Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
File: gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft (raw, json)
Hash identifier: hxt5dLWj5FVcQhGO5lJE8znH8Acf9jLQH/jfjdToFRw=
Subject key identifier: 09:22:33:90:91:02:50:D1:82:0A:D4:F9:F5:D9:09:81:3A:EC:5D:4D
Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
Certificate issuer: /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Certificate serial: 019874BE52C347EE86BB8BEDCDD5F4E8899F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 11:01:26 +0000
Manifest this update: Mon 04 Aug 2025 11:01:26 +0000
Manifest next update: Tue 05 Aug 2025 11:01:26 +0000
Files and hashes: 1: 1GcdqVYrNeFzAfzIvWc1uwT98aA.roa (hash: 4uQf4DSwbX7BKGTdoGDfjY+9K4u0Qbg5gbpIHJoyB/8=)
2: gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl (hash: v/0w26Spgr6XO4mJ6XeJVtpRuCFy1I0kCr1j0fpSt/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:52:c3:47:ee:86:bb:8b:ed:cd:d5:f4:e8:89:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Validity
Not Before: Aug 4 11:01:26 2025 GMT
Not After : Aug 5 11:01:26 2025 GMT
Subject: CN=09223390910250d1820ad4f9f5d909813aec5d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:a3:2b:d7:2b:ae:53:c8:85:88:f1:e9:56:
19:0e:f8:81:7e:c3:84:73:54:a3:0c:d6:52:bd:37:
43:c3:27:bf:fe:84:61:c1:85:23:f3:74:72:40:29:
ff:18:07:1d:ce:b8:10:36:5c:9c:06:6e:1e:37:bc:
ab:d2:d9:d5:58:c8:75:d2:f0:05:8f:84:53:f8:1b:
f5:69:9d:82:05:f8:35:9a:88:c3:9c:af:57:30:16:
88:b4:7f:f5:65:ca:30:ac:03:1c:66:ab:b8:4b:f8:
9f:2c:c3:e4:69:b1:b6:21:48:a8:17:b1:56:92:4e:
5c:83:e5:a5:c1:f9:a4:da:e5:d5:9b:51:f3:8e:fe:
e1:78:e5:e8:28:95:55:44:95:43:19:0c:2d:1d:c2:
3b:21:a1:ca:41:a1:ce:e8:46:2b:e4:fe:81:c5:07:
bb:50:3f:ea:10:d2:6e:3b:f1:94:4d:5c:a7:6b:e5:
df:5c:c0:eb:28:78:f7:db:e2:db:7f:ba:12:df:df:
f4:51:63:10:38:cd:95:e8:29:86:62:4f:da:be:49:
b7:16:af:fc:62:46:19:50:43:12:99:da:69:10:51:
12:22:68:4c:60:d2:fc:33:cf:34:e2:d4:1a:5a:d9:
2c:b1:e8:4c:1c:d6:49:5f:32:68:d3:41:03:a5:d5:
e3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:22:33:90:91:02:50:D1:82:0A:D4:F9:F5:D9:09:81:3A:EC:5D:4D
X509v3 Authority Key Identifier:
keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5c:d8:00:72:66:33:de:e5:9d:e1:07:98:ef:de:26:f1:69:
6e:fd:2b:bb:8e:6a:cb:9f:b4:b6:23:35:3b:da:92:96:3d:47:
3f:7f:e1:b4:5f:b2:c6:5d:a9:02:5b:ec:2f:cd:e3:a4:43:2e:
33:c7:65:66:4d:92:e7:8c:75:39:c2:bb:cb:c3:c3:54:20:cd:
14:1d:80:2b:58:14:8c:44:6d:c6:7b:e1:44:94:72:1d:fa:13:
b9:2c:f0:02:cc:4c:dc:17:65:50:60:a0:3a:31:29:6f:d5:57:
38:a9:b0:87:e6:6c:9e:5f:67:9a:00:87:49:6f:44:91:9b:f7:
e0:a4:c1:ee:15:51:b8:60:75:f3:c1:83:df:bc:73:c0:45:fd:
6e:97:85:ff:7c:d8:2b:56:e9:16:25:66:04:40:dd:86:1f:96:
d6:bf:24:3e:ec:79:b5:a2:9b:fb:00:50:1d:17:9e:c1:d7:16:
37:9e:7c:0f:98:a5:f4:24:0b:b8:76:58:3c:ab:d2:8b:88:16:
bc:18:de:9c:b4:a0:3c:8a:0c:da:20:98:8a:aa:fc:d1:46:39:
1d:6c:80:42:fc:37:b2:51:f3:a9:93:3f:1f:c4:0a:eb:c9:2e:
5a:d4:0d:9b:41:24:1e:08:b1:a8:39:de:4c:ac:23:ee:0c:15:
8f:ec:55:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:02 2025 by rpki-client