Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
File: gnrxfwSZYn5LPIzFwzPsS452NeA.mft (raw, json)
Hash identifier: 2ak8jEqQCvoS/x/nGOECdrlMtE0L9upX/GQzEI0YYpU=
Subject key identifier: F7:ED:7A:FD:31:23:C3:EF:EC:AE:0A:32:85:DC:FA:2C:C8:CB:55:23
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 019875D2529DF6C9602F9BE03CE177F6D397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 16:02:54 +0000
Manifest this update: Mon 04 Aug 2025 16:02:54 +0000
Manifest next update: Tue 05 Aug 2025 16:02:54 +0000
Files and hashes: 1: OSPVEMKxRvS3K2S9RynwSClpPy0.roa (hash: I2dq/kcaAdZwjzuTK1RJZZE0wsjKNorsCYjqSblF2e4=)
2: UqiuKqTQR1pyHUIwfSaJuTVkwgM.roa (hash: /daQ84/IlyKQccK8HNvLp9yZzU3eH5Tw2SuorEVY8WU=)
3: gnrxfwSZYn5LPIzFwzPsS452NeA.crl (hash: 3aLcxkL7FX6+8QZGNj6Oq/h8p7KeFD6zwz+naHrq1+s=)
4: hg2Ps6LFSparyJWx3GTYmUPm3pA.roa (hash: QXdyI8bAesp03A33q/sHoHZRnlP3monnDF28zjvU5M8=)
5: uQl0h3i3b202uiSsE2ql_r0wnXQ.roa (hash: RIkzFeAhN9PoylnIf3cZdxJ8xVemWn5y0Bu19U5kI84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d2:52:9d:f6:c9:60:2f:9b:e0:3c:e1:77:f6:d3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Aug 4 16:02:54 2025 GMT
Not After : Aug 5 16:02:54 2025 GMT
Subject: CN=f7ed7afd3123c3efecae0a3285dcfa2cc8cb5523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:a2:c3:0e:67:98:1c:56:93:f0:5f:14:3a:
5b:45:65:7f:b5:c3:27:62:8b:22:6a:0d:d5:ce:58:
d3:8f:13:71:ed:0c:fe:38:bc:98:8c:14:11:a0:87:
a6:cc:d8:c7:49:8f:9b:cd:ce:72:ea:71:1d:ba:fb:
0e:7c:ae:e9:3c:0e:ce:df:ac:2c:84:12:a7:45:a9:
01:40:bd:cd:a7:f7:9f:13:b0:aa:b0:45:f0:99:dd:
28:e1:a6:ab:ae:73:a7:21:3e:5f:23:d6:61:04:81:
f8:fb:98:b0:35:e5:24:b0:8f:4f:0f:10:8f:c8:fc:
e7:7a:fd:91:93:df:6b:8c:8a:8f:19:b2:38:b7:ff:
56:b0:72:9a:cd:a6:3c:11:d3:55:b8:d3:b3:f9:7b:
6d:46:bb:bb:d3:cc:3c:0d:0e:ff:2e:4a:bb:8c:1e:
89:e5:f6:06:bd:8b:52:b1:49:dd:ed:54:86:ec:b7:
3e:d0:84:28:68:8c:59:84:b2:96:88:73:c0:a4:ee:
e7:bb:92:05:fa:ed:c3:d0:ff:93:18:c3:8c:c3:7d:
ab:4c:b5:b0:9b:37:1a:bf:5a:54:61:ed:be:60:74:
27:90:c9:87:6f:14:d9:5a:6f:e4:44:de:1f:7f:e9:
1a:90:03:9b:19:8d:78:14:91:cf:8f:e8:a9:07:74:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:ED:7A:FD:31:23:C3:EF:EC:AE:0A:32:85:DC:FA:2C:C8:CB:55:23
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:49:af:fa:fb:12:f6:1c:da:d0:e8:8a:3e:2f:2f:4b:c9:7e:
cb:83:60:d8:65:72:6b:59:6e:7d:d3:48:18:18:be:35:d8:9e:
ec:97:62:a2:2d:d5:9d:b1:cd:05:c9:6d:e7:e1:65:28:7e:a4:
47:d9:2d:6e:76:72:38:58:6f:a0:17:f0:3a:e1:ba:a2:ab:09:
cd:6a:8b:07:92:a1:c3:f6:f6:21:6c:87:e2:77:f4:5f:98:22:
bb:60:ef:91:8a:6b:87:4d:06:81:66:6b:58:e9:f7:65:11:21:
75:79:4c:87:9f:2e:e1:d3:2e:a5:80:c0:2c:d6:e5:c7:6a:05:
ce:9d:c3:0c:c4:42:94:95:f3:c8:5c:69:7c:54:ba:8d:d4:cd:
1f:85:1f:25:05:5c:08:95:63:c2:c6:71:4b:b7:36:ef:e5:b7:
81:61:18:b6:c5:f0:c1:0d:e1:67:1d:11:8a:38:02:8d:d2:72:
59:a9:fa:b7:56:86:e1:35:67:3e:76:14:b2:51:00:8c:1a:04:
4c:7c:b8:65:6b:4e:6d:0d:bc:0c:9e:9d:36:6a:41:a1:86:de:
5b:11:9e:ba:18:17:d4:fd:c4:e3:d2:85:27:5e:36:a8:38:a8:
0b:e6:dc:27:f6:c9:83:80:96:fd:e6:e6:54:ad:c1:83:b5:da:
7d:6e:6d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:37:16 2025 by rpki-client