Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier: 47YadB4RHzZ9VUSeemtn9plAI1hiFCGPfg4rSr97kEk=
Subject key identifier: CE:02:B7:FB:8A:AD:1D:2D:BC:8D:28:67:17:D1:E9:23:0F:29:96:9E
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 01992EC76E7C52302ABB54048BB5BFF095F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number: 0756
Signing time: Tue 09 Sep 2025 14:00:45 +0000
Manifest this update: Tue 09 Sep 2025 14:00:45 +0000
Manifest next update: Wed 10 Sep 2025 14:00:45 +0000
Files and hashes: 1: 8sYphYrrmRM_ErwAJ8gqIzEpDGo.roa (hash: rt/OwZDBbcaVJA7rLlh63ti0IkxjXIhkThQceeCTgkI=)
2: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: z5GLIvhawpBs6CjAoMwMXdjwO7HANXMQpr2IYlOa0n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:c7:6e:7c:52:30:2a:bb:54:04:8b:b5:bf:f0:95:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Sep 9 14:00:45 2025 GMT
Not After : Sep 10 14:00:45 2025 GMT
Subject: CN=ce02b7fb8aad1d2dbc8d286717d1e9230f29969e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:83:60:cb:0c:33:b8:5d:d0:d6:ca:ea:3b:
89:b8:fb:7d:fc:e2:a5:35:a7:71:95:10:e6:36:d7:
99:93:48:ab:a8:58:e6:9c:a6:ef:e7:7c:29:aa:32:
25:88:56:7e:de:a8:bc:32:fd:93:03:e9:4a:01:b8:
83:3e:75:1b:ce:b5:03:12:96:39:4d:00:2c:ab:af:
14:14:51:12:a9:58:24:0b:7a:0d:02:a1:c1:d6:e9:
1d:a8:f9:5e:da:e9:40:a4:5d:ed:82:a9:59:cc:b3:
56:83:d4:0d:af:d3:d5:49:98:e4:68:5c:2c:23:70:
c3:9d:cb:2f:c4:73:60:e6:61:d1:a8:48:29:67:9b:
00:0c:ef:cd:c5:28:74:28:4a:69:8b:3e:fb:23:c6:
34:b5:03:6b:ea:b1:d4:df:b5:55:a8:58:e4:9a:86:
8c:bc:51:a0:5c:9b:9a:5c:17:40:53:de:72:1d:00:
c4:23:96:65:26:eb:36:5a:7c:49:91:3f:aa:e3:17:
3a:88:70:72:41:88:e0:2b:fe:94:af:8f:c6:38:66:
db:43:42:8a:9d:79:fd:c3:b2:2b:7f:f0:4f:81:e1:
81:34:56:9a:95:b9:bc:09:49:b9:8f:16:ab:8c:2c:
07:3b:bd:86:83:d4:11:f9:4b:07:a0:b0:8f:c6:fc:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:02:B7:FB:8A:AD:1D:2D:BC:8D:28:67:17:D1:E9:23:0F:29:96:9E
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:73:a1:50:9f:32:a3:ca:51:91:94:03:23:68:e0:47:6a:d8:
ba:b8:5b:bd:41:45:a7:85:d6:0f:86:15:a0:31:e6:29:42:58:
5c:0f:fa:f1:36:9e:ef:bd:9c:89:5d:fa:51:28:20:c0:9b:a7:
a4:b8:14:92:af:aa:b0:85:2d:15:fe:be:76:e0:21:2a:a6:70:
20:6e:b8:56:fd:9a:cf:98:15:18:58:f1:83:7e:13:3a:97:05:
06:7b:a4:4a:ee:69:b6:b6:9e:ff:e0:37:cf:a9:ab:0f:73:20:
d2:00:a4:ed:84:cc:49:87:fc:89:64:b6:6a:9a:56:0a:4f:2c:
3b:14:39:2c:03:e3:a9:de:1e:8f:87:aa:95:c1:b5:15:c3:f0:
32:db:ac:42:06:39:4c:5b:66:ea:e0:35:85:39:ea:1a:11:e2:
0e:48:43:34:d6:78:84:43:0d:d6:51:d2:ce:af:a9:e4:78:e9:
bf:c6:6c:a2:1d:f0:10:06:a9:17:15:17:10:71:e2:53:7e:72:
5e:97:b1:5c:cf:a0:92:f0:94:20:ae:29:cb:17:4f:b1:4f:67:
b0:c4:a0:dc:16:68:85:77:8a:38:48:46:8f:d0:c1:1d:06:7a:
6f:c1:37:15:7b:cd:d1:5b:c3:5a:33:69:a9:3b:34:9e:c9:1f:
ca:a8:30:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:43:23 2025 by rpki-client