Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: wMNvMqgQ/SOB8n4S//viTNt7dlFWXot5gaZ6vBgr0TY=
Subject key identifier: 37:73:9C:49:DD:A0:56:0C:8E:FF:5E:9E:C5:92:A8:86:36:41:EC:5C
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 0198537AE7934263EA5115C33D5B25D1DF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 00:00:20 +0000
Manifest this update: Tue 29 Jul 2025 00:00:20 +0000
Manifest next update: Wed 30 Jul 2025 00:00:20 +0000
Files and hashes: 1: 3BCTdWPdAwRCl8UX_2fwNUPfXDk.roa (hash: auwwYg2jmDefujiM9dhtcg3qGUezv1eAv9OXRPuNl5Q=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: B75htKqeVf/C4GDSE+eashAmhFA53fSgxPLfmu2aSaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:e7:93:42:63:ea:51:15:c3:3d:5b:25:d1:df:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Jul 29 00:00:20 2025 GMT
Not After : Jul 30 00:00:20 2025 GMT
Subject: CN=37739c49dda0560c8eff5e9ec592a8863641ec5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:27:36:8e:5b:10:ad:1f:c6:55:0b:9f:dd:9f:
60:eb:1f:9d:4c:94:12:60:34:b7:c2:a8:57:50:27:
06:69:68:ee:8f:33:c8:92:f0:5b:71:b3:55:99:18:
68:d8:34:5e:fe:6d:db:51:66:36:22:45:10:ea:cb:
ec:d8:df:0b:40:d9:48:4b:15:7a:7b:8e:1d:a6:fb:
53:cf:75:20:9d:f4:25:1d:7b:68:ed:4c:18:f9:1f:
c0:7c:fc:a4:67:7b:d2:13:85:e5:3f:7d:98:db:8a:
f2:67:3e:f5:be:90:7c:33:70:49:30:53:34:b2:a8:
e6:18:36:60:7b:b0:64:74:ba:43:77:9d:d8:57:80:
68:0d:d1:fe:50:c8:21:e2:57:35:fa:a5:83:4c:a7:
70:65:ba:40:7d:71:d0:ea:44:e4:a8:10:9e:90:ef:
6e:68:e6:5e:87:77:d4:bd:f5:80:53:6b:d1:68:74:
ac:9c:8e:07:82:8b:b8:b2:64:75:b6:c1:17:d9:7b:
fd:d9:99:7c:de:0a:57:f5:70:94:97:92:a2:d6:a6:
1a:43:97:08:a0:63:79:66:ba:ef:76:e5:66:64:8c:
c0:04:cb:7f:e0:2b:d3:3c:09:5c:48:8f:12:2f:14:
ad:c7:36:47:09:d4:40:6c:6d:9b:22:34:3e:4e:90:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:73:9C:49:DD:A0:56:0C:8E:FF:5E:9E:C5:92:A8:86:36:41:EC:5C
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a9:e1:fe:0e:73:7a:bf:0f:0d:57:09:c5:b5:1b:c3:a0:da:
25:76:c7:9e:93:c8:6d:7e:17:d0:77:ae:8e:5e:1a:a6:a0:25:
1c:cc:08:d3:12:ac:ea:41:7a:ef:9a:cd:70:b1:e9:2c:0a:ee:
43:6d:ce:d8:ee:36:bf:aa:78:64:c8:db:c8:2b:8c:6f:61:51:
cb:58:a3:e3:33:18:45:1d:a8:31:2d:08:05:79:40:36:6e:c2:
5c:7f:cc:38:1a:4b:53:f7:83:7b:88:67:2f:88:cd:a4:a3:d4:
05:ee:e4:4e:ff:38:29:9f:9e:b9:d5:85:06:4c:15:39:d6:ca:
f1:69:20:78:01:7c:0a:d1:d8:3d:23:e8:8a:95:ac:2a:1d:7c:
ba:ce:03:0e:72:7f:11:aa:dc:3b:ab:22:48:aa:6c:20:ef:2e:
6d:25:e8:98:b7:45:30:d1:d2:d6:f0:d4:37:d3:4a:54:c8:00:
2a:8a:26:77:3a:67:d1:5b:03:7c:7e:ab:b7:48:d7:35:e3:3f:
17:47:37:6c:d7:58:01:63:e4:7c:57:3d:db:d9:56:f3:04:67:
ca:c1:7f:f6:cc:f6:14:23:87:1e:ec:3a:55:3f:87:11:48:47:
4a:0f:66:2e:c8:ab:a0:6f:f2:e2:5b:3c:97:f7:b2:5a:fb:34:
a3:fd:2e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:50:40 2025 by rpki-client