Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: naanatJD1ZDsu+Hw3RmovElA45CT3xL7HlFDCyRWJq4=
Subject key identifier: C7:0A:5E:22:D2:39:F2:97:D1:F8:66:6F:A5:78:26:04:7E:C1:0A:80
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 0198D5F1C4D6D0FBF3024A5B3290A42AB2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 1461
Signing time: Sat 23 Aug 2025 08:00:48 +0000
Manifest this update: Sat 23 Aug 2025 08:00:48 +0000
Manifest next update: Sun 24 Aug 2025 08:00:48 +0000
Files and hashes: 1: 1-n1FQJdtrmSwdnekLdBoJCXaZLE.roa (hash: vl5yvgIUqNuSQTIxMaS41AEZa6z2Ung/hJMgS4H/xOQ=)
2: KUPJ1lDWM9H_O_nug1XhCm8CDY0.roa (hash: N5MTKqEvC4tpTv0nenMYPQJAtm9LjBH+zL/o+EsRhto=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: zAJEIOoBH52q/R6D/gSNLZaZL2wL4ys3BeOYH7k8m24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c4:d6:d0:fb:f3:02:4a:5b:32:90:a4:2a:b2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Aug 23 08:00:48 2025 GMT
Not After : Aug 24 08:00:48 2025 GMT
Subject: CN=c70a5e22d239f297d1f8666fa57826047ec10a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:b8:42:3d:90:3a:17:7b:39:e9:44:d6:55:
b2:61:55:79:1b:04:d0:28:44:c4:b7:d7:d5:41:1a:
1e:23:b4:d1:a0:79:3f:39:fb:f6:0b:17:84:11:be:
21:f6:85:a2:8d:45:c7:3b:e3:85:22:f5:bf:39:2a:
6d:2d:1b:94:52:f6:58:25:20:c0:94:e5:0f:fc:da:
a5:5b:6d:45:bb:e3:c1:aa:95:03:24:6a:40:d0:98:
d7:0e:0b:5e:8c:95:df:97:d5:c0:1d:5b:12:d4:7c:
62:ca:ef:a9:1d:92:48:52:7b:5b:e8:10:88:7f:4a:
c9:40:0f:10:d3:8e:a7:0d:8e:9f:98:cf:0a:ad:59:
ba:ab:9e:f3:32:6d:3c:dd:68:ba:b2:81:8e:cc:af:
10:f5:bc:0b:b3:25:5c:34:80:fc:3f:28:62:d1:f8:
cd:a9:13:75:36:d8:b5:23:b2:3a:9b:4f:16:b0:d4:
28:47:9f:84:f2:9a:55:0b:27:2d:4a:1e:16:74:9a:
8b:84:10:58:89:c1:87:ca:88:e6:44:4e:12:95:32:
9f:6f:b9:0b:35:0a:55:68:8f:c1:3a:07:53:bc:fc:
2a:d5:e9:25:b1:11:03:8b:4f:65:c7:39:7c:fc:13:
b9:49:c1:8e:63:d9:72:e5:83:1d:01:d4:ac:99:a2:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0A:5E:22:D2:39:F2:97:D1:F8:66:6F:A5:78:26:04:7E:C1:0A:80
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6c:2f:d0:4e:bd:30:ca:09:6f:61:73:2a:78:12:4c:91:77:
32:e5:98:5e:b2:ea:7f:d3:e7:b8:77:f4:c6:53:c2:f6:06:97:
7b:15:01:21:97:7e:a4:b9:68:9c:ba:ab:ea:2e:90:30:ba:e9:
28:3f:2e:d3:f5:42:5e:6c:ed:98:0e:67:dc:a2:d0:06:02:4a:
49:7f:cb:ab:e3:8d:54:a5:83:62:5a:62:29:4f:22:b0:c0:f4:
3f:b1:c6:20:f4:40:b9:31:03:ff:db:16:63:4b:e1:5e:22:ac:
ab:73:97:a8:7b:b1:86:49:0f:97:95:6a:06:36:eb:24:98:02:
46:ef:26:38:46:3e:14:f7:aa:5c:bd:65:de:67:14:4e:98:30:
5a:f3:d6:8b:a8:a3:40:f0:fb:a8:c8:89:c0:d9:3b:0f:17:9e:
07:4b:18:c4:10:b2:76:bc:c9:04:4e:ad:37:50:83:aa:78:28:
6d:ae:10:59:d4:ea:e5:dd:e5:b6:e6:9f:b3:01:8b:a1:6c:20:
a9:4c:e2:90:b2:a5:40:2f:c4:75:ef:00:de:cc:dc:ca:6f:8f:
17:0d:60:40:45:d4:a3:25:13:92:c1:c4:c3:25:82:d8:37:e1:
e7:b1:e5:c8:6e:1d:bb:0e:1e:7b:a7:4b:86:f5:f1:ae:68:28:
97:b4:38:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:28 2025 by rpki-client