Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: y+B+t+NhH/XEmT7R9k/fWDgcGmV7gUKyPpJBPIxLL0M=
Subject key identifier: A2:D7:E2:E9:AC:ED:48:E3:4A:AA:95:5F:C5:65:1A:80:D2:94:E5:8E
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 01993870AD7834900BF534FFEE643436261D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 1494
Signing time: Thu 11 Sep 2025 11:02:12 +0000
Manifest this update: Thu 11 Sep 2025 11:02:12 +0000
Manifest next update: Fri 12 Sep 2025 11:02:12 +0000
Files and hashes: 1: 1-n1FQJdtrmSwdnekLdBoJCXaZLE.roa (hash: vl5yvgIUqNuSQTIxMaS41AEZa6z2Ung/hJMgS4H/xOQ=)
2: KUPJ1lDWM9H_O_nug1XhCm8CDY0.roa (hash: N5MTKqEvC4tpTv0nenMYPQJAtm9LjBH+zL/o+EsRhto=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: kHnHaYMf0Cfq3UBYtToKd5uQuSBz9L1OFJwgpZFjvXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:70:ad:78:34:90:0b:f5:34:ff:ee:64:34:36:26:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Sep 11 11:02:12 2025 GMT
Not After : Sep 12 11:02:12 2025 GMT
Subject: CN=a2d7e2e9aced48e34aaa955fc5651a80d294e58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:5d:80:44:d8:ce:39:1e:f2:ee:57:3c:f1:
8d:94:ee:38:a0:bb:e9:55:cf:4e:4e:2b:cc:dc:ee:
88:77:4d:a6:50:7d:59:ef:b7:ae:c6:db:19:93:09:
87:cd:d7:ff:97:ec:db:65:ee:8d:88:eb:b9:73:7e:
b8:87:7e:c4:70:e4:b7:df:3c:09:f4:69:73:62:2d:
76:c6:87:fe:14:c6:6d:5f:3d:c6:1d:89:ba:b9:55:
66:c7:cd:ce:b6:f5:82:2b:32:bf:cb:8e:4a:3f:0a:
eb:07:67:fe:fd:bf:71:aa:67:3b:73:be:77:85:0c:
80:4a:b4:a2:c8:0e:d3:ba:9b:3f:fa:0c:fd:24:a4:
40:25:64:f5:da:e3:4a:47:95:d4:85:78:c2:04:c9:
40:81:93:42:8b:42:62:67:e2:d0:14:57:7e:54:12:
91:e3:2c:49:45:e4:63:40:8e:20:8e:7c:5d:13:ff:
8d:f0:f0:9c:9a:77:06:47:cd:fa:f5:e3:aa:1f:e8:
13:19:4e:ff:76:b8:63:30:b4:65:80:fc:32:a5:4b:
9b:80:eb:53:1a:d7:37:69:66:9f:3f:11:d4:7d:ce:
3c:b2:df:c1:08:94:28:04:19:6a:f2:a6:bc:85:fa:
9b:c1:d7:e0:f9:76:9d:45:ea:7c:df:8c:df:7f:84:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D7:E2:E9:AC:ED:48:E3:4A:AA:95:5F:C5:65:1A:80:D2:94:E5:8E
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:88:23:32:46:05:1f:7f:03:e9:e1:c4:6a:69:83:d1:f1:e1:
43:9d:af:12:2a:14:d0:8f:e7:8a:33:82:35:8a:ee:c2:3d:82:
53:40:83:96:40:e7:91:a1:10:02:23:00:04:49:8b:8f:75:bc:
a3:c9:f2:a8:53:a7:23:b3:eb:71:fa:50:2f:1e:8c:f4:37:87:
35:7d:ad:c5:02:f6:f4:4b:71:75:f4:a6:79:a6:54:5f:34:ca:
fd:60:ce:48:8e:ab:3f:9b:1e:c7:ce:9b:90:e4:19:33:97:cb:
b1:2f:6b:c3:02:85:59:b7:60:59:94:04:14:2d:1d:cc:a8:f2:
74:94:9e:a5:58:b5:c2:88:ff:4a:6d:4e:73:07:0a:3e:0c:f4:
fb:1e:79:fc:1d:c7:78:88:79:a5:da:40:fa:76:19:3b:69:4a:
af:17:b3:6e:07:2b:a9:1a:74:b7:22:57:43:7d:2f:e8:24:d2:
ed:41:14:90:cb:3c:93:43:4d:eb:2e:67:ff:0f:2b:a9:09:f8:
b8:23:31:b9:b8:55:66:55:da:26:92:39:54:a5:11:91:a7:c9:
09:14:58:cd:0a:23:32:48:6a:17:46:81:71:0a:a9:3b:33:0b:
e7:df:75:13:54:0c:28:d3:c2:7f:40:e2:43:0b:11:05:b5:23:
27:28:1a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:42:12 2025 by rpki-client