Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: tKt6a2jLGe+aZib3cCmgFAyDUQNgUNGsItmWvonJEXk=
Subject key identifier: DE:31:18:C6:9A:55:19:6C:2B:29:1E:15:69:8F:12:40:F8:A3:5E:FE
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 01993E047131A6D989889920336EB6A41295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0A3C
Signing time: Fri 12 Sep 2025 13:01:42 +0000
Manifest this update: Fri 12 Sep 2025 13:01:42 +0000
Manifest next update: Sat 13 Sep 2025 13:01:42 +0000
Files and hashes: 1: 0x8juoo7AM8ugf31uQycejLtims.roa (hash: sJQg/bbbZFsef+zbbHa9OzqRT4fumHdl0Xl81Is/6E0=)
2: Nzh8YLpNUF4cU0rzBjfGCERDcYE.roa (hash: i2B2OXXjCTbw2kGS650IvMFo0E46R+ycXmvCyPDbizQ=)
3: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (hash: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=)
4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: YIR3eIhqXJ0wakuBUgufaVqO6Jho4FlDC/nBygr97To=)
5: i4pBlijYu7sjz616Su8j6sEp0KM.roa (hash: uHKnyOrHeN8Niu67x/4Qi3vMRGo0ABBXAuttwGbGRuk=)
6: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (hash: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=)
7: sizZNRJeMyfvZoIYAB6UC-zVc7U.roa (hash: Hn9xitBE6shoqbTIVL8aOgZmfrDePFpERxPmyPyqVEs=)
8: vywQrYyohPA7HiVpUnZvxi_OkIw.roa (hash: 9ddLtzX64XyzhFvBqGsy3QFMWw7/oarf8SrkFQVzpQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3e:04:71:31:a6:d9:89:88:99:20:33:6e:b6:a4:12:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Sep 12 13:01:42 2025 GMT
Not After : Sep 13 13:01:42 2025 GMT
Subject: CN=de3118c69a55196c2b291e15698f1240f8a35efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:e6:08:7c:51:8f:30:ea:b2:aa:c6:76:3b:
a2:6e:3f:f3:d1:09:14:91:61:1d:4e:06:aa:dd:2a:
3b:ea:3b:9f:bf:85:ff:a3:d4:ac:cd:af:2a:f2:79:
bb:76:3e:78:09:3a:6f:c3:43:a0:32:34:b0:2f:70:
97:d1:1f:32:36:a6:e2:f6:9b:69:89:64:4f:a9:05:
dc:f2:ce:4d:f3:fe:32:ae:ec:df:af:32:8e:f7:8a:
72:86:c5:17:c3:e1:12:a2:5d:37:6c:28:33:d4:80:
17:3f:53:1f:c4:dc:4b:d7:04:13:37:e4:23:bf:b1:
e1:3e:b8:bf:10:26:fc:82:04:a8:b1:48:d4:ea:a9:
6b:57:46:61:b0:b0:41:a9:21:03:0e:b5:65:33:71:
13:c2:98:53:03:7e:12:3e:e3:a9:57:a5:bf:6a:9d:
f1:7a:93:be:cd:e7:02:31:90:77:3a:80:ad:ee:3a:
20:4f:5e:84:bb:7b:56:26:59:7c:39:9f:ab:f1:d0:
07:6e:56:fa:78:f5:fd:71:b2:fb:75:9d:f7:75:85:
4b:aa:5f:bf:4a:1b:41:37:e4:62:e8:06:a6:e9:4e:
78:12:c9:2a:49:fb:b0:c8:49:b5:7e:b3:c3:86:fc:
d7:de:03:47:75:c7:e8:f1:6d:14:86:1a:54:61:d5:
70:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:31:18:C6:9A:55:19:6C:2B:29:1E:15:69:8F:12:40:F8:A3:5E:FE
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:35:ab:d1:bf:ac:1c:4e:c1:4c:89:f1:0f:fa:9f:da:28:22:
ea:f7:7e:79:c6:86:d8:7e:86:14:b0:16:8b:13:74:fe:28:24:
f7:a5:e3:a7:dc:6e:41:66:07:4d:0f:d1:f5:0b:c8:87:1c:0f:
5b:b1:07:67:eb:bc:3e:f7:18:61:a7:65:64:ac:42:b2:e9:b3:
a5:e5:e3:90:af:c4:95:2d:a5:5c:2d:cd:95:6f:4f:c7:a9:82:
6f:35:d5:70:1d:c6:24:8b:76:87:a7:a7:95:0a:49:0e:0f:31:
4b:bb:5d:50:d7:58:c3:da:93:27:b5:bf:30:7a:50:e9:b9:0f:
f3:0d:74:0b:b6:91:82:b7:87:9b:a0:1e:33:97:65:86:51:98:
7f:0a:4f:a8:ff:65:de:d6:65:21:37:b7:3c:57:7c:b1:fc:a2:
38:d9:e3:ca:af:49:f8:74:d9:2d:c8:40:c7:20:52:46:ec:61:
af:1c:92:85:29:10:d8:60:d4:be:1b:53:39:63:68:9e:ec:f0:
f5:e5:f3:72:15:7f:60:b4:e4:f3:c3:77:24:32:d3:ca:3f:ad:
da:34:38:2c:5c:7d:31:4a:d6:cb:29:04:3f:83:6f:0c:4c:d8:
a2:3f:48:c0:56:93:29:f1:1d:b2:2a:b2:8a:40:00:4f:26:db:
d8:2b:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 17:26:05 2025 by rpki-client