Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
File: GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft (raw, json)
Hash identifier: SFT6pmVzOsJFkzFSSRW0F4muauf3f29gz6QZz/5mRFg=
Subject key identifier: 73:E7:6C:E0:9F:56:7F:01:16:39:8B:E1:62:4C:8D:CF:00:CD:1A:A4
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 019A23D2C90B9E3A3EC37776F967DE9D6EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
Manifest number: 07B6
Signing time: Mon 27 Oct 2025 04:00:07 +0000
Manifest this update: Mon 27 Oct 2025 04:00:07 +0000
Manifest next update: Tue 28 Oct 2025 04:00:07 +0000
Files and hashes: 1: GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl (hash: 0jmfqr/PGEwRLexuM5veTdpF8x3kfTXdA7ZunJqe39k=)
2: IoLDWpZjj6oD1gt6nT7kXI9BcpA.roa (hash: O3dblJBCfC0orY3rYiRzkRU6RkAUIy5FR+b3VhRRXis=)
3: eiwsx2FFwfE5TE_nY3h0_knWuU4.roa (hash: CVJTqVDV13ZF8iBRU7zgKf0ItAWnGVc70AQTYAE3fwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:c9:0b:9e:3a:3e:c3:77:76:f9:67:de:9d:6e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Oct 27 04:00:07 2025 GMT
Not After : Oct 28 04:00:07 2025 GMT
Subject: CN=73e76ce09f567f0116398be1624c8dcf00cd1aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:8b:47:2d:e0:94:39:f0:44:55:71:3a:20:
34:90:1b:30:d1:39:c8:65:b9:ed:e3:dd:a3:a4:aa:
96:f1:37:04:1d:46:35:77:24:8e:f3:f4:2a:82:f6:
8f:41:13:c8:9b:7e:8f:ce:61:2c:55:e0:a8:47:df:
29:3f:15:94:4f:d6:69:fc:ba:fe:a1:72:d0:06:8f:
0f:88:16:84:83:2f:d3:26:ee:ed:ce:9e:26:0d:f3:
f6:97:08:58:0d:5d:63:01:3e:2e:cf:86:e0:69:a6:
3b:2c:ff:f2:73:3f:9e:88:bd:56:e4:19:6f:ec:2c:
72:0e:19:d6:7a:34:d0:ef:76:4e:0b:bd:18:6f:65:
a3:48:bf:35:dc:67:e0:a4:76:99:18:5c:c9:50:57:
23:b7:c2:40:0e:03:ec:6c:e2:d1:52:dc:df:34:3e:
49:57:99:a2:78:b7:15:69:49:8a:44:d5:72:c8:e2:
42:3e:c8:19:5e:e1:d6:08:18:2f:6d:34:28:24:26:
00:2d:6e:52:00:1c:f6:b8:e7:15:95:c2:b4:76:b8:
87:56:d6:fe:d8:d5:b0:44:0c:f2:82:2c:45:3b:38:
86:7c:33:5a:6b:8c:86:ec:7e:37:ad:91:b0:2b:d3:
a9:8e:8c:c1:08:04:8c:9f:49:aa:bb:76:49:50:93:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E7:6C:E0:9F:56:7F:01:16:39:8B:E1:62:4C:8D:CF:00:CD:1A:A4
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:be:99:e8:6f:31:74:2c:f0:ee:7e:67:d1:b8:ef:e2:1b:fb:
1e:53:2b:90:08:7e:e6:ff:09:3f:b3:7d:3a:e7:0d:03:17:f6:
68:49:ba:62:f1:a9:4c:67:f3:9b:ae:b7:34:b3:00:bd:52:59:
d2:b3:a2:f3:d3:38:21:31:d3:92:63:96:f9:25:fb:fa:6c:78:
b6:f8:b6:0e:76:5c:a7:f9:e5:72:b0:89:f5:7d:f6:11:90:80:
b8:9f:0b:8d:30:16:c0:fb:2c:44:f3:45:ed:01:d7:50:1d:aa:
51:24:c6:fc:00:58:96:d8:51:18:9d:7c:7d:5e:9b:2f:b4:5c:
db:05:13:62:dd:99:ca:a8:3a:69:c4:ed:be:fa:65:7c:cd:9f:
15:83:55:06:c1:3c:ea:f1:9f:73:4d:f5:67:80:63:f6:48:eb:
c9:c9:2e:88:f8:91:8f:6a:05:64:0e:27:2b:c4:72:a0:43:8b:
41:cc:95:b3:55:0c:9d:99:d6:33:14:06:3a:5a:3b:bb:a6:ab:
f8:ab:68:1e:d8:28:f3:9b:1e:e3:ac:80:b4:86:f6:fc:e8:de:
f3:8c:ad:aa:36:77:30:6f:73:90:02:ed:e2:3c:73:97:9a:e5:
f4:0b:ba:f6:91:db:1d:b1:18:cd:ce:7a:26:d9:d3:f7:12:98:
95:8a:77:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 11:06:25 2025 by rpki-client