2:63:7a:3a:49:f9:4e:71:58:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:04:FB:B4:92:4B:69:A9:89:11:D6:35:24:76:EF:79:85:81:90:2A
X509v3 Authority Key Identifier:
keyid:97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8c:9f:b7:cd:14:4d:38:e0:4a:86:5a:3f:2d:2b:50:ba:0b:
d5:29:de:42:dc:ac:64:af:a5:17:51:10:d5:71:f5:38:5f:76:
86:70:1d:89:62:76:bc:19:62:5b:9b:54:5a:76:b1:03:f9:e3:
40:cc:04:c9:1c:fd:b3:39:5d:48:c7:8c:04:e8:48:ea:84:8c:
62:b1:5b:4b:ff:f0:f2:c1:71:a2:f9:9f:0d:9d:52:85:1a:68:
14:db:c6:cb:f4:ec:7f:2e:a5:05:49:30:70:30:3b:4c:6d:2d:
fa:af:d3:b9:af:ae:33:b9:ce:02:ad:e8:fa:a9:ce:e5:ae:7e:
d4:9f:93:4b:49:24:bd:ff:a2:e6:50:ab:83:06:61:dc:02:43:
66:f7:ef:d8:50:8a:21:01:4f:57:ca:bd:30:38:45:4f:72:d2:
a1:59:11:5b:3d:b7:ee:81:50:65:54:50:17:b3:e2:fb:9f:f3:
f8:93:86:c6:87:a3:d3:6d:3b:d8:08:8d:8a:0c:0a:bc:5b:e3:
ed:2d:97:22:a8:d2:72:a9:b7:c1:43:4f:f4:54:d7:0b:f5:9a:
ca:35:05:ab:66:24:7b:b3:03:06:5c:93:c9:ba:e3:a7:c4:71:
95:77:57:1d:bf:99:01:65:83:5a:06:24:1a:5b:e8:49:6c:c9:
81:60:21:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:29:45 2025 by rpki-client