Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File: gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier: ahhSe4gCxJt71+4DcHNXwCUeHIaNpDHGZ859+T/UgBI=
Subject key identifier: 1D:3F:CA:66:0F:2C:DF:1E:5A:DE:8D:69:05:C2:8F:A9:A0:66:93:91
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 019931FF2C20DAF897BC0B52C04CA28EDA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 05:00:30 +0000
Manifest this update: Wed 10 Sep 2025 05:00:30 +0000
Manifest next update: Thu 11 Sep 2025 05:00:30 +0000
Files and hashes: 1: 3mULbMkLr_MPSOSnvFYfAUenRp4.roa (hash: 6qqpV0wkHRjm2TnedKwLS/E8U5BGoXw+wiRnm1KNFsU=)
2: JjY_rmjM0m285v9bnJnGMH-MzW4.roa (hash: Wfm9h1Fvy7QUJSpQZVDtJ3sdWPEGrotdzPy8ZnW4oPI=)
3: OSPVEMKxRvS3K2S9RynwSClpPy0.roa (hash: I2dq/kcaAdZwjzuTK1RJZZE0wsjKNorsCYjqSblF2e4=)
4: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: 2/R/GoKH/L8TYFgQZsWGHVnZienlR40oTJ3ELXJlWLQ=)
5: wlPsVBZE3IB9ajxNMFuhywUiQmU.roa (hash: Vf+lexsaTCbsX6oyeji8k6+eXormbDvLL1F56QDbmpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:2c:20:da:f8:97:bc:0b:52:c0:4c:a2:8e:da:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Sep 10 05:00:30 2025 GMT
Not After : Sep 11 05:00:30 2025 GMT
Subject: CN=1d3fca660f2cdf1e5ade8d6905c28fa9a0669391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b2:10:f1:fb:f1:b4:b7:81:52:e7:cf:6f:63:
6c:e1:c5:02:ca:ef:a1:11:0e:fc:ff:9a:96:6a:63:
88:ae:2f:e7:7e:5b:5a:25:27:32:1b:45:0d:07:47:
7e:a3:c7:d2:04:43:32:b1:9d:4e:db:59:b5:44:34:
c0:c4:15:45:3b:3d:7f:eb:87:43:02:81:4c:d8:24:
d9:de:f9:a1:fa:46:04:19:a9:19:eb:06:88:6f:fd:
20:45:68:0f:6c:9b:0f:36:e6:c1:9e:e3:1a:14:7c:
a0:e4:51:ca:f3:d9:99:ca:dd:ca:b5:9a:6b:e8:6c:
4e:2b:a9:0a:6f:9f:20:da:53:08:c3:6c:4b:d7:f4:
ae:d9:1f:5a:8f:91:4b:e9:8f:67:64:fd:3c:ea:d4:
57:8d:ec:92:cd:7a:cb:49:5e:12:b0:74:0d:4d:b5:
ac:66:a1:61:7d:3f:36:96:81:50:9a:a8:f2:4c:92:
73:75:13:f9:04:22:f2:ad:e0:23:8c:f7:3d:53:1f:
57:09:a7:e6:7c:b4:1c:e4:5b:c1:18:ab:8e:05:03:
76:25:e7:4d:39:e1:b4:d1:fe:c2:2a:c1:ee:1c:9e:
1d:27:5c:6f:ef:5a:0d:e8:5a:94:41:b5:b8:66:da:
c3:dd:25:93:ed:70:3d:e0:58:cb:fe:f3:4f:e4:64:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3F:CA:66:0F:2C:DF:1E:5A:DE:8D:69:05:C2:8F:A9:A0:66:93:91
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bb:f8:b9:f6:55:48:75:8e:5d:4d:54:db:39:4f:a2:56:8d:
27:14:e2:ce:d3:67:c3:b2:0a:78:c1:b0:ef:f5:fd:57:e9:bb:
76:14:12:06:86:f6:2d:64:75:1d:34:bf:61:a9:41:08:d9:47:
1a:48:41:3d:ba:d0:d8:d8:e3:5a:d5:8a:c0:d2:2f:b8:78:30:
2a:12:d5:b6:7e:77:2a:37:6c:37:8f:14:cf:6a:a9:3e:bb:01:
b6:82:47:21:41:70:12:cf:20:ed:bb:b2:52:5f:c4:90:16:8c:
ac:40:b1:2c:b7:7a:26:26:7f:77:90:e9:b4:a6:14:91:20:6e:
a0:b2:52:0b:1e:80:12:14:33:be:0f:f0:ca:0c:a2:7f:78:26:
37:16:63:fc:9c:59:d5:6c:90:fb:89:d2:58:59:4d:08:f3:22:
82:ac:81:56:8d:9a:f3:42:b2:c1:47:8b:02:40:32:44:17:57:
28:10:18:1c:64:59:8d:0a:e3:2a:91:ef:14:c8:fc:76:f0:92:
77:0c:c1:2f:3f:f5:5f:5c:37:fe:5d:5b:18:06:58:80:d0:aa:
a7:3c:65:fb:17:02:61:3d:14:ab:69:64:14:7f:a4:f1:f6:db:
c3:0a:ac:4b:07:c6:54:02:02:c0:56:d1:81:c6:f1:a8:ea:1a:
16:7e:1d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:19:59 2025 by rpki-client