Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier: wiC+G4JVgsOsu5GVPcrNZjJR3+N7Zr3y2hHgLNEo6cQ=
Subject key identifier: 9A:A6:5B:EE:71:7B:57:02:18:A7:CC:71:FA:E6:F9:40:34:B3:83:E8
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial: 0198D404F16CD73667F21FC069EAE2F9C920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number: 08D3
Signing time: Fri 22 Aug 2025 23:02:30 +0000
Manifest this update: Fri 22 Aug 2025 23:02:30 +0000
Manifest next update: Sat 23 Aug 2025 23:02:30 +0000
Files and hashes: 1: 7NcD3v3bTwDr9ocN3-x63vupO1g.roa (hash: HvV0nfI75827YQCzKbYVEWTCzA0c8O1WIDzuDKlaH5w=)
2: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: iddi58CNdwDJmxHl8D+jFmK7r9kQ3rHSCI4CI9Vpi5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:f1:6c:d7:36:67:f2:1f:c0:69:ea:e2:f9:c9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
Validity
Not Before: Aug 22 23:02:30 2025 GMT
Not After : Aug 23 23:02:30 2025 GMT
Subject: CN=9aa65bee717b570218a7cc71fae6f94034b383e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:74:4b:5d:d0:09:e6:7d:47:47:1b:df:1b:
17:59:45:ed:0f:14:12:12:d7:bc:6d:78:34:a9:c7:
e0:2c:81:4f:50:cf:b8:79:97:a9:43:cd:1f:00:64:
e2:c3:f9:63:43:09:8d:67:58:9d:58:09:08:c3:d1:
b8:74:cd:70:68:37:28:4c:41:7c:8e:91:af:15:33:
f6:15:25:24:e2:d2:6f:98:63:9d:39:81:f9:ad:6e:
39:79:2e:77:14:8f:db:ad:99:6a:ee:27:55:b2:ce:
65:40:45:1a:27:97:91:49:57:4c:de:5e:58:04:93:
c3:e8:ce:42:d5:4b:78:3b:da:42:5a:55:af:a0:2f:
be:62:48:8a:5f:d6:c7:f7:42:92:4d:44:ae:8c:c4:
cf:95:5c:e2:47:fd:90:51:78:a7:6f:45:3a:64:00:
5f:f0:8d:a0:f0:37:48:db:c5:3d:0b:72:73:b4:8b:
88:bc:ec:a4:09:bf:21:00:bf:89:ed:21:52:6e:53:
8b:9c:90:b7:32:a8:78:1c:64:a4:cf:97:24:31:16:
db:52:52:93:0f:66:95:8b:00:b5:f3:ce:aa:8c:42:
7b:3d:f1:ce:af:79:87:de:db:e3:4b:41:37:35:d8:
38:64:3b:db:18:ba:90:e3:7d:e1:4c:c1:0e:a6:b3:
a2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A6:5B:EE:71:7B:57:02:18:A7:CC:71:FA:E6:F9:40:34:B3:83:E8
X509v3 Authority Key Identifier:
keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f7:b4:81:b0:60:4c:32:2e:ba:91:0c:5d:62:00:c5:55:d7:
b0:43:3c:e5:b3:17:01:90:cb:2f:ff:ce:90:f4:65:63:5e:e1:
8c:2e:2f:b0:c3:3e:a2:46:0e:ed:d7:a9:9f:a2:a4:0d:d8:bb:
72:88:3d:87:97:de:91:8c:84:48:dd:00:48:e1:2d:32:ba:10:
44:27:50:91:9b:9e:c0:4a:b1:a5:db:ea:a0:f0:11:60:d1:90:
6c:f8:dd:34:5c:db:2c:cc:14:a0:9a:2b:ae:01:6e:53:a1:8f:
11:7c:c8:d1:6e:ed:79:7e:1e:49:8c:57:e9:15:10:8f:03:3d:
ed:c1:25:1e:07:0c:1e:a8:d2:e2:af:b8:bd:21:97:2a:ac:b0:
b8:e8:67:7b:01:bd:bc:42:e1:08:4e:28:c8:0a:c4:f4:aa:64:
a5:ad:34:b7:4e:31:ed:0f:74:6d:12:c5:95:14:6a:46:25:40:
04:e5:cf:5b:32:f6:e4:0d:8e:3d:d7:d8:84:83:51:dc:c1:39:
31:76:6a:24:10:89:fe:82:f1:bc:66:ae:a8:29:49:e0:48:e8:
70:b6:12:83:0c:2b:2d:fc:d0:f8:60:83:ce:06:73:5f:76:86:
7b:34:a2:35:91:10:d1:fa:0a:26:f9:b7:bc:18:43:19:d9:9d:
82:cc:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:45 2025 by rpki-client