Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: Z3j0BFmB25+bYrwPdIObXw0GasKeZPuR7FWrlI5VuHc=
Subject key identifier: 69:B1:71:C4:6D:2D:69:00:A4:9B:41:2D:52:EE:BF:A0:61:0C:AE:42
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 0199FB7CD474061E095E58D89EF478B83AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 14F9
Signing time: Sun 19 Oct 2025 08:01:26 +0000
Manifest this update: Sun 19 Oct 2025 08:01:26 +0000
Manifest next update: Mon 20 Oct 2025 08:01:26 +0000
Files and hashes: 1: 1-n1FQJdtrmSwdnekLdBoJCXaZLE.roa (hash: vl5yvgIUqNuSQTIxMaS41AEZa6z2Ung/hJMgS4H/xOQ=)
2: KUPJ1lDWM9H_O_nug1XhCm8CDY0.roa (hash: N5MTKqEvC4tpTv0nenMYPQJAtm9LjBH+zL/o+EsRhto=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: nDdZQUvxlyclLBBnyO4/VEgyuLygb5eHQ6pVNEScXfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d4:74:06:1e:09:5e:58:d8:9e:f4:78:b8:3a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Oct 19 08:01:26 2025 GMT
Not After : Oct 20 08:01:26 2025 GMT
Subject: CN=69b171c46d2d6900a49b412d52eebfa0610cae42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d0:88:f7:15:92:84:95:d3:fa:92:67:08:7f:
c3:e1:f4:16:05:84:d5:65:1b:ee:bb:ee:84:e4:d5:
8b:02:47:9d:5b:42:68:44:95:7d:16:6d:38:de:83:
57:f7:6e:c8:ff:a9:c9:e7:27:93:fd:dd:5b:71:52:
a5:f8:e6:1a:01:8d:1b:14:c7:1e:a0:8e:f4:ef:10:
83:2b:04:2a:b6:42:6c:35:07:ec:55:f0:8e:8b:14:
e0:47:56:0a:ec:af:d0:b2:5c:aa:8e:64:17:b8:42:
11:36:47:6f:c2:9f:e3:26:16:ce:7c:55:f8:90:75:
a6:bd:fc:3d:db:25:eb:06:f3:39:9b:ef:8a:4c:db:
f9:28:f1:cf:4b:48:51:a1:1f:d7:2a:b3:65:42:ec:
d6:c2:aa:41:7d:03:ef:fe:f9:85:0b:d5:42:35:38:
15:aa:07:ca:f6:51:ef:7d:54:9a:29:37:07:eb:62:
25:22:b0:4f:67:d9:62:fa:87:5f:9e:fe:a4:c6:d9:
10:c6:49:aa:f7:37:46:62:ee:08:77:98:12:2c:81:
d9:90:a3:62:af:33:c4:03:36:ce:c5:8d:b9:69:d9:
d9:09:9e:be:90:00:1a:63:82:a1:53:ca:0c:d8:e4:
fb:76:2b:b5:d6:31:01:5f:80:1c:e0:48:c0:9c:14:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B1:71:C4:6D:2D:69:00:A4:9B:41:2D:52:EE:BF:A0:61:0C:AE:42
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:99:dc:35:ca:b0:68:1c:cb:b3:21:91:a4:a8:c0:be:62:d9:
d4:05:65:78:01:1d:79:66:2f:91:31:8b:5c:18:98:cb:82:e5:
8a:df:d8:e4:4a:f4:04:83:48:0a:1e:e9:ce:cd:47:b0:6b:49:
66:83:83:3a:bc:13:d3:9d:22:76:ce:d0:84:42:52:57:9e:12:
c3:6c:55:40:77:aa:58:8c:f1:ba:86:9f:6d:76:73:50:87:c3:
67:4a:d0:04:93:c8:3f:5b:d1:50:1a:b4:4d:5b:6a:62:08:dd:
1f:22:94:3a:8f:8c:e9:d3:cc:b5:59:c6:c4:24:93:10:61:b3:
cd:5c:c7:4b:b9:96:86:73:38:55:1b:5b:ab:c9:e3:13:0d:b5:
97:51:66:d5:ce:26:fe:4d:f9:ab:4b:c6:d3:8f:f9:a1:80:86:
7c:28:7c:e6:75:50:1a:54:61:13:dd:0f:3b:1c:ce:c8:f5:79:
fc:e4:fd:3c:51:3a:44:cb:36:5f:98:52:6f:d6:6c:ee:25:b8:
a0:04:d6:86:71:27:94:95:62:9f:24:78:bb:58:21:31:4f:fb:
8b:81:4e:c8:71:a8:00:84:1e:58:54:ed:e1:4a:42:5c:94:65:
05:63:9c:f8:17:7d:b9:55:7a:49:ea:fd:3c:98:82:a0:68:69:
50:48:56:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:45 2025 by rpki-client