
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: b30TCI6jxSK7Of58CUuPIE7mEmHquZcHZEcMrQGXL6U=
Subject key identifier: 0C:F9:B2:AB:84:D6:C2:75:A7:DD:48:1D:02:3F:17:9E:9D:B7:63:94
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 01988F592A871F30BD91C4967A77B765E4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 15:00:42 +0000
Manifest this update: Sat 09 Aug 2025 15:00:42 +0000
Manifest next update: Sun 10 Aug 2025 15:00:42 +0000
Files and hashes: 1: 3BCTdWPdAwRCl8UX_2fwNUPfXDk.roa (hash: auwwYg2jmDefujiM9dhtcg3qGUezv1eAv9OXRPuNl5Q=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: ZflAK8pkgHMV4O58yQ7bm3j+Wg7YQc8+ovWQXW8oQu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:2a:87:1f:30:bd:91:c4:96:7a:77:b7:65:e4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Aug 9 15:00:42 2025 GMT
Not After : Aug 10 15:00:42 2025 GMT
Subject: CN=0cf9b2ab84d6c275a7dd481d023f179e9db76394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:29:69:31:a8:78:6e:e2:39:d7:94:15:6f:
24:09:db:c1:fe:86:ea:d8:8e:5f:d6:f8:bc:be:61:
f8:b0:4d:0d:3b:35:c3:f0:fb:91:e0:9b:45:86:b5:
2d:a9:64:06:a9:76:33:d9:f5:b4:fc:dc:40:88:03:
f9:d4:02:c5:ad:75:9d:35:84:de:57:0b:8b:05:a5:
db:44:57:16:25:16:99:fe:de:75:cb:87:c3:38:3f:
be:60:a1:bc:7e:01:40:16:53:4b:1f:06:36:c6:48:
89:73:6a:0a:77:85:92:1f:82:19:8e:33:51:d9:3f:
23:c3:5a:c0:b8:e5:bb:df:8d:02:7a:ef:4c:ad:ca:
67:ae:75:be:ba:87:0b:47:ac:91:b6:c9:0d:51:50:
45:06:a4:2b:b9:d9:92:a6:94:4e:dd:ae:3b:c4:b0:
ee:e4:b3:6d:24:8d:ba:dd:a4:47:49:b2:91:74:63:
c3:f7:e6:0c:d4:e8:4a:db:ed:84:99:5e:64:f6:7e:
1c:7e:55:f4:52:d8:dc:6c:6d:c0:fa:ca:d4:37:2c:
9e:58:62:92:03:b5:2b:67:f6:ee:60:77:67:b8:3a:
08:ce:ca:34:49:96:b2:90:2b:6f:68:56:70:3c:30:
7f:c0:5b:b5:55:34:ab:ac:5e:0f:3e:de:f5:d1:16:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F9:B2:AB:84:D6:C2:75:A7:DD:48:1D:02:3F:17:9E:9D:B7:63:94
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:96:8f:4d:4c:e3:9d:6f:e3:d3:9e:05:f3:a0:82:ff:72:5e:
11:74:12:53:a3:a8:e0:31:52:e9:40:44:6a:ce:05:65:7d:b9:
52:f2:44:1b:0b:bf:72:d8:81:06:f1:7b:3c:68:f7:db:c4:97:
98:2d:32:dd:13:6b:44:62:f4:5d:ff:74:c6:a6:62:c0:9b:10:
de:7c:bc:1c:5c:fd:90:c9:33:c4:c5:c6:aa:dc:40:47:4f:83:
e6:cb:1e:bc:7d:87:00:49:47:d1:ee:6c:87:53:15:5a:6c:df:
eb:41:e3:c3:4e:9a:4a:33:41:c2:03:eb:c6:56:fd:69:c0:78:
7f:83:3c:54:d9:5f:03:a3:f4:4c:ee:7b:7d:08:23:86:37:a3:
81:55:c5:29:a0:d3:2d:f4:22:5f:d2:a6:a3:0a:53:c3:7e:b9:
f6:e2:fd:18:94:3c:39:d0:df:40:9d:f1:f0:cf:c9:43:f0:e7:
13:f6:b3:7c:73:7d:2d:83:cc:48:18:d2:0e:cb:76:ed:e5:15:
e0:22:51:1c:49:9e:b7:db:f6:af:0a:9b:cf:24:33:c0:84:54:
de:4b:c8:71:8b:05:c4:a9:4c:6d:65:df:eb:d3:71:e5:ff:74:
66:a5:2f:f0:e6:72:89:75:d0:16:bc:e0:62:2c:89:9a:db:cc:
bf:73:c3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:09:42 2025 by rpki-client