Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
File: GiynpYOySXw2fp6G3rect6c3Wkc.mft (raw, json)
Hash identifier: mk6PLgFXoLzOtp+uC7MPiPEk45KinLTWw6A7OpC15Qs=
Subject key identifier: A3:A1:56:9D:E8:8D:55:C7:AC:21:14:3C:7E:69:C6:61:2E:D5:24:66
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 019848F76022D907DCF633EB7D75A0158736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
Manifest number: 0C98
Signing time: Sat 26 Jul 2025 23:00:28 +0000
Manifest this update: Sat 26 Jul 2025 23:00:28 +0000
Manifest next update: Sun 27 Jul 2025 23:00:28 +0000
Files and hashes: 1: Btc4qpdT0aRzIHC1dA2Swul-oTg.roa (hash: uKGbMNZQlHtPafIv0wdS9IBOfkHQ7RxwMz40Kx+7kY8=)
2: GiynpYOySXw2fp6G3rect6c3Wkc.crl (hash: qrK59POsvJMqGam2wTtkzolo55yiyqlAuYjFZ26t/hI=)
3: LowqF6jNQcP5gUuUZPzdzSTRQ_E.roa (hash: MaL24Dedevc8MXN5LlmhfVbJ0dnqBAZxBiWzlel5CFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:60:22:d9:07:dc:f6:33:eb:7d:75:a0:15:87:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Jul 26 23:00:28 2025 GMT
Not After : Jul 27 23:00:28 2025 GMT
Subject: CN=a3a1569de88d55c7ac21143c7e69c6612ed52466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:ab:60:3c:95:3f:ff:90:d1:6c:e4:74:a3:
f1:5c:a5:1c:78:3b:f1:29:81:cc:13:a0:c7:62:11:
1a:47:a2:74:a3:f1:3b:77:c8:fb:23:bc:0d:05:0b:
2d:7a:8b:bd:66:c2:1d:39:d1:d3:22:6f:0e:45:6a:
70:5e:2c:bd:14:e4:4e:9f:e4:8b:e0:1f:17:92:25:
0c:3d:28:47:76:b3:8a:69:75:8e:ad:cf:1e:09:56:
d2:e1:a5:70:de:09:4c:0f:cf:9e:0b:dc:de:b3:e2:
d9:e1:8e:15:5b:cd:12:85:45:f1:07:9d:1f:9a:97:
bf:44:91:4c:7c:33:17:0c:31:83:1d:c9:dd:42:38:
0d:49:3f:ba:21:f4:bb:33:0c:83:4c:1b:6d:7c:79:
15:3c:30:6d:59:eb:f1:52:e2:33:2c:32:3b:5c:0d:
40:ad:ff:25:2c:97:ed:0d:f6:60:22:ec:7a:0e:39:
9a:10:b3:09:61:ae:7e:e1:a4:16:6a:47:e6:ce:82:
e6:14:c6:e0:22:47:33:fb:36:d5:ec:3f:ab:2d:2d:
c5:22:61:ef:67:72:56:c3:c7:e6:80:f1:f9:fd:7e:
1d:8f:a7:e2:1e:7d:58:73:60:8f:bd:c2:3f:64:78:
80:45:ec:b1:a2:28:cc:2f:07:c2:c4:e9:8b:ab:2e:
0d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A1:56:9D:E8:8D:55:C7:AC:21:14:3C:7E:69:C6:61:2E:D5:24:66
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1e:cb:44:e4:d6:c1:d1:5d:09:56:9c:33:b9:7d:ca:b5:d8:
21:73:bc:66:af:ad:05:b3:aa:c6:d3:8f:fd:62:24:30:97:65:
6d:5a:98:6b:9c:9c:f3:31:d7:dc:69:14:23:21:98:1b:46:ca:
c1:81:22:63:f4:4f:07:0b:00:34:c7:57:85:df:39:f2:ff:2e:
e6:ad:61:08:28:a2:78:6d:1b:2d:7a:42:4f:46:27:f4:66:15:
fc:9a:06:b1:1d:30:ac:19:8b:9f:a6:2c:ec:60:2f:e4:8e:f1:
70:11:a6:86:c2:11:47:55:15:39:e9:c0:bd:41:ba:bb:50:96:
1e:08:14:17:89:29:7b:3c:4d:fc:b3:f3:3b:54:aa:58:cc:f6:
43:80:c2:f8:03:1e:f7:b1:db:c4:c6:04:8b:19:8a:53:c4:a9:
92:27:64:b1:0d:e3:bb:0f:bf:3a:4b:e7:56:fc:0b:82:49:d9:
77:1e:7d:52:5d:0a:eb:cb:d1:f5:24:ec:1d:f7:fb:32:6a:bb:
be:06:00:8f:8d:13:aa:70:53:65:4c:7b:62:c3:2b:32:b6:d3:
56:34:70:12:da:10:13:da:8b:ad:4d:f8:8d:17:9b:ba:27:f5:
14:dd:76:70:82:8b:c2:ee:ca:8c:0e:d1:14:09:f9:b1:f7:ff:
36:75:12:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:12:22 2025 by rpki-client