Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: er9RvsPShEfjgapGa++0Xc0h2ZIWNgNDhx+la8BagZM=
Subject key identifier: DF:54:FF:C1:57:9C:AC:B2:A7:8C:72:6C:EB:26:4B:26:50:E7:48:10
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 01984C9CFE025C92D9F72038FA9128B71977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 09BF
Signing time: Sun 27 Jul 2025 16:00:13 +0000
Manifest this update: Sun 27 Jul 2025 16:00:13 +0000
Manifest next update: Mon 28 Jul 2025 16:00:13 +0000
Files and hashes: 1: 0x8juoo7AM8ugf31uQycejLtims.roa (hash: sJQg/bbbZFsef+zbbHa9OzqRT4fumHdl0Xl81Is/6E0=)
2: Nzh8YLpNUF4cU0rzBjfGCERDcYE.roa (hash: i2B2OXXjCTbw2kGS650IvMFo0E46R+ycXmvCyPDbizQ=)
3: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (hash: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=)
4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: FhPZi5Oeqw+tmsX5z9Ko4IQx6GgE/5w223/hIVV70r4=)
5: i4pBlijYu7sjz616Su8j6sEp0KM.roa (hash: uHKnyOrHeN8Niu67x/4Qi3vMRGo0ABBXAuttwGbGRuk=)
6: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (hash: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=)
7: sizZNRJeMyfvZoIYAB6UC-zVc7U.roa (hash: Hn9xitBE6shoqbTIVL8aOgZmfrDePFpERxPmyPyqVEs=)
8: vywQrYyohPA7HiVpUnZvxi_OkIw.roa (hash: 9ddLtzX64XyzhFvBqGsy3QFMWw7/oarf8SrkFQVzpQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9c:fe:02:5c:92:d9:f7:20:38:fa:91:28:b7:19:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Jul 27 16:00:13 2025 GMT
Not After : Jul 28 16:00:13 2025 GMT
Subject: CN=df54ffc1579cacb2a78c726ceb264b2650e74810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:4a:6b:32:2a:cb:da:ea:34:ef:3a:f7:1f:
91:72:f6:20:2e:f7:dc:4f:2e:34:b1:f8:cd:c4:6f:
af:ee:60:22:3f:f6:93:86:5b:b5:80:1f:2b:54:33:
e9:ad:25:89:de:6d:72:12:5f:d9:52:75:ac:f8:37:
6b:f9:1c:da:53:04:88:52:dc:ce:09:0d:e8:04:42:
b7:3d:3f:97:c4:d0:22:17:bf:92:06:79:37:4f:e3:
6e:31:57:79:3f:4f:a2:c7:3a:e0:a5:6a:bf:e1:30:
3a:ec:0f:1f:4a:12:7b:53:9b:27:f6:12:ff:0f:c3:
c5:f0:17:4a:8a:c2:3c:45:c0:8c:3e:4f:30:cd:43:
f9:ee:0b:dc:28:23:16:fb:22:e6:46:63:ae:53:bb:
2e:91:3e:7c:fe:2c:5f:97:1d:8c:21:43:16:08:b8:
1e:de:dd:00:da:86:cf:ff:24:c8:25:18:2f:49:fd:
ed:ea:66:27:43:a6:87:8d:f2:19:44:3e:3d:8e:82:
cc:1e:04:ec:d9:18:bd:a3:d1:bf:d4:cf:36:98:78:
f6:bd:7d:80:90:f3:a6:87:6a:1d:9e:dd:92:37:a4:
86:00:b0:d7:d5:a7:96:00:76:bf:14:6f:c3:d6:af:
c1:b7:5a:b0:5e:0a:a3:25:96:da:39:96:5d:4d:85:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:54:FF:C1:57:9C:AC:B2:A7:8C:72:6C:EB:26:4B:26:50:E7:48:10
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:c7:4c:f9:d7:66:fa:88:8e:2b:1f:cb:58:d7:e2:d1:80:ba:
79:b7:2c:b4:fb:6c:82:0d:dd:dc:0f:b6:36:40:2b:91:99:44:
f1:c5:d8:76:54:f0:8f:a8:10:4a:4b:40:ea:30:43:af:28:23:
4c:cd:f5:6c:bd:ed:c3:e1:36:14:a7:d6:c0:73:38:62:80:e8:
db:1c:f8:84:e4:ea:00:d7:9a:99:98:34:8b:08:7a:38:e6:75:
a6:82:df:b3:61:96:0c:de:bd:55:1c:52:32:f2:f1:97:f4:20:
75:80:c0:40:24:a1:8d:71:4c:39:51:7d:c1:68:0e:43:e5:ce:
ee:9f:04:9a:eb:ce:bf:af:0a:0e:17:35:67:5f:b0:7e:36:5b:
97:b8:c4:bd:17:ae:7c:07:e7:8d:0a:3a:ea:57:74:e9:62:db:
01:ba:04:48:f5:e3:71:22:d9:2b:25:52:09:6c:0e:a1:48:f4:
4e:57:a3:8d:a1:a8:82:9e:d0:d9:35:2e:c7:eb:4f:59:61:bd:
4f:16:5e:32:43:59:4b:ae:8d:53:77:ba:45:8b:18:da:88:f3:
79:56:05:d2:98:28:02:6c:52:e6:58:bb:56:e1:0b:bc:69:ec:
ba:40:c4:4e:57:6c:74:ff:67:cd:57:ce:49:45:49:3c:0d:58:
90:2d:63:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:02:10 2025 by rpki-client