Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier: gZfU/brD40/nmXSQ9CvZc4mTTMk0/I/ZKm0izWEyARU=
Subject key identifier: 39:13:2E:49:92:F7:AC:85:8D:41:FD:FE:B3:A9:6C:89:83:60:F3:E7
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial: 019A1A2B56A1414DD345D31F2FE9C1CB7148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number: 097C
Signing time: Sat 25 Oct 2025 07:00:39 +0000
Manifest this update: Sat 25 Oct 2025 07:00:39 +0000
Manifest next update: Sun 26 Oct 2025 07:00:39 +0000
Files and hashes: 1: 7NcD3v3bTwDr9ocN3-x63vupO1g.roa (hash: HvV0nfI75827YQCzKbYVEWTCzA0c8O1WIDzuDKlaH5w=)
2: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: qQbwxP0W2p6deRHmGEuRHBzdn5PNICt4xbK1RPNLstk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:2b:56:a1:41:4d:d3:45:d3:1f:2f:e9:c1:cb:71:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
Validity
Not Before: Oct 25 07:00:39 2025 GMT
Not After : Oct 26 07:00:39 2025 GMT
Subject: CN=39132e4992f7ac858d41fdfeb3a96c898360f3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:31:36:5d:4e:ec:8c:78:c3:c7:3d:f6:b7:
6b:b5:3c:e3:8e:ea:df:12:4e:5f:ab:b5:17:5f:e5:
99:10:41:56:46:7f:0c:1a:cb:9c:c8:9d:ad:07:b8:
15:37:a7:5d:26:83:35:ff:d1:f8:9d:33:aa:38:5f:
eb:e1:43:d7:d5:f9:f4:08:ba:22:72:b9:d6:7b:ff:
95:08:b9:bb:f9:a5:b1:40:7a:97:46:db:c1:ba:47:
47:eb:bc:26:d2:07:0a:3d:f7:ee:17:6e:b2:33:28:
b6:53:49:e2:50:b5:88:12:9b:af:86:91:04:d1:05:
f4:03:45:4f:35:ea:5f:1e:46:a3:ef:4d:55:79:c8:
40:b2:2c:39:4a:45:5f:14:f5:4c:3b:45:fb:e0:f4:
69:d7:39:c0:ac:55:62:a8:f9:6e:74:77:cb:2f:bd:
58:69:34:ba:70:82:e9:76:7b:ae:cf:96:3d:ce:99:
09:94:ee:90:23:7a:14:d5:76:f5:07:5c:10:1a:94:
ac:57:b7:a6:6e:5e:90:14:e2:56:6a:ec:0a:58:61:
3e:ea:6d:fe:4f:6b:c4:51:b0:c5:93:d8:aa:86:73:
37:b1:13:23:b9:56:d9:49:37:fe:cb:ca:7b:26:78:
9a:5e:ed:c5:27:c9:db:01:f4:9a:51:ad:0c:ec:ac:
90:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:13:2E:49:92:F7:AC:85:8D:41:FD:FE:B3:A9:6C:89:83:60:F3:E7
X509v3 Authority Key Identifier:
keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d6:49:57:f1:55:a4:9b:bd:bf:5c:44:fe:f8:d0:86:33:d0:
52:44:ce:d5:67:7f:7a:cb:10:e6:f3:8b:59:4d:91:fc:1e:a8:
81:7f:6c:24:a8:d3:2b:1a:f9:43:85:8c:64:90:e0:cf:d1:69:
d8:b0:ae:84:08:2f:62:ae:26:10:5b:65:1c:5c:d0:a2:60:72:
27:f0:05:b8:78:54:72:ac:20:f5:21:7f:e7:68:5a:0d:c1:07:
e4:bb:94:3f:e0:46:1c:97:c8:f6:08:20:95:5c:c3:67:bb:e6:
58:1b:10:44:b7:4e:ae:e4:39:ee:f0:bc:d6:fd:73:c9:60:81:
fa:0d:4e:eb:e6:65:a3:25:fc:03:da:72:66:61:9f:96:9f:bc:
ea:00:e1:08:b0:1b:ca:e1:2b:09:aa:51:98:7c:32:0e:36:24:
03:22:65:ec:db:8e:2d:15:4a:80:45:4a:4c:c5:b4:20:af:41:
d0:37:0d:af:a9:35:bb:94:e0:20:47:dc:b9:88:75:ad:bb:b7:
61:ca:c8:97:f0:46:45:98:00:49:29:c1:f3:4f:4d:27:4e:be:
3f:7a:8d:4c:98:84:3c:96:a3:32:fb:22:1c:72:1a:4b:78:54:
ba:f6:42:65:6c:eb:48:50:ee:ec:96:e8:b0:6f:ae:d5:68:11:
64:87:19:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:21:56 2025 by rpki-client