Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
File: gynJE4dY3-i6EjXuDsfZtlifSyc.mft (raw, json)
Hash identifier: kcyFqLJF4xCNnWvQGXvS5VOWboeuqWN2uhAzaFHSRkE=
Subject key identifier: 8F:D6:9A:CE:57:57:BA:77:C5:41:2B:B7:14:82:85:96:E3:8F:CE:9A
Authority key identifier: 83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27
Certificate issuer: /CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27
Certificate serial: 019A0147FAE4A47DE4441ACE6FCFF5F74ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
Manifest number: 06CF
Signing time: Mon 20 Oct 2025 11:01:25 +0000
Manifest this update: Mon 20 Oct 2025 11:01:25 +0000
Manifest next update: Tue 21 Oct 2025 11:01:25 +0000
Files and hashes: 1: NEtfj8eymwkFpDG7BP2gOv3cbAs.roa (hash: J8/tby/ZFT8OsdOz/hNiW3bEdXZu2ngXmdS3bjVWlAA=)
2: gynJE4dY3-i6EjXuDsfZtlifSyc.crl (hash: 7xf95+j4+C2YS+6ShslKPGwIpt+D7cA9/f8hScsqIl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:fa:e4:a4:7d:e4:44:1a:ce:6f:cf:f5:f7:4a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27
Validity
Not Before: Oct 20 11:01:25 2025 GMT
Not After : Oct 21 11:01:25 2025 GMT
Subject: CN=8fd69ace5757ba77c5412bb714828596e38fce9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:e6:5d:26:87:95:64:85:7d:ac:03:37:76:
48:41:3f:99:2d:f2:3d:01:15:0d:b2:5b:81:d4:56:
eb:1a:ff:c7:7e:a2:d9:95:12:43:39:32:28:d6:a0:
35:ce:62:19:45:2a:e3:18:4f:51:12:6a:01:af:0c:
e9:73:79:d8:76:8c:a3:99:69:d0:16:8d:5e:c7:25:
d7:40:b0:ea:28:f0:e8:db:f5:a6:7a:18:ca:f5:68:
fe:1a:a0:63:e2:be:da:4b:8f:cb:0b:55:0f:33:aa:
4a:54:3c:2e:66:e8:67:c2:fd:c8:72:72:97:0e:22:
98:b6:9d:dd:6e:e8:b9:23:b7:7d:24:d9:e8:c4:d3:
6d:bc:f1:7a:b9:7d:3c:ed:47:cf:c6:40:f1:5e:f4:
41:c7:27:6f:3a:e9:48:20:7a:7a:91:8a:ca:74:27:
a5:c6:fa:03:fe:ce:f2:35:fd:0a:fd:56:f9:c9:27:
b1:27:73:5b:9b:ba:54:9f:82:ca:47:76:95:4f:1a:
c9:39:4f:2a:d0:fe:56:4d:dc:5c:8e:a2:fa:81:9e:
ef:1d:83:7d:6d:6c:26:b8:35:a2:e7:f7:ce:f6:a0:
b0:91:69:b2:c1:00:97:e3:79:fe:df:94:c9:74:00:
00:d8:38:a4:de:98:5f:94:2c:b8:2a:d3:c8:81:2c:
c9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D6:9A:CE:57:57:BA:77:C5:41:2B:B7:14:82:85:96:E3:8F:CE:9A
X509v3 Authority Key Identifier:
keyid:83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3f:96:93:c1:ae:e7:52:ce:86:e9:8a:a0:d8:ca:97:2c:65:
61:16:2e:f2:57:9a:84:22:42:2c:bb:fb:7e:a4:f8:02:c2:74:
1d:de:6a:83:3f:b9:03:0b:9a:c2:28:c5:0b:26:6b:26:76:57:
9b:f3:ce:74:66:4d:b8:4f:78:c8:f4:8e:b8:67:7b:6c:b7:20:
70:0d:b8:df:bd:78:0a:95:85:12:68:0a:23:d8:1f:b7:a4:92:
39:2c:65:fe:4c:7b:a5:8d:8d:4a:c6:60:af:08:69:c5:76:99:
33:6a:20:92:cb:28:2f:4f:ae:ca:95:88:c8:11:85:09:87:ed:
bf:0b:f3:d9:62:63:a1:38:69:22:d5:96:81:13:b1:2a:86:4f:
c2:2f:30:38:f4:49:56:5f:57:5c:e0:8d:11:9c:3f:46:1d:34:
db:78:55:f7:15:2e:6f:d6:e7:34:b0:05:fc:de:03:a9:98:01:
60:62:dd:00:a1:4f:09:f3:bb:04:0f:13:73:60:97:69:31:4b:
05:80:6f:86:26:f4:22:bc:9b:67:4a:2a:ac:89:44:0c:d2:37:
38:1a:30:cb:82:bc:43:95:e5:08:c0:3c:c3:98:b5:a3:3c:f8:
a8:c1:10:10:35:8b:50:49:72:f1:1e:35:46:5b:0d:10:6f:a1:
df:a8:d5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:17 2025 by rpki-client