Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
File: gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft (raw, json)
Hash identifier: nrHzB9pMldjToNOnsn/cWx9RgkhOqDWY+sUdE35wiL0=
Subject key identifier: 23:8A:9B:7F:06:1F:77:B5:5B:48:DA:8F:17:B2:BB:F9:35:61:9D:5A
Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
Certificate issuer: /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Certificate serial: 0198D54DD8A6A92951E1F97582A0CC810815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:01:45 +0000
Manifest this update: Sat 23 Aug 2025 05:01:45 +0000
Manifest next update: Sun 24 Aug 2025 05:01:45 +0000
Files and hashes: 1: 1GcdqVYrNeFzAfzIvWc1uwT98aA.roa (hash: 4uQf4DSwbX7BKGTdoGDfjY+9K4u0Qbg5gbpIHJoyB/8=)
2: gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl (hash: sjy6aD8K7VcVt7GdaGgbyTqU0z7KWxftx6zoNkgLL6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d8:a6:a9:29:51:e1:f9:75:82:a0:cc:81:08:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Validity
Not Before: Aug 23 05:01:45 2025 GMT
Not After : Aug 24 05:01:45 2025 GMT
Subject: CN=238a9b7f061f77b55b48da8f17b2bbf935619d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:a9:9b:7f:25:0d:ac:bf:d5:81:9c:77:98:
87:f0:74:21:f7:dd:8b:f9:38:70:47:60:ae:ca:fa:
ff:85:0b:5c:0e:f0:5d:af:3f:f2:b6:5a:b2:e4:25:
b8:30:92:20:bb:a3:49:b6:d3:bd:d6:af:6e:c8:1d:
23:b5:65:43:e5:1f:a4:92:71:22:31:80:35:72:b0:
a6:dd:f6:b4:a1:c3:f7:48:5a:42:43:b8:72:42:dc:
65:c2:85:af:3b:55:e2:9a:9f:b4:34:57:b5:c4:85:
52:23:23:45:3b:8e:10:4d:c1:52:24:f1:d6:0b:1f:
60:0b:74:b4:b4:f5:02:ce:fd:31:bb:48:33:b5:20:
85:c2:9e:f7:3c:29:5a:c2:c9:e6:1c:fe:96:e5:8d:
2a:23:95:a5:17:e0:bd:9c:6d:82:2f:d9:8a:d2:7a:
24:96:c3:4e:fe:f6:6f:03:20:05:e4:5c:46:fd:2f:
62:a8:97:83:ff:39:6a:5f:96:c7:a9:97:44:9e:7d:
3e:28:66:23:36:67:70:66:08:26:32:0e:70:2c:9d:
ae:ac:fa:78:1f:4d:4a:3d:f2:d8:ea:3e:ab:f0:c9:
8f:e1:6f:50:f4:9c:85:f3:64:fc:bc:93:b5:f9:87:
a9:33:f2:da:38:af:ba:4b:15:db:97:0c:36:40:b3:
ca:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8A:9B:7F:06:1F:77:B5:5B:48:DA:8F:17:B2:BB:F9:35:61:9D:5A
X509v3 Authority Key Identifier:
keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e7:14:d6:69:fd:95:dd:10:b3:0b:3c:32:57:0d:59:45:59:
c1:98:ee:5d:77:e2:b5:95:87:37:67:d7:9e:64:62:8e:ff:4e:
1a:ac:fe:db:0f:cb:ec:93:2a:3c:b3:eb:90:52:ee:40:41:65:
0a:fe:cf:de:d2:92:75:f3:7f:5e:c1:84:22:df:cd:15:71:72:
dd:d5:94:32:59:59:0c:d3:79:bf:de:bc:ff:47:f8:b8:fc:5a:
94:56:76:01:e9:a6:38:fb:6f:87:b8:e0:78:e4:e4:d0:69:21:
fd:e2:d9:14:10:f1:d6:c4:91:9a:8c:e6:67:d6:d7:ad:05:bf:
83:40:5e:bd:84:52:21:99:4f:0a:1a:db:7f:ea:28:93:19:77:
a1:53:67:12:47:e7:19:b6:ad:1a:3a:e9:cf:bf:3a:f7:de:b8:
85:14:e5:61:18:a5:bb:d0:19:17:42:71:e5:03:b9:2c:f8:79:
8b:48:3a:38:55:35:23:fc:56:0e:02:2b:90:b3:dc:8b:7d:d6:
a7:f3:93:72:fc:53:0b:99:f1:e7:27:39:58:3b:1f:ca:2b:6c:
76:dd:d6:3d:3c:c9:9a:ee:24:60:87:48:35:73:4e:67:53:62:
28:14:27:42:80:ab:90:a8:17:d7:ca:74:c5:df:6b:71:e1:27:
d2:51:de:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:46 2025 by rpki-client