Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
File: GXSZvpe8wyf2Tp64xCOUUIygbWU.mft (raw, json)
Hash identifier: 3+ac8N6hJrjzvv1PJb/eF08EoXLqILuLu2oAqlkEVPE=
Subject key identifier: 79:CC:31:58:B1:88:D6:60:94:B7:3E:74:0F:6C:90:D1:9F:33:1F:2B
Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
Certificate issuer: /CN=197499be97bcc327f64e9eb8c42394508ca06d65
Certificate serial: 019921E78D5CD575B34A97D9EC2A8ED53EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
Manifest number: 0CC7
Signing time: Sun 07 Sep 2025 02:00:47 +0000
Manifest this update: Sun 07 Sep 2025 02:00:47 +0000
Manifest next update: Mon 08 Sep 2025 02:00:47 +0000
Files and hashes: 1: GXSZvpe8wyf2Tp64xCOUUIygbWU.crl (hash: ku3OgtiHm7DNCJBcA5I5Eh7HL4EHvFw1GR6vbHsyT78=)
2: sotFwW0dd18jhlgGMEoNrnqopP4.roa (hash: gVSt/FfSJjyB1+rQ4tB9A+DWP4ec6C61j3+zsQZbog8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:8d:5c:d5:75:b3:4a:97:d9:ec:2a:8e:d5:3e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65
Validity
Not Before: Sep 7 02:00:47 2025 GMT
Not After : Sep 8 02:00:47 2025 GMT
Subject: CN=79cc3158b188d66094b73e740f6c90d19f331f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:26:bf:07:79:e5:6a:5d:97:b0:02:37:c5:e8:
0e:e2:72:5c:a3:29:d3:08:3d:4a:54:56:6b:ad:c0:
40:cb:72:71:3c:b9:3e:40:4a:51:72:01:62:17:d1:
21:c9:39:d0:da:55:1d:9e:4c:cc:b9:da:a9:72:52:
f7:62:72:dd:cb:b0:85:2a:bb:44:63:80:43:91:c9:
9f:64:f4:61:7f:51:f0:8d:06:c5:81:ac:3b:50:70:
13:17:aa:eb:68:59:fb:aa:98:5e:a9:b7:f9:ef:11:
0a:eb:55:9e:8a:f2:88:5b:d1:d8:82:23:f7:88:86:
f3:76:db:1c:3b:2f:81:7d:5e:aa:66:06:41:8a:a0:
d0:24:3c:77:a7:b0:d8:41:64:41:3e:8c:10:05:83:
63:e4:e3:b1:fb:dc:31:1d:e6:be:4d:b0:b2:5f:d4:
68:e1:57:9c:75:19:16:37:d2:7e:25:a7:6c:48:7e:
39:ae:b5:e2:1e:ba:3c:d2:ce:e9:c5:5d:a9:aa:e7:
7b:ed:9d:36:0d:24:9f:2f:dd:5f:a1:55:f7:fa:2e:
fe:09:b5:6e:53:f3:26:01:3c:20:2a:7d:68:f1:be:
b3:31:4d:3c:40:86:26:86:e2:d7:af:70:d4:e1:0d:
2f:ef:62:46:08:a6:dc:d0:85:69:ca:9c:4a:a4:10:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CC:31:58:B1:88:D6:60:94:B7:3E:74:0F:6C:90:D1:9F:33:1F:2B
X509v3 Authority Key Identifier:
keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b7:7a:44:45:82:22:a7:73:81:91:39:58:fc:6a:f1:20:29:
43:fd:58:2d:a2:12:d7:10:ee:2d:a2:8b:f6:33:03:65:ef:84:
a1:23:62:08:63:ba:4b:7e:be:ca:7c:14:83:91:ec:c7:a6:53:
12:c6:c5:b0:8f:51:32:cd:66:f8:09:ea:0a:f2:cf:d2:39:59:
67:ed:51:6d:1e:68:33:07:37:39:93:4c:5a:ec:6e:85:20:f0:
b4:de:68:b6:b6:b3:34:7d:31:a8:a3:95:3f:2f:79:65:b8:77:
3f:96:f3:2b:ec:10:d4:fd:68:fd:e0:79:fd:bb:56:a0:91:cd:
f4:71:bb:95:ee:81:df:de:f7:58:46:4d:9f:eb:06:07:17:d8:
11:a0:c4:a8:fc:99:0f:1f:00:57:cc:51:2b:c1:ee:62:0f:c2:
66:6e:64:3b:08:bd:ff:93:4c:8d:61:ce:5c:da:12:eb:36:ea:
ac:c0:90:4a:3e:8d:f6:eb:aa:7a:40:bd:6e:a4:0b:78:5b:f4:
f8:12:2a:74:6d:3f:9d:71:f0:73:52:44:02:c8:e4:da:22:45:
6e:6f:f6:e2:da:fc:8a:8a:b2:38:bb:ed:7e:38:66:fe:ac:65:
d9:61:85:88:d9:be:98:bd:72:31:d9:66:3e:87:34:57:15:9f:
be:55:02:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:11 2025 by rpki-client