Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
File: GYOwLhDKghv-G-bnUdks9z1tTAs.mft (raw, json)
Hash identifier: aMd/NpvwkZ7W7b02vusRzSWcrMvs78d9DzBRMnC29D4=
Subject key identifier: D9:BF:00:B6:2C:A2:98:BD:F8:05:E8:FC:7C:83:2E:73:8B:3D:AC:5E
Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
Certificate issuer: /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Certificate serial: 019A09DC34FE6D870A8E1FD1FF89E4A030D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
Manifest number: 09FC
Signing time: Wed 22 Oct 2025 03:00:17 +0000
Manifest this update: Wed 22 Oct 2025 03:00:17 +0000
Manifest next update: Thu 23 Oct 2025 03:00:17 +0000
Files and hashes: 1: GYOwLhDKghv-G-bnUdks9z1tTAs.crl (hash: ZUL/j+VQnfl0J4SUeezViJPQY6JSg/S0s5+vGCrkBi8=)
2: Ni5vtm0M3bjCTeGdNSnDAVszYLE.roa (hash: OME01+LPKlOdHdZ6RncStdMa9nK9uQNDcVGUK02vlcM=)
3: W5JHXs8zLwGJy4IeuX9pjg56ARk.roa (hash: oTtfujgJJ/+mSfltfqB/Zo/A05YAt91LC0YvRqH4YGg=)
4: YRiImFoNZVxU37wmm_1wL-_QqNY.roa (hash: xKbt/nH87U6XbMkmr2VvoP8n6E36rmfBqZRV+O9xVJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:dc:34:fe:6d:87:0a:8e:1f:d1:ff:89:e4:a0:30:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Validity
Not Before: Oct 22 03:00:17 2025 GMT
Not After : Oct 23 03:00:17 2025 GMT
Subject: CN=d9bf00b62ca298bdf805e8fc7c832e738b3dac5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:9c:70:0f:b5:2c:7a:d2:10:d0:a7:41:cd:
6e:1d:7d:0e:33:87:de:84:d8:70:57:df:c1:9c:13:
a3:55:99:62:5b:30:a8:95:4b:8b:b7:67:cc:4c:e1:
32:4d:40:35:46:ec:fa:e0:df:04:84:e6:5a:a6:d7:
9e:d6:30:01:c0:62:c7:63:f0:1b:bb:fa:77:69:6e:
c2:07:bc:03:38:0d:93:75:f5:85:45:c4:e9:68:0e:
fc:93:2c:b5:7e:e7:71:ee:44:b4:03:1d:85:f4:4f:
b1:1e:5f:7a:89:8d:a6:73:93:ed:24:40:f3:a0:73:
73:9a:29:ac:5d:92:62:ec:6f:be:6c:ad:c7:cb:ae:
d1:1e:9a:7d:63:ef:96:57:51:f0:67:5b:92:aa:6a:
c2:27:c3:6f:37:2e:07:0c:b7:eb:05:ed:c8:88:42:
6c:32:1d:26:29:1b:6f:63:34:89:7d:99:71:c8:cc:
1a:b8:bf:90:23:53:cd:d4:94:84:2a:98:0b:b0:c3:
e7:ba:58:4c:84:8c:7d:41:c3:85:2b:25:a8:12:66:
70:5b:74:fe:19:79:52:43:c4:65:f5:5a:32:f2:02:
88:b9:bc:54:d8:6b:e7:dc:6e:21:d0:e9:0a:22:10:
4c:c6:86:c5:13:a9:b3:6a:60:a7:8a:10:6a:3d:14:
e4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BF:00:B6:2C:A2:98:BD:F8:05:E8:FC:7C:83:2E:73:8B:3D:AC:5E
X509v3 Authority Key Identifier:
keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:91:57:c0:fc:58:8a:81:74:43:59:c4:8f:f9:57:e3:bb:db:
06:15:25:12:d8:a6:0c:e4:5c:e2:0d:5c:0a:86:3f:c2:9f:e1:
58:3d:6b:24:89:9e:63:e2:d3:3c:d8:e4:d2:a8:1c:b5:38:5a:
25:f4:c1:32:04:fc:99:cd:c0:66:9d:24:62:d4:cb:c9:74:41:
ad:36:44:58:77:25:b4:4a:16:63:93:cd:45:ed:fd:2e:9e:a7:
2f:89:39:0f:3d:1d:5f:27:12:12:be:b7:d0:69:69:a1:52:80:
ec:17:c0:d5:90:3d:37:7f:7c:10:39:78:cb:9d:da:f9:24:cd:
6b:b0:e9:e7:89:5e:52:7b:ba:dd:74:93:44:37:55:12:c0:da:
f1:70:64:3b:b5:dd:be:41:a7:a3:26:71:23:b8:71:fb:02:2b:
16:ad:5a:bb:e7:72:6e:2a:6d:21:ae:fa:fa:f8:c7:e9:8f:d0:
35:24:d4:63:1b:80:55:e9:74:a3:44:4d:67:66:71:9c:70:79:
5b:16:32:0e:be:6c:2f:d8:a6:aa:d3:7a:a0:b0:e7:af:42:dc:
34:16:e1:73:79:b3:43:9a:1a:6c:5f:20:0a:6d:cc:73:76:58:
23:da:f5:da:3b:79:d7:e2:9b:a1:6d:ba:39:8d:0e:55:65:30:
7d:85:24:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:47:44 2025 by rpki-client