Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier: Yqff6NSUyu2pzE1kcnoMGMkZjkrgBJ60z811LQgP1nQ=
Subject key identifier: D9:45:B1:A4:0F:15:DC:A1:1A:A4:2B:CF:73:DD:C4:5D:0D:75:5F:1C
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial: 0197B8210AF75A49E3A377A2F28E08A09170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number: 0840
Signing time: Sat 28 Jun 2025 20:01:02 +0000
Manifest this update: Sat 28 Jun 2025 20:01:02 +0000
Manifest next update: Sun 29 Jun 2025 20:01:02 +0000
Files and hashes: 1: 7NcD3v3bTwDr9ocN3-x63vupO1g.roa (hash: HvV0nfI75827YQCzKbYVEWTCzA0c8O1WIDzuDKlaH5w=)
2: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: OvQjFg7ic3nqNGf3m4sOB7TVEKYIvECWAHNTqaCTPYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:0a:f7:5a:49:e3:a3:77:a2:f2:8e:08:a0:91:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
Validity
Not Before: Jun 28 20:01:02 2025 GMT
Not After : Jun 29 20:01:02 2025 GMT
Subject: CN=d945b1a40f15dca11aa42bcf73ddc45d0d755f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:ab:eb:9d:66:9a:dd:9b:86:4e:b0:84:b6:
56:5e:b3:34:90:c8:cd:d6:18:9f:4b:a4:83:ba:e7:
53:ab:4d:d0:38:6c:38:07:d8:08:d0:d5:bb:ac:6f:
84:84:0c:29:d7:43:63:40:b4:27:86:f6:47:d7:e7:
1e:93:0d:6a:4d:71:ae:07:b1:99:c7:e9:91:1f:c6:
43:73:02:7d:45:a8:21:2c:c2:59:ed:a0:10:86:b3:
d4:f2:f3:12:68:6e:e0:81:a4:a4:4a:ea:e7:67:73:
bd:e6:68:20:2a:ba:9a:c2:be:26:a1:dd:d0:a6:ea:
e8:b9:9f:a5:2d:d1:4c:9e:41:cf:a8:eb:7f:53:a8:
f2:cb:09:1d:32:0a:1e:f7:d9:6b:05:71:15:35:2b:
a4:11:b5:8e:52:86:20:e1:4a:31:5b:e9:26:d4:1f:
72:c7:5a:ff:a4:3c:fb:1a:ca:5d:c0:e4:31:b0:65:
25:50:40:bb:80:f7:44:bb:f0:02:02:53:85:3f:d5:
ed:b5:38:f0:79:c2:b7:16:e1:f7:6c:90:1b:98:68:
f0:c4:18:19:45:50:d7:27:f2:44:56:82:b2:81:3e:
c7:d5:a8:b1:3f:16:01:a5:74:8e:33:0d:28:7f:38:
02:51:d4:86:13:1f:39:4b:92:0c:e5:4e:f7:90:03:
cd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:45:B1:A4:0F:15:DC:A1:1A:A4:2B:CF:73:DD:C4:5D:0D:75:5F:1C
X509v3 Authority Key Identifier:
keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:71:d9:a5:bc:a1:3e:03:10:c4:c2:9c:e8:b1:f4:99:5f:6a:
ff:02:ae:f0:08:23:ee:d9:39:8a:e9:72:d5:ac:3a:ae:d8:e3:
89:9a:96:d1:c9:60:3b:2a:c4:52:1d:8d:2f:b9:66:d6:b9:c0:
d5:20:a7:0c:fa:e5:20:b6:8a:bf:33:67:66:70:88:03:46:2d:
47:99:d1:07:05:2a:ac:bb:03:45:a0:5d:17:ee:dd:16:ed:a6:
24:fc:e1:16:50:e2:fa:24:aa:da:bd:33:1a:f9:fd:4a:67:2b:
9b:ee:13:20:11:f5:eb:85:cc:d5:c4:b9:b5:fd:34:96:d5:bd:
40:fb:2d:e9:40:f0:ff:12:eb:bd:1b:89:2e:9c:bf:93:a7:4b:
80:cb:8e:84:88:64:75:2d:44:28:df:c5:62:7b:34:e5:74:6e:
27:ee:3d:61:c8:45:61:5c:31:8d:ae:13:37:19:74:97:53:92:
e0:88:8c:b3:f0:d3:7d:77:f4:ab:69:8e:5c:32:8a:11:1a:77:
f6:b9:5b:96:72:a9:bd:58:ea:8a:d8:56:75:47:3d:11:61:6c:
4a:8e:ad:20:eb:4d:9e:2f:d4:c7:d4:00:8d:d5:d9:6b:60:d4:
f2:92:39:16:04:b4:d9:39:fc:57:c0:4c:e0:84:83:ba:f4:72:
2e:fa:38:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:00 2025 by rpki-client