Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
File: GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft (raw, json)
Hash identifier: qjlX0GEV3nmj1+HAtVkDkRrHJE002Bq/SBWihq6bFfw=
Subject key identifier: EC:B4:02:35:B6:16:D6:3E:DE:2E:8D:1B:C1:E5:8B:D5:C7:95:4D:F6
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 0199345C1DD1E75F87DB228B7F1829924576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
Manifest number: 073A
Signing time: Wed 10 Sep 2025 16:01:16 +0000
Manifest this update: Wed 10 Sep 2025 16:01:16 +0000
Manifest next update: Thu 11 Sep 2025 16:01:16 +0000
Files and hashes: 1: GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl (hash: 5hTdQwlZo9zSg7saWlof5CL8hnR1mKUKosx13oxJxXU=)
2: IoLDWpZjj6oD1gt6nT7kXI9BcpA.roa (hash: O3dblJBCfC0orY3rYiRzkRU6RkAUIy5FR+b3VhRRXis=)
3: eiwsx2FFwfE5TE_nY3h0_knWuU4.roa (hash: CVJTqVDV13ZF8iBRU7zgKf0ItAWnGVc70AQTYAE3fwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5c:1d:d1:e7:5f:87:db:22:8b:7f:18:29:92:45:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Sep 10 16:01:16 2025 GMT
Not After : Sep 11 16:01:16 2025 GMT
Subject: CN=ecb40235b616d63ede2e8d1bc1e58bd5c7954df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:29:9e:61:eb:24:41:1e:46:9f:2e:1c:24:
42:2b:8e:bb:27:62:c8:0e:68:f7:5b:35:a3:c6:29:
73:44:97:d3:e2:16:f7:af:89:ff:53:0d:4c:26:d2:
ec:e2:b4:d1:41:38:05:61:90:b8:ff:48:02:28:cd:
fc:6d:65:98:b9:39:b4:19:15:66:33:9b:87:12:ec:
15:b6:f6:6f:ac:69:b2:53:d5:16:75:de:16:48:4f:
8d:aa:24:27:2a:39:02:0d:1e:e1:d7:1d:7c:c7:f2:
6c:c3:60:df:f7:54:04:a4:f3:7a:46:95:96:64:07:
09:5e:38:94:99:e1:8b:40:57:f4:28:99:e3:47:5c:
e5:85:6e:ab:de:d3:bb:82:b8:05:b5:30:d1:c4:5e:
99:ab:ef:61:83:f2:ef:f5:35:99:a1:e7:fc:26:78:
b6:ff:5c:a4:f1:6a:3c:87:d4:d5:8b:7a:ea:25:ea:
c3:ac:c7:f5:7c:95:4b:d1:a4:c8:44:91:30:1b:41:
ef:90:f6:40:35:c0:1f:e9:89:0c:d7:b6:3d:62:23:
6d:3f:44:4c:76:10:19:7e:36:e7:48:6f:9b:b3:5e:
2e:3c:4d:e8:da:aa:47:7e:1c:f9:78:f5:24:70:a2:
e4:b5:2a:48:eb:71:53:ab:25:ef:be:1b:6d:24:db:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B4:02:35:B6:16:D6:3E:DE:2E:8D:1B:C1:E5:8B:D5:C7:95:4D:F6
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ff:52:45:31:a8:04:9f:43:be:20:57:b7:47:aa:20:b0:3e:
09:b3:05:1c:1e:65:1e:cf:62:f1:29:7d:5e:a0:d6:68:e2:c3:
65:15:d1:37:67:08:89:e1:28:d7:4d:7a:af:3d:b8:2a:43:18:
50:13:74:17:8f:70:5b:02:36:f8:72:b5:13:1b:0f:c7:50:68:
91:09:de:b8:30:31:19:47:3d:1b:9f:53:f4:70:72:f5:09:1c:
16:f4:f5:38:f5:8c:c9:66:a1:bc:60:e6:a9:9c:ea:74:95:ae:
7d:c2:82:ac:ed:30:7a:3a:ca:eb:15:51:5c:c6:61:6a:83:aa:
d0:4b:30:f3:c1:dd:a0:14:2b:3c:63:65:4d:5b:c7:60:92:7d:
a0:90:a4:98:6c:90:f6:78:10:24:d5:9f:66:f2:56:77:5e:44:
8c:38:e6:80:e4:1f:f6:97:01:d8:d8:eb:00:5e:b4:2c:5a:04:
45:2b:c4:47:82:0d:fd:0e:94:b8:ea:f7:88:66:e2:fe:64:91:
75:7f:54:fa:b9:62:15:3c:05:01:ee:92:fe:c1:ae:be:a6:50:
33:5b:23:50:c8:15:7e:9d:c7:f3:74:4a:36:5a:e4:60:ed:32:
50:ef:a8:ac:86:75:40:27:57:60:11:ba:33:c7:be:74:e4:86:
04:93:cb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:58:00 2025 by rpki-client