Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: U8l2kxNnKx5TrILmAB4VKLVA+9IMXpRNA9UCHO5iWCE=
Subject key identifier: 3F:84:98:D9:2B:B6:D0:8D:D8:88:C2:62:EC:22:CE:B5:8F:9F:91:E9
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 0197CB713901FDFED8AAC0B9C3BC99E7D475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 13D7
Signing time: Wed 02 Jul 2025 14:01:24 +0000
Manifest this update: Wed 02 Jul 2025 14:01:24 +0000
Manifest next update: Thu 03 Jul 2025 14:01:24 +0000
Files and hashes: 1: 1-n1FQJdtrmSwdnekLdBoJCXaZLE.roa (hash: vl5yvgIUqNuSQTIxMaS41AEZa6z2Ung/hJMgS4H/xOQ=)
2: KUPJ1lDWM9H_O_nug1XhCm8CDY0.roa (hash: N5MTKqEvC4tpTv0nenMYPQJAtm9LjBH+zL/o+EsRhto=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: xT53koozrdLxEm0NbEOwM+UlmHI86427cRScQivY7ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:71:39:01:fd:fe:d8:aa:c0:b9:c3:bc:99:e7:d4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Jul 2 14:01:24 2025 GMT
Not After : Jul 3 14:01:24 2025 GMT
Subject: CN=3f8498d92bb6d08dd888c262ec22ceb58f9f91e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:25:e3:77:78:46:4c:06:94:c6:ed:fd:68:
b1:4c:01:57:13:73:6f:ce:49:e4:5d:8a:9a:5a:21:
10:1a:64:3c:82:5e:da:10:e3:96:be:86:42:56:ce:
46:62:ab:fa:43:3f:27:44:82:63:c0:76:ab:c1:ab:
da:fe:6f:04:29:ab:7d:16:4d:ee:4a:61:1e:d2:66:
83:54:07:ef:2f:39:cd:a9:55:86:9f:3c:cd:b8:5e:
1f:bf:9a:d2:4c:c9:35:24:23:2f:2e:e2:93:81:5a:
ac:7d:c4:73:c0:56:80:8f:fe:3a:ef:34:3d:70:8b:
81:be:e7:32:1e:95:87:d9:f1:c7:76:a8:33:5c:be:
f6:3d:86:ab:00:c5:d3:10:21:97:a8:2f:6b:02:24:
63:ea:06:c9:13:54:31:e9:10:28:90:51:24:53:3a:
6f:ae:be:03:b0:6e:01:f8:5f:cb:e8:8e:ce:1f:a4:
a5:af:5e:f9:cc:6d:60:6a:bb:db:60:4e:84:ef:7b:
2d:21:cb:3b:de:9f:57:c6:d4:a3:ea:e5:11:4a:ba:
7b:98:79:87:e7:a2:95:ad:bd:d6:a6:f5:8f:b4:13:
1b:fb:8c:29:fa:07:75:de:66:14:c9:5d:04:54:50:
48:af:bc:c9:3c:9d:1f:47:17:cc:aa:ac:7c:f0:23:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:84:98:D9:2B:B6:D0:8D:D8:88:C2:62:EC:22:CE:B5:8F:9F:91:E9
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9d:91:74:a3:f0:11:8d:6c:49:3b:2d:2f:2c:ce:80:c5:d7:
6d:9f:35:15:e2:da:11:7f:1f:bf:75:89:05:9a:c6:f0:b8:9b:
13:bf:1c:a3:d6:5b:21:2e:90:f7:96:b3:80:dd:9a:e2:21:30:
cb:21:ec:a8:e4:87:f2:ea:1d:9b:ce:0f:5c:78:86:47:b5:ea:
30:b8:d4:3b:b5:ad:42:9a:85:a5:bf:54:4e:ed:db:90:a2:52:
8d:d0:5b:b5:f3:a6:62:80:2c:10:60:1e:11:de:8a:07:91:b0:
90:13:c0:95:48:af:39:9e:56:b1:1b:6d:46:44:0c:86:1c:47:
87:7c:c1:81:6c:ab:ad:79:0e:ca:cf:cb:0c:3b:d3:df:35:30:
0f:38:ee:71:51:1c:2d:20:1b:43:77:34:de:0d:08:38:30:8d:
96:3d:83:93:d9:14:e6:30:ee:3d:35:7f:77:8e:5c:d0:09:de:
c4:7c:a1:f8:54:44:48:98:67:a8:82:31:d5:86:49:43:e0:5b:
af:9b:91:e8:7a:c6:5a:c0:c3:30:6e:49:fc:90:ef:4e:51:26:
55:01:05:5f:38:91:15:c5:2f:13:b1:5c:aa:9b:81:15:11:0b:
3a:ec:15:d3:ca:0d:f1:c9:1f:8b:ce:b3:08:ef:32:33:94:1b:
eb:7f:f1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:54:59 2025 by rpki-client