
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
File: GiynpYOySXw2fp6G3rect6c3Wkc.mft (raw, json)
Hash identifier: WBxxfGBLvcMYwUYF+Esqle6GKh6SHbt1Z0NTMDJ+sGY=
Subject key identifier: 72:0B:4A:3E:E8:D2:09:49:C9:D8:1B:63:07:F6:71:E3:23:47:33:C9
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 019A0147E05D4548899652A72D9E0B75061B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
Manifest number: 0D7C
Signing time: Mon 20 Oct 2025 11:01:18 +0000
Manifest this update: Mon 20 Oct 2025 11:01:18 +0000
Manifest next update: Tue 21 Oct 2025 11:01:18 +0000
Files and hashes: 1: Btc4qpdT0aRzIHC1dA2Swul-oTg.roa (hash: uKGbMNZQlHtPafIv0wdS9IBOfkHQ7RxwMz40Kx+7kY8=)
2: GiynpYOySXw2fp6G3rect6c3Wkc.crl (hash: vsYbMkggvxLdMWCgY0NticUukeO7TNfqvud2WWD0ds8=)
3: LowqF6jNQcP5gUuUZPzdzSTRQ_E.roa (hash: MaL24Dedevc8MXN5LlmhfVbJ0dnqBAZxBiWzlel5CFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:e0:5d:45:48:89:96:52:a7:2d:9e:0b:75:06:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Oct 20 11:01:18 2025 GMT
Not After : Oct 21 11:01:18 2025 GMT
Subject: CN=720b4a3ee8d20949c9d81b6307f671e3234733c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:28:7e:80:b2:69:09:72:79:e3:5d:c2:4b:50:
46:8c:81:a8:5a:38:5a:bf:89:f2:0a:c9:43:2d:7a:
6b:27:51:05:2b:35:47:09:76:29:82:40:9d:bf:67:
5d:39:03:19:94:46:af:39:a9:79:7c:56:36:d7:19:
d0:b5:0d:4e:b6:f7:6d:30:15:bf:0a:97:a8:e6:0f:
ab:9e:97:95:88:36:6f:bb:7e:43:7d:cd:54:34:0c:
23:56:7a:d9:c1:b5:50:3f:3b:e7:12:0a:26:58:3a:
24:95:dd:25:b7:77:9a:22:83:1a:fb:19:6e:e7:c6:
42:13:e0:10:b9:85:93:0d:4d:de:20:e7:ec:1a:eb:
d8:fc:e2:0a:a7:49:0b:e8:6b:b6:ac:cf:8e:4d:e7:
58:b0:60:21:0f:56:ae:be:1f:c4:f1:8f:8e:f4:47:
f6:6f:4c:ab:4a:0a:52:76:18:4a:e6:8d:13:bb:dd:
df:88:c1:43:46:6b:49:35:b9:6f:fb:67:ce:77:65:
2c:84:68:c5:8e:d0:97:85:50:29:c1:d4:d5:be:5a:
38:ec:7d:34:e7:81:ff:e0:3f:fe:ff:97:f2:51:1c:
6c:6a:23:7a:5e:37:c8:84:05:42:5c:d7:0e:f1:cb:
9e:f3:d6:7d:13:7c:a6:d5:2d:f7:c5:89:0b:aa:cb:
93:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0B:4A:3E:E8:D2:09:49:C9:D8:1B:63:07:F6:71:E3:23:47:33:C9
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c6:fc:8c:42:03:5b:1b:28:d6:82:ce:df:cc:c5:b3:3d:73:
cb:ee:ec:16:8d:b3:b1:a8:06:c5:4d:74:11:9d:a9:0d:71:45:
c2:7e:4c:02:08:04:e1:b0:0f:d0:67:bd:4b:2a:da:62:85:05:
f1:0b:c4:56:24:87:71:ab:77:43:9f:5d:ad:1b:ad:c3:1c:d1:
da:73:8f:49:7b:d0:01:be:eb:27:62:06:a0:b0:cb:be:c7:23:
2c:4d:ff:a4:e2:c9:a4:38:dc:57:1b:61:f5:04:fe:ba:29:ff:
1c:dd:b0:b4:a9:3b:09:cb:89:df:59:94:68:3f:67:c9:49:e9:
2d:78:1d:a0:71:8a:0a:a8:34:8d:cd:9f:d2:ce:57:e9:76:a2:
25:28:0d:4c:83:92:e9:6a:fd:08:2c:eb:2c:e8:c8:a0:dd:cb:
86:cf:7c:8d:07:a1:a0:cf:7d:15:cc:47:75:b3:8a:db:5b:ee:
5e:01:b0:82:eb:f6:84:1e:d9:6a:19:72:67:e5:9f:98:82:fc:
c3:dd:58:44:0e:96:55:14:0a:d4:02:03:ae:31:10:04:54:91:
4c:d0:50:dd:d7:5a:c7:d2:69:40:0b:ed:de:ac:10:81:67:41:
82:b0:51:e2:ba:65:74:ec:5e:63:93:8d:f5:e4:ba:cc:24:d8:
a1:71:42:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:53 2025 by rpki-client