Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier: tqkpc9GIGhOAc7NBMP4rcY7I79Ek3Fatwdv17c0FQvs=
Subject key identifier: 71:AB:4C:92:2A:C1:49:B1:47:0D:9A:BC:D1:D9:72:FA:C2:8E:93:0A
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial: 019A4E4FCCEBDD7D2C7281FA3D99DB26235C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number: 0997
Signing time: Tue 04 Nov 2025 10:00:43 +0000
Manifest this update: Tue 04 Nov 2025 10:00:43 +0000
Manifest next update: Wed 05 Nov 2025 10:00:43 +0000
Files and hashes: 1: 7NcD3v3bTwDr9ocN3-x63vupO1g.roa (hash: HvV0nfI75827YQCzKbYVEWTCzA0c8O1WIDzuDKlaH5w=)
2: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: EAXzovMBDrGCKlpQ7Pr37RY2q/y/MQFMtxJPKByUd/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:cc:eb:dd:7d:2c:72:81:fa:3d:99:db:26:23:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
Validity
Not Before: Nov 4 10:00:43 2025 GMT
Not After : Nov 5 10:00:43 2025 GMT
Subject: CN=71ab4c922ac149b1470d9abcd1d972fac28e930a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:d2:73:b9:58:ee:ae:c2:dc:7c:c5:c7:f2:
eb:d1:bc:d9:b8:03:03:13:5e:39:e5:aa:56:35:d9:
52:96:77:fe:5f:f3:77:77:0a:66:01:ad:0e:81:44:
81:c6:97:6e:22:2a:07:0f:02:2c:68:3c:8a:53:76:
e4:7a:ea:18:8c:da:9a:7e:30:57:b8:a0:dc:7f:fc:
06:6b:a2:89:01:77:d3:63:55:43:d3:4a:0e:5c:24:
22:6a:e4:db:d2:1c:fe:3a:77:b6:59:56:f3:89:f9:
6d:ea:2f:05:95:59:d9:97:75:b4:06:4a:b5:11:07:
c2:0e:af:73:59:de:e6:f2:eb:4e:86:d2:59:4a:be:
64:b4:f9:3e:e4:c6:5b:50:b6:d9:61:5d:35:48:a2:
3d:57:93:fe:9d:2f:11:a4:3c:96:5f:55:6b:74:b0:
bc:42:cb:4f:f3:6f:7a:f1:48:c1:8f:97:39:6a:cd:
de:78:e7:e4:4a:c6:18:be:b3:7b:7d:45:83:cd:ec:
92:95:eb:fb:3b:09:88:5f:28:1e:34:cc:44:62:1e:
30:6d:f9:a5:a0:a5:22:04:67:b8:e5:91:59:88:b6:
86:2e:c9:92:ad:8f:d2:64:a6:34:e0:0b:a0:c2:4f:
3d:6b:8f:d8:a5:fc:37:68:15:68:c0:2c:94:7e:5b:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AB:4C:92:2A:C1:49:B1:47:0D:9A:BC:D1:D9:72:FA:C2:8E:93:0A
X509v3 Authority Key Identifier:
keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:01:02:51:ba:e0:28:d3:43:0d:06:67:2c:6f:a9:09:93:c5:
b0:2f:19:e6:02:e7:34:c7:6e:c4:69:cc:89:21:8a:1e:43:85:
d8:15:98:e3:60:59:8e:3b:c9:14:72:f6:3f:38:91:5c:89:92:
18:45:b9:87:4f:80:d5:88:94:a5:3d:ca:ad:1a:54:44:aa:db:
96:64:47:10:ba:27:5a:68:dd:32:15:85:2f:59:30:94:97:12:
d1:d0:42:d4:50:f6:00:76:d9:33:d2:ee:72:36:69:40:7d:ba:
7f:be:75:6a:84:d8:04:17:60:e2:8c:97:7b:44:17:c0:ba:a7:
e9:40:ed:84:10:cc:87:59:a4:88:c1:5c:d6:4e:ec:9d:a4:d7:
de:e8:a3:a5:0f:13:79:ab:95:e4:97:2a:b6:98:4f:a9:f7:7e:
07:14:c1:0e:36:97:fb:90:e7:30:b6:e3:56:f0:0b:e2:ed:eb:
6f:a6:e4:49:e6:f7:44:8a:cd:86:79:ec:f0:f6:13:73:17:01:
68:50:a0:1a:d5:8b:2e:91:87:e5:1a:ed:cc:b0:a5:5b:30:57:
fa:ae:46:ad:5f:3e:97:dd:2c:df:6e:08:e3:ea:1d:e4:da:48:
d1:15:90:c6:39:61:32:5d:bf:03:0f:84:0a:fc:12:7b:e1:40:
a4:8c:a5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:23 2025 by rpki-client