Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: 8Hh4KWnxeppf+LVqsC4hilxxFhAOte5PgDHohcTUyLI=
Subject key identifier: 09:1F:8D:D3:AE:29:D8:B5:F1:17:CA:E7:B8:34:52:F0:FC:97:11:90
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 0198D7A8C90B123AA9D7DFDBD28B1B63A644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0A07
Signing time: Sat 23 Aug 2025 16:00:19 +0000
Manifest this update: Sat 23 Aug 2025 16:00:19 +0000
Manifest next update: Sun 24 Aug 2025 16:00:19 +0000
Files and hashes: 1: 0x8juoo7AM8ugf31uQycejLtims.roa (hash: sJQg/bbbZFsef+zbbHa9OzqRT4fumHdl0Xl81Is/6E0=)
2: Nzh8YLpNUF4cU0rzBjfGCERDcYE.roa (hash: i2B2OXXjCTbw2kGS650IvMFo0E46R+ycXmvCyPDbizQ=)
3: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (hash: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=)
4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: 9kzSGAmxBGAATwyvOeYrVa4nHDs6jEcDdzhKQKHdd0Q=)
5: i4pBlijYu7sjz616Su8j6sEp0KM.roa (hash: uHKnyOrHeN8Niu67x/4Qi3vMRGo0ABBXAuttwGbGRuk=)
6: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (hash: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=)
7: sizZNRJeMyfvZoIYAB6UC-zVc7U.roa (hash: Hn9xitBE6shoqbTIVL8aOgZmfrDePFpERxPmyPyqVEs=)
8: vywQrYyohPA7HiVpUnZvxi_OkIw.roa (hash: 9ddLtzX64XyzhFvBqGsy3QFMWw7/oarf8SrkFQVzpQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:c9:0b:12:3a:a9:d7:df:db:d2:8b:1b:63:a6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Aug 23 16:00:19 2025 GMT
Not After : Aug 24 16:00:19 2025 GMT
Subject: CN=091f8dd3ae29d8b5f117cae7b83452f0fc971190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:b8:c5:d4:f1:f8:a2:d7:bb:40:f1:52:86:
6d:e7:7e:13:52:39:79:7a:10:fb:6b:aa:34:7d:f3:
09:78:f8:c7:75:a3:59:d3:9f:9d:c1:20:c0:e3:d8:
2c:0c:c9:02:14:12:22:15:10:16:98:c5:39:0c:4d:
1f:52:fa:b2:8a:71:7c:7f:7e:26:c4:9c:56:13:0b:
51:44:6d:6a:25:95:c3:79:8f:0d:af:d2:00:5e:5b:
66:87:5f:be:42:ef:49:61:24:23:bd:fa:b0:7b:af:
c2:b0:3e:b8:ba:fc:5c:32:f1:6b:9d:ee:c5:7a:1d:
52:24:86:7e:dc:79:b1:10:5e:fe:cd:de:bc:92:27:
77:3e:4e:7c:3c:a5:91:f3:5e:aa:3f:b6:d6:e1:6c:
b8:f8:e5:9f:16:14:f4:fc:52:31:5e:50:44:72:0f:
1d:98:11:b2:33:1f:e1:e8:0c:e9:77:f8:71:39:e0:
1f:b1:85:a9:b0:a6:4e:8a:38:90:96:fc:69:6b:b8:
d0:5d:7c:64:41:d5:88:83:56:16:ad:d6:58:6f:a6:
a8:22:40:5c:5f:e3:7c:95:95:d1:c2:2d:1e:81:23:
8a:6c:58:f2:c2:69:45:78:20:ca:2d:38:45:6b:44:
15:b1:ac:68:80:59:ca:38:c4:eb:b8:c4:d4:f7:7a:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1F:8D:D3:AE:29:D8:B5:F1:17:CA:E7:B8:34:52:F0:FC:97:11:90
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:62:f3:a2:18:21:f2:aa:93:33:91:18:76:59:f4:5e:52:71:
8b:25:26:d7:9b:3f:1d:57:4d:f4:21:6f:34:bc:f9:db:ea:f5:
92:0d:ff:fb:82:b8:88:58:8d:d3:ec:eb:e2:79:06:85:95:d8:
cb:f4:09:03:5c:df:f7:33:6c:8c:5b:98:78:73:97:5f:c4:9b:
58:3d:cc:af:74:02:a0:10:67:c9:64:60:98:33:6b:35:1e:31:
17:28:bd:83:27:37:21:d7:54:41:fa:12:bb:bf:e9:e0:0a:d8:
8f:8d:b1:a8:87:0c:4b:4c:b0:97:f5:ec:44:42:4b:f4:92:4e:
ed:36:8d:0f:4c:7c:c1:96:0c:06:24:7a:94:06:0a:70:6d:23:
31:22:d7:fc:a9:88:c5:ea:6c:31:7f:a0:a3:50:90:c3:c7:6a:
b0:1d:b2:dd:e6:0f:66:04:f9:81:a1:d3:bc:64:03:8d:5e:30:
18:d5:51:b2:12:49:04:9b:82:80:5f:e0:25:96:4e:95:c7:1d:
ac:0c:8b:ee:45:f2:2d:4c:6b:63:91:64:cd:a8:cf:72:ec:f1:
d1:a6:fc:eb:70:d4:a9:a7:8a:07:bc:33:60:35:23:a3:54:60:
53:f0:b0:82:f9:57:39:6c:2d:ec:3f:9c:0d:cb:9b:2d:95:5c:
a3:4c:52:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:56 2025 by rpki-client