Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: OSvOuERcbFwIxEBW9zTGe5d9zzZD46eeKISoST19ORI=
Subject key identifier: CC:AD:C5:C3:E7:04:37:5B:AE:A9:25:AB:33:6E:F3:C9:EB:AE:7E:F0
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 0198D4E00479D3931C3B8602A903AB37A61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:47 +0000
Manifest this update: Sat 23 Aug 2025 03:01:47 +0000
Manifest next update: Sun 24 Aug 2025 03:01:47 +0000
Files and hashes: 1: 3BCTdWPdAwRCl8UX_2fwNUPfXDk.roa (hash: auwwYg2jmDefujiM9dhtcg3qGUezv1eAv9OXRPuNl5Q=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: y0gWduJM1YlRpxCMVdfx1XK3yyyXMNUk4C5jpI+6f+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:04:79:d3:93:1c:3b:86:02:a9:03:ab:37:a6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Aug 23 03:01:47 2025 GMT
Not After : Aug 24 03:01:47 2025 GMT
Subject: CN=ccadc5c3e704375baea925ab336ef3c9ebae7ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:0a:a2:f1:76:b0:ec:b1:3a:e5:65:b2:2c:
b2:c2:ce:46:d2:77:7a:1a:a4:3d:55:47:67:42:5e:
06:33:1c:a5:ac:f0:8b:82:38:d1:ba:6d:c3:b7:3c:
16:8e:16:f8:47:5f:fe:4f:11:6e:74:cc:fc:66:92:
d8:75:a5:19:1f:1d:87:54:1f:ee:33:30:0d:df:2c:
b4:0d:43:a6:5a:f3:80:b4:31:07:2a:4a:2a:0e:c1:
b5:68:f9:ac:92:9c:04:cd:6a:28:a6:fb:c0:2a:c1:
e7:c8:19:09:f1:af:25:3e:b2:2f:b2:4d:07:99:7b:
ff:44:91:62:6a:4a:03:84:d9:a8:32:29:8e:4f:bc:
2d:23:10:1c:b0:80:9a:18:e4:fd:07:2a:f2:f6:55:
c5:6b:9a:e5:b6:b5:a1:a7:15:56:04:0b:e4:5f:df:
55:7f:68:56:c2:c4:18:8a:6c:92:36:77:34:10:d6:
d3:b8:71:48:61:08:27:df:1d:5b:ad:32:e6:10:73:
2d:ec:d1:82:64:ae:b0:56:4c:7f:d5:ef:0f:ef:27:
f2:1c:5a:2e:42:70:e5:42:f3:fd:8d:fd:44:06:4e:
5e:fe:83:02:61:13:dd:90:8e:3d:c7:7e:35:c5:af:
f9:c9:92:e8:3e:b8:6c:e1:c9:3b:a6:d2:20:18:7d:
3c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AD:C5:C3:E7:04:37:5B:AE:A9:25:AB:33:6E:F3:C9:EB:AE:7E:F0
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:47:88:8e:9a:8e:30:73:98:c7:25:a9:0e:d6:27:1f:46:3a:
8a:5c:2c:fc:92:88:f1:c2:cf:cf:ba:a0:9f:7d:2a:42:b7:81:
da:11:5b:22:96:fb:c0:c3:ec:df:5c:ab:d0:ee:2f:ec:c1:d2:
dd:74:f1:05:6e:4f:40:26:ec:b8:01:6c:71:55:b0:b8:ff:60:
fe:9f:d4:af:a7:10:af:f6:59:9b:6a:40:3c:34:2d:3c:61:e7:
19:e4:00:32:9b:7c:d2:39:65:aa:12:ea:92:ef:27:28:0c:f3:
3b:ea:3b:91:73:0e:cf:c7:ad:b0:64:38:8c:64:24:01:a2:ed:
11:83:f5:f5:3f:84:63:1d:96:6d:d2:fc:95:d5:e4:5f:1d:0a:
a8:f9:e2:b2:fa:43:13:c3:36:a5:cc:be:7f:dd:b5:55:6a:45:
c4:33:b4:bf:ba:e0:f1:f2:3b:5a:fb:18:ed:b1:37:f2:09:22:
82:a7:86:4f:61:31:60:1f:f3:e7:6d:d1:f5:5e:d1:88:2b:47:
99:3c:06:9e:5e:4f:c9:86:10:71:b7:86:f9:a3:77:fd:67:24:
d7:64:a8:35:d7:8a:8f:61:06:7a:47:31:81:f4:20:71:95:61:
55:be:f6:d1:04:3e:4c:5d:0d:37:89:66:da:e9:cd:4c:74:7c:
8f:6e:43:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:30 2025 by rpki-client