Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier: wR4mQ69k1NX1ac6Mph2qcdc03Cq1SvOu6Y/lrNt4ZcE=
Subject key identifier: CB:C7:DA:42:6B:95:93:3D:03:F7:7D:90:A5:95:42:64:95:BF:8D:0E
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 0199372601A909BEDEDD02DB96CFAEA82042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number: 170F
Signing time: Thu 11 Sep 2025 05:01:01 +0000
Manifest this update: Thu 11 Sep 2025 05:01:01 +0000
Manifest next update: Fri 12 Sep 2025 05:01:01 +0000
Files and hashes: 1: PKnw-L5JAMuLVLW_rPUfl50hgHY.roa (hash: Byni1NysoU1wt70wQe2A3ExqD7CHoo8EoSDduRrEOLI=)
2: TVTY8940R-JLK3g0bC-55INlCR4.roa (hash: G8fybb1dVxSY3d5NiOJGlSrI9zs27WohVNGxcPiP+KM=)
3: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: GKrOIGnnZFal2VSvpdAPvNxNirhoR2BL9evsJYgEW3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:26:01:a9:09:be:de:dd:02:db:96:cf:ae:a8:20:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Sep 11 05:01:01 2025 GMT
Not After : Sep 12 05:01:01 2025 GMT
Subject: CN=cbc7da426b95933d03f77d90a595426495bf8d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:d3:75:f4:b4:22:60:a6:35:f2:04:65:4a:
1b:cd:79:a4:b0:75:83:0c:ce:87:ae:60:b2:49:19:
42:97:05:f6:c0:8a:e0:bd:6a:01:56:f1:83:e5:19:
14:4a:79:a7:da:b7:93:01:ae:7b:09:aa:c3:1a:de:
de:27:b6:e3:97:25:01:15:4f:26:a0:91:a2:d1:41:
58:91:46:61:13:c7:df:c9:6b:a9:2f:e2:dd:e7:7f:
60:25:48:a3:e6:be:64:c6:3f:b1:cc:5b:d5:f2:50:
c1:51:bb:25:93:24:1d:ef:5f:ed:21:80:a7:b0:59:
b1:1d:3f:03:35:ca:39:b6:89:ab:67:f7:a3:0a:a6:
de:81:fb:c9:02:63:64:f7:c6:ba:b9:bf:1d:07:36:
ec:45:43:6d:6d:79:fd:9f:f1:fe:f6:ae:cb:05:42:
94:a8:60:98:48:8b:7c:48:6c:8b:eb:87:67:7b:df:
76:32:3e:28:25:07:ff:2b:10:55:6b:84:e4:a5:78:
ae:dc:17:fe:18:f4:cb:5a:58:09:7f:58:93:9d:bb:
ee:49:d6:fa:48:8b:3f:85:23:a8:af:bf:fb:54:e5:
23:30:a4:d4:a7:f7:80:73:04:e5:34:ed:a9:95:b6:
0a:b2:38:1f:aa:78:39:cf:66:c9:8d:00:70:b9:ec:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C7:DA:42:6B:95:93:3D:03:F7:7D:90:A5:95:42:64:95:BF:8D:0E
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f0:a9:97:c9:7e:0c:93:a8:73:b2:b9:98:5a:20:5e:59:a7:
28:a3:2d:2e:85:bf:69:f9:10:7c:bf:10:5f:8c:02:50:a8:f9:
56:79:ab:dc:2b:63:f1:c1:41:e3:78:54:72:97:91:91:52:5e:
c0:fb:42:3c:0d:59:ed:e7:2f:9f:34:92:9f:51:94:86:18:f6:
e6:3d:d7:0a:4f:b3:be:a6:f6:e1:43:07:af:a2:a4:57:1c:c3:
60:67:84:9c:2c:61:d4:e3:fa:38:6c:12:b0:c8:68:98:09:14:
b8:64:95:68:73:0f:e8:41:a5:a6:ef:6f:a7:5f:5d:5e:ed:62:
f1:92:32:3c:2e:e7:e2:4a:58:1f:fc:9d:c7:c7:0e:73:9a:26:
2a:1a:fa:22:32:c5:ff:f6:de:21:b8:19:af:f2:27:d5:f5:2b:
3e:da:f4:81:3d:78:d0:fc:f5:2e:8e:f6:83:7b:e2:7e:34:55:
d2:be:e5:d4:63:22:6a:af:93:95:a9:69:54:56:38:ae:d1:02:
6f:02:3a:20:7a:7f:8a:bc:f8:2d:7c:a5:cc:9a:f0:8a:d0:70:
22:11:e6:64:86:67:3e:0a:f1:0e:b9:98:3b:cb:d8:3e:d0:7b:
2a:49:e4:a0:8d:ef:bc:60:44:d9:0f:aa:0a:ab:5a:21:49:f8:
75:44:10:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 10:21:37 2025 by rpki-client