
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier: 4VbNIY9a9OtFa6mjdgx5z8mfyEz5iaWxZjn8WO0D5oU=
Subject key identifier: 89:4A:04:3F:D8:F3:86:32:96:C8:A9:D5:A8:76:D7:FD:17:89:0C:1A
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial: 01988C8F837BF5264C3F99CA45F94AE899BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number: 08AE
Signing time: Sat 09 Aug 2025 02:01:12 +0000
Manifest this update: Sat 09 Aug 2025 02:01:12 +0000
Manifest next update: Sun 10 Aug 2025 02:01:12 +0000
Files and hashes: 1: 7NcD3v3bTwDr9ocN3-x63vupO1g.roa (hash: HvV0nfI75827YQCzKbYVEWTCzA0c8O1WIDzuDKlaH5w=)
2: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: 3sHnS3o5dcY4U6Ej8UOhDiqSkFiOOVS3N/wHyc9jZsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:83:7b:f5:26:4c:3f:99:ca:45:f9:4a:e8:99:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
Validity
Not Before: Aug 9 02:01:12 2025 GMT
Not After : Aug 10 02:01:12 2025 GMT
Subject: CN=894a043fd8f3863296c8a9d5a876d7fd17890c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:85:35:fa:7e:4f:e6:a4:be:a0:09:45:2e:
e9:e9:0e:d2:bf:18:d1:41:e9:7d:63:5e:5b:dc:85:
54:b8:e2:ba:a4:67:dc:6e:fd:9b:3c:ff:f4:7d:8b:
e8:01:b3:03:d8:1e:22:cd:bf:f9:15:17:01:fc:2e:
ed:aa:2b:b8:16:e4:3c:14:91:69:31:72:64:5d:35:
a8:30:36:60:67:ee:d8:f2:32:94:21:b3:f9:10:54:
13:a7:91:31:93:9d:f2:62:8f:f6:66:00:ac:57:d0:
d9:ab:83:2a:f7:b0:6c:4c:80:60:ef:e2:11:99:c9:
10:ab:68:a4:b7:3c:44:f6:83:d3:a4:5a:3e:7c:b5:
f3:7a:e3:95:c7:de:cf:a2:b4:38:a8:99:d6:cf:85:
98:d8:13:b1:52:13:7f:96:97:3e:3f:bd:de:26:26:
26:ba:44:fb:b3:a2:2b:b1:30:c3:cf:98:92:db:53:
5c:ad:74:fa:1a:e8:ed:26:22:a5:1b:6b:b8:cc:68:
02:8c:0d:ba:de:fc:f2:af:1b:90:11:49:33:b1:68:
cf:42:96:9d:22:1a:b9:75:32:97:b8:cf:82:73:12:
e1:a0:67:96:54:3d:3f:ba:e2:5f:5d:c5:a8:40:d2:
9e:df:76:61:a3:ad:78:47:35:ad:1d:bc:06:a0:bc:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4A:04:3F:D8:F3:86:32:96:C8:A9:D5:A8:76:D7:FD:17:89:0C:1A
X509v3 Authority Key Identifier:
keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6e:02:1b:41:ee:46:a1:1b:b1:52:fd:2f:28:3c:89:8e:94:
d4:49:b0:88:e0:17:5b:d9:67:ac:f8:27:8d:e8:dd:fb:5f:84:
4f:07:e5:23:20:f8:c8:9c:a2:40:84:02:a8:57:13:6c:81:e1:
17:10:af:de:68:ad:a4:f8:97:4b:91:4f:5e:34:85:07:5d:2e:
ae:6c:b9:f4:1e:b4:79:c0:5d:5c:00:17:a3:05:26:53:47:3b:
a4:7d:97:52:3d:54:29:30:15:00:69:f5:5e:2d:2b:12:02:b3:
e8:f9:fa:c5:3f:62:26:4f:75:bc:c0:ea:b4:ed:44:98:da:32:
a6:71:84:f1:56:bd:59:0d:e3:3a:5e:02:26:b5:10:29:0a:03:
9a:82:0f:92:22:2a:d0:d1:56:f1:56:fa:08:d7:8a:e8:35:77:
2d:92:20:4e:17:ae:5b:83:ef:9d:04:68:4c:3a:1b:ca:3e:66:
7b:f5:e6:ad:85:90:7b:59:76:f3:1a:db:f9:cc:bc:b1:c7:30:
61:e4:b5:46:c3:ea:1e:24:5e:aa:b4:de:64:a6:bc:7b:4e:c8:
6b:25:c1:35:1f:db:cb:f1:17:ac:8f:55:e6:66:07:51:a0:14:
99:14:0f:83:51:54:53:7d:23:25:f1:9a:2b:be:e4:bb:9e:a5:
4c:81:03:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:43:00 2025 by rpki-client