Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
File: gnfY854_j7Zjj3CDq58WwEfQ02Q.mft (raw, json)
Hash identifier: cSQvcQluX5YWg83oZ1HzcQujWWzfRIHcXUjxjrsaYzY=
Subject key identifier: 95:1B:5C:23:A9:20:2B:FB:0E:BC:4C:81:8F:96:AF:02:98:12:38:15
Authority key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
Certificate issuer: /CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Certificate serial: 0198D5BBBF29E9629F7D183FDA6C997926A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
Manifest number: 1129
Signing time: Sat 23 Aug 2025 07:01:47 +0000
Manifest this update: Sat 23 Aug 2025 07:01:47 +0000
Manifest next update: Sun 24 Aug 2025 07:01:47 +0000
Files and hashes: 1: 9flLcmlhEqT9lrkmfyvcqwcZaPE.roa (hash: s8DMn0SNfjEZl7A0rydWGLHujZ1siiQiNSjrpdgAWxo=)
2: gnfY854_j7Zjj3CDq58WwEfQ02Q.crl (hash: dJlMu5Hf+PHJeZNtuwryqm1/IH/t+DsX4tsgLUFcdVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:bf:29:e9:62:9f:7d:18:3f:da:6c:99:79:26:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Validity
Not Before: Aug 23 07:01:47 2025 GMT
Not After : Aug 24 07:01:47 2025 GMT
Subject: CN=951b5c23a9202bfb0ebc4c818f96af0298123815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:7b:b1:b9:02:b3:8f:9e:03:e8:47:5c:c9:
39:93:76:29:c5:47:1c:a9:8e:89:74:39:c0:9f:9e:
11:cd:d4:ef:1b:95:f9:90:08:1a:4c:0b:7e:92:48:
1d:24:af:03:39:e9:4d:f4:7c:25:32:36:31:c0:7e:
e2:4e:2e:c0:86:18:e8:02:3d:7e:2a:2c:fc:c5:b6:
5e:33:9e:e6:50:18:35:80:ef:72:e8:5f:84:f4:80:
f1:1e:42:57:12:0f:fb:ff:47:56:25:de:63:d2:f8:
5b:7b:0e:35:f7:3e:e3:78:a4:ea:01:17:da:f9:88:
88:b4:16:ea:39:f4:fd:3d:01:f3:cd:0f:33:c9:75:
eb:d3:57:74:c2:34:11:59:93:08:59:aa:8d:e2:2b:
3d:bd:3a:fc:ce:35:cf:82:3c:c6:03:f8:d6:9c:97:
c8:44:d3:3f:19:01:75:6f:80:cb:8b:01:c2:08:ec:
83:f2:36:2c:2f:ed:67:ad:c2:be:00:b9:ed:7c:34:
30:e9:0e:08:c8:5c:dd:d6:2e:ef:37:2a:7e:d8:49:
0e:7e:3f:b0:53:7b:ea:97:1d:b7:ee:16:5b:10:dd:
f5:78:1b:19:19:19:9c:3d:4f:0f:38:fe:b9:50:d9:
cd:9b:38:ac:5b:e2:bb:d7:89:58:47:19:1e:6a:24:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1B:5C:23:A9:20:2B:FB:0E:BC:4C:81:8F:96:AF:02:98:12:38:15
X509v3 Authority Key Identifier:
keyid:82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:42:cf:16:c0:21:a9:b1:17:fe:ff:81:fb:83:3e:72:b7:d3:
0c:b7:2d:c6:af:29:80:fc:a8:96:1c:62:b7:fc:92:44:9a:84:
99:05:78:4b:f0:79:93:f0:4f:32:a7:82:14:d0:09:ec:e6:33:
44:b1:3b:73:e6:04:b2:c0:37:3a:21:5b:da:ed:bd:bd:e0:38:
c4:cb:af:8b:59:5c:b1:7d:57:25:5f:b2:71:eb:8d:47:89:a6:
fb:32:39:16:e3:ee:ed:08:96:67:e7:ee:c8:e7:49:ce:0e:b6:
7a:ae:70:9d:56:8c:b4:d1:3c:c2:94:ce:b7:02:de:d1:e8:6b:
3e:f3:23:10:7b:f5:4a:7c:e6:44:2f:51:9b:70:43:c7:d2:65:
48:0b:9a:f2:9a:ec:d2:e2:f9:be:6e:9b:9d:16:0d:31:bb:e1:
0c:f8:d4:2d:dd:1b:6a:94:97:d1:99:88:8d:7d:fa:d5:0a:4c:
db:50:a2:e7:77:4a:43:d1:00:94:1a:df:85:74:83:de:81:de:
91:1f:ad:b0:1f:48:14:f6:fb:18:47:b0:49:9a:51:20:31:6e:
1b:32:16:3b:62:1b:5b:89:1b:1c:c8:87:11:54:e6:73:01:02:
1d:f8:e0:44:08:6e:1e:f0:b2:17:ce:db:c6:ee:75:11:c4:36:
9e:3a:2f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:48 2025 by rpki-client