Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
File: GiynpYOySXw2fp6G3rect6c3Wkc.mft (raw, json)
Hash identifier: 4fZoAUrWcU5ha9+Pt6/kUkxgegkmWe9e76P5E3kYQDw=
Subject key identifier: D0:2D:D0:02:B2:42:90:22:C5:6D:7D:0B:28:98:EA:A9:7E:F5:EC:C1
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 0198D5F1B64DA636B485B5D8FF415E8D061D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
Manifest number: 0CE1
Signing time: Sat 23 Aug 2025 08:00:44 +0000
Manifest this update: Sat 23 Aug 2025 08:00:44 +0000
Manifest next update: Sun 24 Aug 2025 08:00:44 +0000
Files and hashes: 1: Btc4qpdT0aRzIHC1dA2Swul-oTg.roa (hash: uKGbMNZQlHtPafIv0wdS9IBOfkHQ7RxwMz40Kx+7kY8=)
2: GiynpYOySXw2fp6G3rect6c3Wkc.crl (hash: Pr7x/9M1xGbF4Gd4+B3ox43rbmHer66EvB1bcr464y4=)
3: LowqF6jNQcP5gUuUZPzdzSTRQ_E.roa (hash: MaL24Dedevc8MXN5LlmhfVbJ0dnqBAZxBiWzlel5CFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b6:4d:a6:36:b4:85:b5:d8:ff:41:5e:8d:06:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Aug 23 08:00:44 2025 GMT
Not After : Aug 24 08:00:44 2025 GMT
Subject: CN=d02dd002b2429022c56d7d0b2898eaa97ef5ecc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:2b:23:a7:2d:4e:60:54:07:cd:19:95:3d:
2b:ad:bf:df:f0:de:71:1a:0f:d2:af:c2:43:1e:ef:
9b:2e:9a:27:89:fa:13:40:4b:65:6a:f1:a9:10:2a:
0f:db:13:2a:1a:a7:3e:21:cd:0e:b4:15:8a:d0:bc:
dc:b4:6d:95:8f:3a:37:8d:e7:5b:cf:6f:26:1e:c1:
f5:f8:92:80:ac:d8:77:f6:a1:72:74:de:b7:e3:ba:
5a:09:1b:a1:2c:a0:6f:59:d8:a6:e7:69:37:31:49:
52:03:e6:2e:15:ee:2c:32:51:e6:e5:a1:d6:66:65:
9d:2b:14:92:11:b5:b7:3f:f5:76:bd:36:d8:d4:cc:
d4:44:6d:ca:da:92:dc:ad:ab:3f:e3:da:18:68:3c:
d5:49:4c:8b:ef:e6:ca:b9:a1:23:67:9b:69:65:33:
07:31:8b:27:07:9c:67:47:80:d8:39:a8:16:69:f9:
e9:8e:c8:34:20:87:cb:16:db:a5:a0:e2:1a:ed:5d:
d0:87:bb:bb:b1:5f:41:d9:4d:8f:7b:07:47:7f:6e:
88:f4:a7:5b:00:17:0f:33:b3:f1:9c:7e:b0:2c:d2:
a9:55:f2:e7:bf:ef:28:75:f4:b0:b6:1c:61:7a:92:
fd:84:20:c1:3a:06:f2:d7:64:ca:e6:b7:75:08:f2:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2D:D0:02:B2:42:90:22:C5:6D:7D:0B:28:98:EA:A9:7E:F5:EC:C1
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:39:72:98:58:43:8d:6d:50:40:67:20:55:98:57:bb:4a:02:
49:dd:ed:74:2b:f2:05:2d:81:eb:cb:40:a7:39:41:2f:ca:8f:
54:13:ee:61:51:f7:d6:96:64:b1:0a:57:10:58:8e:f8:3e:a4:
95:53:36:cd:a1:b5:f6:3c:76:1e:a1:39:ec:64:a3:44:dd:7a:
63:d5:4e:af:6a:79:b8:96:65:ea:0d:bf:62:0f:24:44:f2:f8:
2b:d2:4d:5a:84:f9:3e:0d:78:3e:17:8a:13:8e:0d:14:af:cf:
7c:83:de:e2:28:b9:a0:32:79:81:7d:64:1b:62:55:7f:a1:b0:
36:8c:8c:00:87:fb:4c:f1:db:80:94:7d:8e:b7:10:ab:5c:83:
78:d2:b9:73:87:76:5c:58:da:e6:2f:b7:49:68:2a:b5:33:b6:
cf:9a:67:91:92:a3:73:04:ba:f9:ed:59:44:c3:24:9e:f8:46:
e6:10:1e:a8:da:93:43:90:c3:85:ee:f4:45:fe:d5:a5:fc:3f:
e3:32:f1:7d:13:bd:39:5f:e0:37:8c:14:25:61:40:b4:ca:bf:
2f:f9:83:da:d0:4f:d1:3b:74:43:98:33:a7:98:76:5f:7c:ee:
f1:ab:8b:ad:32:57:d6:17:c5:ce:16:5c:af:70:3b:98:22:bc:
2e:d5:3d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:40 2025 by rpki-client