Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
File: gnfY854_j7Zjj3CDq58WwEfQ02Q.mft (raw, json)
Hash identifier: HLyyZvpzoHx7mBwm/xy1vcfICSBIM4SR2yUD3rq7YoM=
Subject key identifier: 91:7E:1F:B1:59:4F:C6:4D:E1:65:C1:03:CD:4A:52:BF:31:B8:5F:94
Authority key identifier: 82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
Certificate issuer: /CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Certificate serial: 019922FA090A49D96E15DDC1272FCFE09E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
Manifest number: 1151
Signing time: Sun 07 Sep 2025 07:00:35 +0000
Manifest this update: Sun 07 Sep 2025 07:00:35 +0000
Manifest next update: Mon 08 Sep 2025 07:00:35 +0000
Files and hashes: 1: 9flLcmlhEqT9lrkmfyvcqwcZaPE.roa (hash: s8DMn0SNfjEZl7A0rydWGLHujZ1siiQiNSjrpdgAWxo=)
2: gnfY854_j7Zjj3CDq58WwEfQ02Q.crl (hash: vqqaLJEQQqJEulmCm6LwxPKC3lm1oppZ3aMWFnBxf58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:09:0a:49:d9:6e:15:dd:c1:27:2f:cf:e0:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8277d8f39e3f8fb6638f7083ab9f16c047d0d364
Validity
Not Before: Sep 7 07:00:35 2025 GMT
Not After : Sep 8 07:00:35 2025 GMT
Subject: CN=917e1fb1594fc64de165c103cd4a52bf31b85f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7f:9a:d8:0b:ce:b5:6a:30:3d:1b:55:34:13:
0c:92:78:3f:d1:26:d5:fd:14:a6:e4:69:03:7a:a0:
cc:74:69:b1:14:4f:b0:ff:46:a7:ba:71:22:41:f6:
79:a3:79:9f:6f:92:48:93:e2:15:ed:0a:6f:b2:18:
08:d0:a4:59:d5:fb:b3:f2:0a:03:58:f9:bf:3c:d5:
43:9d:2a:c7:d7:02:b0:b3:5e:81:61:6a:4c:13:8c:
2b:23:ec:1d:34:c0:7a:4f:bb:1c:bb:cf:d1:8c:e4:
af:db:98:50:8e:4b:b2:0b:13:1a:5b:60:04:1c:76:
36:e6:56:1c:61:aa:06:44:ec:5e:a1:40:fe:e3:20:
01:54:a1:9d:52:31:1b:9a:14:39:dd:0a:3a:12:e4:
23:ce:f6:68:03:7a:af:e5:46:a9:ed:0d:a7:91:a9:
32:b8:ce:d9:e6:e5:61:b8:08:b1:4c:8c:03:53:a6:
68:58:e8:23:80:9b:f8:3a:5c:40:8b:03:3f:92:f3:
99:29:6a:0c:59:4f:b4:b4:07:ce:9c:26:27:35:40:
1a:79:a4:24:a5:8e:86:d3:b1:27:a7:d8:06:68:1a:
bd:c8:c8:27:40:c5:8e:3e:47:e4:74:4d:0d:17:2c:
88:23:74:2f:c0:75:70:2c:93:ff:fb:2e:ae:29:d7:
59:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7E:1F:B1:59:4F:C6:4D:E1:65:C1:03:CD:4A:52:BF:31:B8:5F:94
X509v3 Authority Key Identifier:
keyid:82:77:D8:F3:9E:3F:8F:B6:63:8F:70:83:AB:9F:16:C0:47:D0:D3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnfY854_j7Zjj3CDq58WwEfQ02Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/1491bf-84ad-48a3-a619-577da12e3648/1/gnfY854_j7Zjj3CDq58WwEfQ02Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1b:46:23:f8:83:b7:36:b3:64:92:c9:33:d5:a4:93:df:89:
19:88:b7:e4:d2:2b:c8:3b:68:f1:3e:16:92:ed:90:4a:43:91:
98:55:05:db:c7:9a:7e:c6:5a:27:ae:88:fa:27:53:3e:0e:b0:
21:31:55:65:12:24:fb:f8:69:1e:9e:1f:4d:8f:ec:c1:7b:ed:
49:22:2c:0d:0b:5c:64:a7:c3:0b:21:0b:f4:0e:13:ac:ad:63:
d4:6e:cb:b5:45:f7:d6:83:dd:2c:4f:b4:84:b4:76:4c:41:ac:
1d:bd:47:85:f6:de:ae:a7:cd:79:20:35:77:5a:59:32:9e:00:
62:78:a9:3d:99:f1:91:5c:0d:c4:39:2f:0c:54:b2:41:d9:32:
46:7e:d2:f7:74:4d:e2:bc:6f:54:ca:d2:f8:2c:f0:19:00:0a:
c0:4b:5b:af:88:d3:ec:c8:5c:bb:86:7f:ef:d5:1b:df:9b:fd:
b3:99:55:05:0d:35:ea:62:ba:ce:eb:12:cd:a8:20:d6:be:ea:
f5:49:f6:c9:3a:c2:23:41:8e:75:b6:5c:a6:a2:71:3b:c6:51:
65:e3:19:8c:5f:50:cd:7b:a8:18:6c:1d:15:a4:d7:53:9e:cc:
42:45:d2:68:68:bd:d9:0f:74:da:95:be:c8:9c:26:f9:62:4b:
8c:ba:a1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:19 2025 by rpki-client