Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
File: GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft (raw, json)
Hash identifier: Gea5z3R1it4VK5vOZH03uDA2fmifjgHj7bC2tO0Iitc=
Subject key identifier: B9:3B:F7:CF:20:4E:AF:19:77:1D:A8:6D:8A:6B:68:8C:47:DA:DE:7A
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 0198D5BBCACC707897FC7D7CAF42078E2ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
Manifest number: 0709
Signing time: Sat 23 Aug 2025 07:01:50 +0000
Manifest this update: Sat 23 Aug 2025 07:01:50 +0000
Manifest next update: Sun 24 Aug 2025 07:01:50 +0000
Files and hashes: 1: GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl (hash: cpjrzZNF790mKP/ENwdUfCIX19g8HDSD9Gk8I0D8rHo=)
2: IoLDWpZjj6oD1gt6nT7kXI9BcpA.roa (hash: O3dblJBCfC0orY3rYiRzkRU6RkAUIy5FR+b3VhRRXis=)
3: eiwsx2FFwfE5TE_nY3h0_knWuU4.roa (hash: CVJTqVDV13ZF8iBRU7zgKf0ItAWnGVc70AQTYAE3fwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ca:cc:70:78:97:fc:7d:7c:af:42:07:8e:2a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Aug 23 07:01:50 2025 GMT
Not After : Aug 24 07:01:50 2025 GMT
Subject: CN=b93bf7cf204eaf19771da86d8a6b688c47dade7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:e7:e0:89:11:12:5f:3d:57:db:ab:15:4b:
12:56:78:29:a3:f1:e7:0b:32:af:ac:6d:3f:5d:72:
80:51:e2:49:3b:73:65:af:7f:81:16:3d:6a:5b:0a:
8d:92:73:c3:cc:37:49:78:48:d4:f5:a2:28:ea:79:
78:96:fc:6e:d8:b9:85:a5:06:6b:a0:7f:dd:3b:d1:
b1:b4:11:2f:00:80:03:fb:57:2c:06:70:33:72:e1:
0b:3e:6d:1a:3b:e4:52:1d:fd:0f:8e:c8:e1:78:a2:
7b:30:9a:93:01:98:26:d2:b0:b7:67:69:ce:ec:36:
19:4a:07:c0:78:a6:81:d3:c0:25:4e:c6:41:be:56:
90:44:af:0b:50:ae:9c:a9:d5:87:78:42:85:a1:cf:
fb:45:a8:5c:ea:1c:cf:1c:67:25:5b:9d:b7:98:92:
48:4f:f5:1d:7b:63:94:20:72:8b:0a:2e:ce:56:2c:
b9:86:c6:f5:c1:0f:27:40:0f:0e:36:3b:26:a6:48:
32:b8:7a:4f:92:88:86:53:5b:13:ca:1c:27:92:d2:
36:b5:50:e2:34:90:b9:39:28:89:3a:0a:e4:8c:2f:
83:ed:1e:85:3e:09:58:22:8c:83:5a:8a:1a:4e:94:
82:7b:a9:88:85:df:8b:34:08:4b:bd:3b:80:9f:f5:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3B:F7:CF:20:4E:AF:19:77:1D:A8:6D:8A:6B:68:8C:47:DA:DE:7A
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:58:fa:6a:c2:0d:5a:cb:98:ef:d1:65:fa:7d:fb:48:e3:84:
02:79:11:77:bb:4c:cc:0d:13:5a:1e:57:16:b9:02:31:91:5f:
d0:1c:1b:fa:2d:83:3f:40:c8:12:7d:3a:e8:4c:fa:29:e7:c2:
57:08:38:32:70:9f:8a:86:63:f1:57:38:88:07:8d:6a:97:81:
a2:c2:f3:4e:5e:91:54:74:0c:9e:26:f0:3d:7f:7c:79:3e:e1:
4c:d0:e3:b6:c2:7d:79:36:62:b9:e0:77:13:e5:86:d1:4d:38:
a6:e6:48:b0:13:3d:70:aa:09:c2:11:dd:7d:ab:5c:79:7f:24:
e0:5b:ff:c5:3e:51:e0:aa:9e:7a:bd:dc:9b:7a:cf:ef:c9:4c:
71:d6:c1:f3:58:e9:16:3d:c8:bb:00:aa:8a:de:e8:f8:0e:cb:
1a:63:84:c4:42:1d:a5:ef:58:9a:8d:a0:e2:0e:e5:aa:4a:d6:
2d:90:c6:76:5d:f6:a2:f7:65:82:81:09:23:31:e0:95:b6:ee:
61:ac:35:68:c3:61:c5:93:d7:78:94:be:cc:35:46:a6:4b:a4:
b8:c8:65:86:bc:0a:75:4b:eb:5b:5a:bf:fd:42:e9:bf:ac:11:
f5:15:8e:ca:ce:59:9a:8d:1f:a2:69:10:21:a9:be:88:27:64:
a0:34:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:51 2025 by rpki-client