Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File: gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier: yuXSlCu4OAmKxQIQLl+C4jcpaVDsNYROE9qrhJnN3Ko=
Subject key identifier: 99:AA:62:F9:63:17:DA:3E:3F:FF:4F:DA:31:A9:2D:C6:92:C2:67:74
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 0199FEB491060FE74449B478B7C6715147F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 23:01:10 +0000
Manifest this update: Sun 19 Oct 2025 23:01:10 +0000
Manifest next update: Mon 20 Oct 2025 23:01:10 +0000
Files and hashes: 1: 3mULbMkLr_MPSOSnvFYfAUenRp4.roa (hash: 6qqpV0wkHRjm2TnedKwLS/E8U5BGoXw+wiRnm1KNFsU=)
2: JjY_rmjM0m285v9bnJnGMH-MzW4.roa (hash: Wfm9h1Fvy7QUJSpQZVDtJ3sdWPEGrotdzPy8ZnW4oPI=)
3: OSPVEMKxRvS3K2S9RynwSClpPy0.roa (hash: I2dq/kcaAdZwjzuTK1RJZZE0wsjKNorsCYjqSblF2e4=)
4: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: yJo0k+frE3sCJz8gjoy5aSmFYw1drfT06DI+HFXE5lw=)
5: wlPsVBZE3IB9ajxNMFuhywUiQmU.roa (hash: Vf+lexsaTCbsX6oyeji8k6+eXormbDvLL1F56QDbmpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:91:06:0f:e7:44:49:b4:78:b7:c6:71:51:47:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Oct 19 23:01:10 2025 GMT
Not After : Oct 20 23:01:10 2025 GMT
Subject: CN=99aa62f96317da3e3fff4fda31a92dc692c26774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:5f:cc:1f:e2:16:d4:ff:a0:be:29:f9:52:
b9:f6:a0:04:fc:18:68:09:b8:2f:e5:cc:23:5e:87:
5f:f7:6b:18:e7:e9:7d:fb:08:19:10:6c:10:d9:7e:
87:de:5d:0b:65:59:ee:fe:74:14:0f:8d:42:e6:6b:
25:11:46:99:c8:90:72:31:00:b3:85:b6:1f:0c:77:
60:5d:16:5c:fb:49:ef:10:cb:57:bc:58:68:28:1a:
4c:80:d7:60:1e:1e:92:2b:31:73:83:b4:8e:d6:bf:
b7:7f:b6:06:cf:75:88:f9:c7:5f:73:bb:78:82:69:
d2:6b:8c:b7:8f:a7:24:e4:56:1c:2c:02:fe:39:b6:
15:09:e0:05:e8:9b:6a:b6:00:d2:28:86:5d:9c:08:
8e:cf:72:cf:f2:82:fe:1f:a3:eb:00:a8:89:6e:4a:
f6:13:40:7d:3f:05:15:a9:2b:7b:32:5a:bc:0d:33:
65:5e:e7:d7:2c:99:25:87:f3:c8:12:89:95:0d:f9:
2b:e7:fc:11:93:a9:a1:28:46:7d:d9:5c:92:f3:8e:
6c:45:2a:ab:1c:01:45:65:8f:5e:6f:53:95:0c:00:
df:6a:ee:73:7d:ae:53:a9:58:ed:0c:29:44:5a:5b:
98:fa:c7:44:7d:9c:e3:2b:34:4b:b6:d3:9f:cf:f0:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AA:62:F9:63:17:DA:3E:3F:FF:4F:DA:31:A9:2D:C6:92:C2:67:74
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:43:92:1c:97:d8:92:ca:27:81:01:78:70:22:2c:36:c2:ad:
2c:2c:1c:89:87:a9:6d:46:2f:d9:a5:23:ad:71:d9:2d:cf:a3:
12:1a:a7:f4:31:c9:81:a2:c7:09:74:d5:5b:5d:62:99:3d:40:
bb:95:f2:ac:42:34:71:23:bc:46:9a:24:d8:c8:23:1a:fb:80:
27:75:ef:ae:63:ee:fb:72:81:52:ca:17:9a:d8:a7:27:1a:4e:
67:b4:3d:1c:73:5c:93:40:31:ee:fe:a6:d6:25:40:2e:96:46:
8a:2d:1d:84:f2:f3:ce:53:23:78:b2:ee:1a:2f:ba:99:23:c4:
7d:80:e4:2f:32:bd:a5:a7:82:ad:bb:bd:5e:21:42:27:39:e4:
f2:48:f8:69:14:14:1d:9a:29:78:97:a7:a9:8e:bb:da:42:93:
2a:c1:a2:9e:a8:da:2e:af:f3:16:2e:cd:62:64:3e:cb:29:3a:
9a:02:c2:e6:f4:2d:14:1c:0e:96:95:e9:6d:a9:e1:82:f1:7c:
21:a4:e0:55:e6:58:36:fb:91:e7:98:93:b3:bc:95:27:b7:9c:
6a:4e:d7:7f:ea:fe:1f:8d:61:6f:5f:71:c6:ec:79:86:15:47:
4e:83:e6:ac:f5:ee:b3:b0:ce:61:a9:27:9a:61:b7:2a:23:bd:
a9:50:eb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:30:14 2025 by rpki-client