Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
File: Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft (raw, json)
Hash identifier: F1NYPm9AVQSipCmcjBuGjzUuPgRT6j9BwgK8AP/v+ds=
Subject key identifier: BC:F3:9F:E8:54:82:B2:8A:FB:CB:41:2D:B5:9B:15:18:B2:F7:5B:4D
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Certificate issuer: /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial: 019861A516B52B6A86D5EBBD4A16313091CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
Manifest number: 1609
Signing time: Thu 31 Jul 2025 18:01:05 +0000
Manifest this update: Thu 31 Jul 2025 18:01:05 +0000
Manifest next update: Fri 01 Aug 2025 18:01:05 +0000
Files and hashes: 1: 1Cpy8hReysvqo6rJK2S7mrGPkKE.roa (hash: D4UL2BT0SqLhRGOh0lwv2Oqr8FVnOBm4wqYMVb3RDbk=)
2: Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl (hash: NSMO+P6C7Lk0a7qHLvBYramPieG47oAPh0XtBAdyDYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 16:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:a5:16:b5:2b:6a:86:d5:eb:bd:4a:16:31:30:91:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Validity
Not Before: Jul 31 18:01:05 2025 GMT
Not After : Aug 1 18:01:05 2025 GMT
Subject: CN=bcf39fe85482b28afbcb412db59b1518b2f75b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:ce:da:ec:09:43:b6:6f:28:88:43:98:3a:
c5:4b:3c:78:14:01:ec:1b:ef:dd:c2:45:0e:e9:9a:
93:f6:57:b0:59:8e:cd:72:c9:c8:53:f0:29:b0:65:
a2:38:d3:52:4f:0d:95:f7:c5:e6:48:ee:3c:05:29:
bd:4b:a1:86:04:54:fc:40:34:be:20:96:ef:22:31:
62:5d:a0:f3:07:0d:5c:09:2d:78:ca:21:52:7d:54:
d5:26:b8:2c:63:05:84:0c:a3:c8:b6:d8:46:9a:6f:
95:7b:46:98:64:38:5e:e0:c0:71:ad:96:f9:dd:a9:
50:19:86:58:23:f9:db:3b:ca:fc:1e:7b:b9:8f:c3:
e3:bb:15:fa:d9:e8:ca:a0:7b:bd:4a:3c:f3:71:ca:
0f:9e:50:83:73:18:7b:19:f8:ed:f3:6c:b5:07:fb:
aa:e5:6b:51:9f:be:fd:5e:7f:cc:ff:27:e9:ba:5d:
2d:84:2b:40:d8:d3:1a:78:3c:2c:81:02:80:31:1a:
55:60:a9:33:6c:48:d2:8e:78:90:13:c9:ea:a5:51:
24:0a:57:1d:d1:64:df:3e:9e:ba:c6:43:65:62:ab:
6d:c4:fe:25:2a:42:5d:b4:cd:ca:bf:86:59:1f:26:
a2:2e:7c:4c:b9:01:7b:90:ce:73:0f:46:73:8b:9f:
f6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F3:9F:E8:54:82:B2:8A:FB:CB:41:2D:B5:9B:15:18:B2:F7:5B:4D
X509v3 Authority Key Identifier:
keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:58:4e:00:5b:58:a5:73:67:09:f3:f0:3d:12:1f:4f:ea:92:
ad:11:17:1a:6c:08:98:c1:d7:25:3c:2d:c2:86:1a:d2:b1:06:
17:b7:c8:a2:3b:14:73:de:c7:ab:2b:d0:af:09:19:29:16:13:
26:f6:db:b6:85:f6:7e:8c:c6:e9:63:12:31:f6:cc:05:ab:f9:
e0:e5:0e:e6:2f:49:77:d9:b9:39:09:92:2c:e6:f8:29:cb:68:
0a:d8:0c:85:cb:e6:f8:7c:c6:66:eb:ef:72:93:5c:b7:4e:fe:
7b:81:f6:2e:18:88:e9:ef:9b:01:bb:f6:5b:5d:b7:ab:c8:8b:
d9:56:07:50:0e:93:0c:12:55:14:2c:5c:c4:41:c5:53:37:1d:
7c:99:6d:da:64:2a:d7:30:5f:8f:4b:0b:cf:1b:aa:a4:55:74:
32:a5:4d:07:fe:d6:33:ff:f8:b0:06:33:76:06:c0:bf:a1:d3:
79:a7:6b:f9:1b:d7:f9:3d:a1:68:1a:88:ad:63:eb:44:db:11:
b2:ed:7a:08:4b:82:fc:d3:ad:48:6f:32:96:a6:a0:88:e6:7a:
65:26:80:0d:e7:6c:b5:70:d7:15:cb:f5:74:6a:a3:60:4d:2b:
97:25:e6:d7:cd:3b:c4:51:bb:11:f1:c2:d8:32:b8:49:04:0d:
ab:a8:24:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 20:53:24 2025 by rpki-client