Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
File: GnU2E7QiD2jytUbQkqIwvtbtrLg.mft (raw, json)
Hash identifier: eWVSOTmIOOTRM8Q6H7yGvyrWEjfyC5AJDrPSrCrtr/U=
Subject key identifier: 20:D4:57:CE:1A:28:1A:6A:DE:C0:FE:65:5D:96:07:1A:7F:F1:84:13
Authority key identifier: 1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8
Certificate issuer: /CN=1a753613b4220f68f2b546d092a230bed6edacb8
Certificate serial: 0199337FCA7EED5178F03A9A7D77139BA2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
Manifest number: 09C9
Signing time: Wed 10 Sep 2025 12:00:36 +0000
Manifest this update: Wed 10 Sep 2025 12:00:36 +0000
Manifest next update: Thu 11 Sep 2025 12:00:36 +0000
Files and hashes: 1: GnU2E7QiD2jytUbQkqIwvtbtrLg.crl (hash: OJqlFMvwbTxvOyf+gXWGIDucL7vDxwk4US4xI6vUPiM=)
2: dZV8dvdnA_9uSLTQkNXVl8a3FaI.roa (hash: Krx07PHv8S1aDWSKbtOJAHlzZWfSCAV78WJWEmqXiPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:7f:ca:7e:ed:51:78:f0:3a:9a:7d:77:13:9b:a2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a753613b4220f68f2b546d092a230bed6edacb8
Validity
Not Before: Sep 10 12:00:36 2025 GMT
Not After : Sep 11 12:00:36 2025 GMT
Subject: CN=20d457ce1a281a6adec0fe655d96071a7ff18413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bc:23:ec:c2:a2:35:6e:cf:d0:58:c9:46:54:
a1:8b:3e:68:be:3f:da:24:d7:fc:55:32:83:15:a1:
db:07:40:e0:ba:23:b8:12:dc:c5:e6:5a:70:08:2b:
36:98:3d:06:a9:df:c7:35:43:bc:45:e5:31:38:83:
53:ca:37:29:be:4c:7e:78:05:96:d4:cd:04:37:52:
4e:3a:4c:f3:22:7c:3f:70:5c:64:f3:10:46:47:a3:
9d:02:90:10:9f:44:53:bf:01:ae:8b:2d:5d:3e:53:
c3:0c:8d:09:c2:c3:58:0d:76:6f:72:b5:e0:04:ce:
2e:9a:e1:8d:2f:e3:4c:66:b6:22:ef:62:74:b2:1c:
80:a1:9d:42:d5:6a:29:a5:5c:26:c3:c6:e4:a2:bf:
e6:ac:fb:76:e7:c7:61:83:e8:0e:63:bb:16:9d:1f:
1a:a8:f9:26:94:1b:62:36:8d:54:b4:35:32:d9:89:
80:bf:d6:29:f7:dc:fe:50:cd:4c:c6:ee:09:40:f7:
9a:17:64:d8:f4:08:ab:c3:67:29:e3:e5:f3:de:07:
24:b8:02:0f:5e:e9:23:44:84:05:74:7d:09:c3:66:
e9:22:d8:94:7e:e6:ff:89:45:55:c5:52:51:99:66:
6f:1f:e6:7d:9d:28:94:ce:e8:19:f1:5e:2f:0f:43:
20:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D4:57:CE:1A:28:1A:6A:DE:C0:FE:65:5D:96:07:1A:7F:F1:84:13
X509v3 Authority Key Identifier:
keyid:1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1e:63:b9:ae:da:b2:1b:c3:66:9b:4b:fb:f4:4c:68:14:c3:
12:a1:0d:cc:33:3e:0f:14:58:40:c8:51:1e:24:c5:d5:d6:d2:
43:d3:1d:a1:80:d2:55:ac:cc:54:1c:a2:bf:f7:ce:83:32:80:
ab:64:da:22:2a:b6:88:24:5e:37:2e:32:c0:f4:22:7a:20:0d:
94:34:cb:91:56:c2:7a:1c:01:98:c1:9e:7c:a1:a6:26:a4:c8:
ad:c5:98:37:fd:ba:7d:f6:f6:a3:1f:62:7f:13:bb:69:6e:80:
a8:64:de:b6:2f:a4:53:58:f5:68:79:2a:7c:71:46:c7:df:c8:
52:14:26:5c:a8:a6:aa:80:04:12:aa:f1:02:8e:32:e3:a6:85:
e8:5d:fb:a6:c1:dc:2a:9d:ab:b3:e5:49:30:3c:f5:ab:6b:b2:
5d:1e:eb:2a:68:f4:d4:bc:1a:5a:1a:ac:86:10:79:0b:66:3e:
16:fc:25:0c:dd:bd:76:6e:0d:58:d0:53:f4:ae:65:64:b7:53:
59:7a:cb:7d:b0:01:68:7f:43:6d:c8:c7:51:0c:7b:f9:1a:b3:
29:53:69:31:93:44:94:8e:06:1b:da:3a:4d:55:5f:7a:3d:58:
45:99:c6:e2:8c:aa:85:0f:77:6b:2b:40:b3:02:3d:61:86:91:
a6:0b:cf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:20:44 2025 by rpki-client