Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier: YxaZ3F4uMr4fYwnFVKTy4oIMWnmiaGYOaZdqbyEPfTk=
Subject key identifier: DB:CB:7A:09:B2:D1:80:64:F7:C1:50:4B:5D:62:D3:8E:C2:E0:A0:3F
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial: 0199FD33EF9D2C31FFF2649CA17AB2E805DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number: 096D
Signing time: Sun 19 Oct 2025 16:01:03 +0000
Manifest this update: Sun 19 Oct 2025 16:01:03 +0000
Manifest next update: Mon 20 Oct 2025 16:01:03 +0000
Files and hashes: 1: 7NcD3v3bTwDr9ocN3-x63vupO1g.roa (hash: HvV0nfI75827YQCzKbYVEWTCzA0c8O1WIDzuDKlaH5w=)
2: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: ZhVDPaBozUh37OgQK4rB6J5hHAQD0v14O6hXMBjjfhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ef:9d:2c:31:ff:f2:64:9c:a1:7a:b2:e8:05:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
Validity
Not Before: Oct 19 16:01:03 2025 GMT
Not After : Oct 20 16:01:03 2025 GMT
Subject: CN=dbcb7a09b2d18064f7c1504b5d62d38ec2e0a03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7f:e5:cf:c5:d9:fd:29:ac:9d:93:c0:f2:b2:
eb:30:3b:e6:29:91:e0:ae:34:52:c4:e3:03:a9:85:
3c:d6:1d:8c:6d:b8:70:ac:d4:b5:6f:de:10:a7:8f:
33:be:a9:47:95:62:ef:e1:19:d1:e6:c5:0f:f3:55:
d2:67:9e:9e:c8:41:e3:9d:42:cf:e1:9c:ae:81:80:
a6:21:21:cc:94:8a:b2:aa:f5:de:8e:e9:79:38:bc:
b0:78:f5:1a:e0:e4:3b:7f:6a:0b:93:dd:45:6d:f5:
56:7f:fb:6f:54:05:7d:2d:3e:e2:8c:08:aa:11:8e:
f7:58:e0:21:2b:6e:7d:98:f8:0a:58:9c:6e:6a:63:
f5:67:2a:43:a7:a9:6b:b9:eb:35:8e:64:d0:f0:a4:
12:78:28:5f:dd:8d:fd:64:ee:78:b7:ea:01:f2:86:
72:8e:79:cb:6e:bc:dc:c2:3a:bb:3a:6a:c5:c7:88:
85:24:35:2b:25:e5:32:6f:f7:0d:76:84:12:23:75:
9d:7f:5f:4f:0f:14:74:74:a8:b3:b6:6d:a7:53:c9:
e1:0b:1d:04:e7:9f:27:65:e7:cf:b9:a7:4c:e7:25:
e8:15:26:8c:4f:d8:4c:aa:dc:09:e4:73:09:d3:d3:
42:43:71:3f:7e:43:f9:ff:cf:dc:22:db:1f:55:0e:
e6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CB:7A:09:B2:D1:80:64:F7:C1:50:4B:5D:62:D3:8E:C2:E0:A0:3F
X509v3 Authority Key Identifier:
keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:75:e8:71:7e:c4:e2:2e:a9:af:28:ac:80:d8:cb:a2:ef:4d:
3a:0e:21:c3:7e:e8:fe:5d:4e:5f:68:e4:21:ec:9a:ce:58:82:
8b:82:08:32:bd:d7:22:de:a2:db:e5:f8:83:0d:f4:4c:94:ec:
c5:59:7f:cd:91:93:38:11:b3:ad:8a:a6:28:a4:e8:30:6f:d4:
7e:ae:8a:8f:bb:ca:29:13:87:24:44:1b:58:6e:57:20:c5:9d:
1e:89:cd:d0:ad:5e:b9:87:de:1e:7a:41:f0:07:4d:29:55:fe:
c5:9f:6e:53:20:9b:61:4e:cc:92:f0:51:fa:22:74:c2:65:db:
8b:75:37:83:54:bd:10:dd:35:aa:65:58:c7:63:d5:d8:f2:90:
c3:d1:3f:ae:5e:12:f0:53:0f:ff:11:97:03:5f:cc:32:b1:75:
17:b6:c4:4a:35:b1:8b:e1:ee:44:79:c4:24:12:f2:91:81:8e:
30:c9:94:cc:28:be:ef:82:96:de:ed:9d:fa:3a:b9:f2:90:bb:
bc:60:da:c7:dc:39:cc:01:50:b0:a9:29:6f:6f:22:e9:e9:f7:
eb:8d:48:b2:dc:e4:28:39:eb:1d:17:2e:c9:b7:6d:0e:1f:6e:
b2:d8:97:0e:16:d0:df:aa:17:2f:67:d2:78:9f:5c:58:b8:d0:
9d:cb:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:40 2025 by rpki-client