Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
File: gCNZN6302riSXVgEWjNxgWyYBTE.mft (raw, json)
Hash identifier: TFZAcNOGJSSVyfAhE8OLYZM/wMZ0KaByXrab5gKEOTY=
Subject key identifier: 9C:49:89:07:AB:86:CC:2D:A7:B2:9B:92:9E:AF:9E:39:0F:20:EF:B6
Authority key identifier: 80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31
Certificate issuer: /CN=80235937adf4dab8925d58045a3371816c980531
Certificate serial: 0199FD6ADEDDE40DB80FBD0982BE8DF4CDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
Manifest number: 08C7
Signing time: Sun 19 Oct 2025 17:01:03 +0000
Manifest this update: Sun 19 Oct 2025 17:01:03 +0000
Manifest next update: Mon 20 Oct 2025 17:01:03 +0000
Files and hashes: 1: gCNZN6302riSXVgEWjNxgWyYBTE.crl (hash: l/3RFb7eDf5OxqWfMW8P1BvAxwEswZsgO8Fe3dLA6GA=)
2: xGfGnzNZn4HUZigqa5Ok1nkmfsE.roa (hash: XpFkMfmlY0imCtGtKPRW/lTcymGc5XbfGzDPyUvzl8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:de:dd:e4:0d:b8:0f:bd:09:82:be:8d:f4:cd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80235937adf4dab8925d58045a3371816c980531
Validity
Not Before: Oct 19 17:01:03 2025 GMT
Not After : Oct 20 17:01:03 2025 GMT
Subject: CN=9c498907ab86cc2da7b29b929eaf9e390f20efb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:75:d1:4b:33:50:7d:35:b1:a8:d6:ae:88:f9:
36:3b:95:5a:4c:8b:96:fa:cf:4d:17:e2:78:c6:93:
86:70:06:ff:60:5f:74:28:55:53:ce:f5:ef:dc:f5:
a8:6d:ba:16:7f:c0:12:e8:cd:85:b2:54:0c:91:aa:
b6:4b:e4:a8:69:91:73:bb:0d:10:48:71:58:b5:57:
b0:11:d5:9f:ba:26:7a:68:50:7c:3f:54:55:72:b2:
8c:b8:c6:bb:eb:16:38:e9:b9:6e:99:f3:6f:f5:6b:
c1:25:cb:0e:63:cb:05:f8:0f:82:da:b3:27:29:5a:
66:7b:32:e6:98:95:0d:6b:66:86:ca:1b:fd:cb:21:
a3:4d:0a:31:e4:8f:17:95:c3:47:94:87:e8:c9:16:
a6:b4:5b:a9:f8:5c:4c:e8:37:eb:87:ed:ec:9b:45:
35:4f:90:22:3e:7b:aa:51:67:2e:9b:5e:f6:dd:7f:
99:ad:9a:2f:84:8b:a9:d4:bd:36:0b:07:76:da:e0:
92:a4:2e:7e:74:b2:01:5a:f9:9e:9e:2b:fa:09:99:
fa:aa:42:52:e0:07:37:21:e4:3f:40:9b:bd:21:94:
57:0a:f5:3c:d9:ce:82:4e:00:2a:e2:85:d2:93:e5:
5b:64:04:77:3b:e0:f4:11:d9:41:6f:ab:16:a6:07:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:49:89:07:AB:86:CC:2D:A7:B2:9B:92:9E:AF:9E:39:0F:20:EF:B6
X509v3 Authority Key Identifier:
keyid:80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4f:99:92:ce:7f:23:95:32:48:0a:1e:06:32:e0:d1:ba:88:
b8:b5:04:1d:4a:ef:36:2b:31:fa:15:79:11:a6:70:3e:03:d1:
c0:cb:47:e7:9b:67:49:2e:43:c2:a8:26:7e:9b:55:64:00:d5:
8e:4f:7f:84:42:f2:af:06:4b:50:bb:48:25:e5:e9:62:8c:ab:
ee:e5:2e:9c:51:44:1d:e6:bd:59:6c:9d:6b:af:6e:a2:54:c0:
31:f9:a6:4e:df:e8:86:dd:40:a2:9d:8e:14:6e:0f:22:84:03:
20:28:0f:6e:8f:e8:75:8c:14:a9:5a:ca:43:c8:ff:27:7e:ad:
32:90:b7:cb:89:1b:39:79:d9:02:c9:83:82:ce:a9:c0:87:74:
aa:bb:f0:c6:0b:d7:07:87:39:fe:12:6a:56:2c:32:c3:4a:be:
1a:53:23:20:71:1a:45:a9:a3:6d:da:f4:a5:1a:b9:82:1c:d2:
39:6f:ab:93:64:38:fb:a1:d3:b3:13:e7:64:fe:16:e8:bc:53:
34:9b:03:50:f0:22:8d:b2:ec:f9:58:c5:ff:79:02:e7:bd:8a:
d3:80:fe:dc:f7:39:a6:34:54:5b:68:a5:2c:df:f4:64:71:15:
11:c4:62:3b:88:35:8f:db:59:51:8b:70:d5:5d:99:0b:95:2c:
59:a6:27:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:44 2025 by rpki-client