Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
File: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft (raw, json)
Hash identifier: BOO/WSue5YGajVO/5ZMp8IYBMfP2Tee8MQvm2h+pNxc=
Subject key identifier: 74:60:0D:05:01:B1:EE:4C:81:8C:F8:2A:90:E6:A5:0E:2F:CE:C8:72
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 019923D5D0F3A97164509C5B3E070BE91D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
Manifest number: 1193
Signing time: Sun 07 Sep 2025 11:00:39 +0000
Manifest this update: Sun 07 Sep 2025 11:00:39 +0000
Manifest next update: Mon 08 Sep 2025 11:00:39 +0000
Files and hashes: 1: Z2JXPb5aczBq6WmK_sd6hX6UoF0.roa (hash: k+SlRJ8Eg3Sd/kSZfZH8+gupJSBpD7AMqyYcN2gXnJ0=)
2: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl (hash: i8PFtvJZAlS+aBX6w3/kBc/6JKqgKWGwf+076Enok0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:d0:f3:a9:71:64:50:9c:5b:3e:07:0b:e9:1d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: Sep 7 11:00:39 2025 GMT
Not After : Sep 8 11:00:39 2025 GMT
Subject: CN=74600d0501b1ee4c818cf82a90e6a50e2fcec872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:cb:9e:14:e1:27:cd:06:3b:b8:c3:31:38:
f4:e2:d6:a0:0b:e4:7c:ae:96:b7:7c:b2:5c:d4:1c:
b6:3a:bf:1a:ee:4d:2b:6a:bc:1b:dc:e6:26:6b:cd:
cb:a8:52:a6:b6:5d:b7:50:ea:7f:84:90:d5:ea:f3:
fa:51:c6:a4:f8:48:95:19:61:d9:84:c7:09:13:98:
60:c2:ec:0d:aa:56:06:a8:d8:96:d0:be:a1:77:21:
67:cc:43:07:58:06:bb:00:7d:b8:b3:fd:c5:46:fd:
32:91:7c:30:aa:6c:26:08:85:29:c3:c8:b6:06:0c:
92:ed:2f:73:34:31:07:1d:73:00:2b:bb:76:92:a3:
d1:a6:13:a0:2e:48:db:0e:1b:ea:64:f9:f5:7d:72:
f3:a4:ce:89:51:7a:a3:69:ec:89:ca:0f:01:08:32:
20:59:a4:df:12:9c:44:20:64:81:ed:b4:ec:d5:cf:
9d:c3:fe:e1:8f:81:30:0e:4f:c2:99:5b:9a:ab:54:
13:c5:c0:4e:91:d2:23:e4:64:5b:23:6b:3e:e4:b4:
58:65:89:9d:a8:e9:00:de:7d:51:fc:ad:e4:8e:b0:
ad:61:ad:5d:84:ee:25:0f:56:9a:4b:4c:1a:7d:d4:
1f:bf:54:a5:69:9f:af:cb:f6:5d:c3:4c:50:dd:b9:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:60:0D:05:01:B1:EE:4C:81:8C:F8:2A:90:E6:A5:0E:2F:CE:C8:72
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:cd:b7:53:57:9c:a5:71:b3:74:92:9b:ae:2b:1d:00:da:12:
0f:fd:e1:24:f2:47:3c:c2:d7:a7:15:74:fe:bc:c8:c1:97:fc:
d9:6d:a5:66:85:1c:b2:b3:ee:41:83:64:50:ea:fa:f1:fa:77:
d9:a4:02:b1:4d:54:a3:26:d3:45:fb:4c:52:f3:f5:43:68:47:
54:a5:73:f7:ad:a1:24:f3:63:92:9d:b4:53:9d:65:3a:a1:62:
bd:c7:c5:15:d5:a4:00:0a:09:7a:84:b4:6a:fa:f8:3a:bb:3e:
f7:f5:58:0b:66:70:29:50:4c:61:99:5f:93:7c:ac:8a:83:c0:
55:1e:9b:f9:a8:a5:93:db:01:07:4b:3b:3d:d5:d2:f6:39:8c:
b2:b7:01:2d:17:79:dc:66:88:e2:7f:f5:d0:7e:a5:14:53:ae:
44:94:26:8c:40:50:52:d5:5f:a2:90:b3:5b:85:8e:89:d4:dc:
45:fc:6e:bd:37:67:e9:82:64:90:a4:c9:04:ad:f4:9a:60:37:
aa:a6:e4:b2:26:95:fe:e3:95:44:06:48:2f:1a:72:53:76:b5:
32:10:14:2d:2d:f5:3e:57:12:aa:87:17:2e:b6:45:71:e2:ed:
cb:4b:bd:b5:ea:d3:fd:69:55:a4:7c:9a:70:b3:5f:33:09:64:
64:73:58:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:06 2025 by rpki-client