Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
File: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft (raw, json)
Hash identifier: lUyFcJEFGpGjCm9oR8Z298KpEUkEUsnAlvEYVC1t73k=
Subject key identifier: 70:68:94:96:6E:70:BC:2A:E9:41:70:A7:89:42:89:38:94:74:7B:1D
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 0198857A925442F4321BD95F613BE811894F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
Manifest number: 1141
Signing time: Thu 07 Aug 2025 17:00:59 +0000
Manifest this update: Thu 07 Aug 2025 17:00:59 +0000
Manifest next update: Fri 08 Aug 2025 17:00:59 +0000
Files and hashes: 1: Z2JXPb5aczBq6WmK_sd6hX6UoF0.roa (hash: k+SlRJ8Eg3Sd/kSZfZH8+gupJSBpD7AMqyYcN2gXnJ0=)
2: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl (hash: 1ydj2qdMX7kZYdswG3XBxZbUQGH4XGS6Xkd3A4OtRHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:7a:92:54:42:f4:32:1b:d9:5f:61:3b:e8:11:89:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: Aug 7 17:00:59 2025 GMT
Not After : Aug 8 17:00:59 2025 GMT
Subject: CN=706894966e70bc2ae94170a78942893894747b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:53:4f:9a:59:47:7f:87:1a:b1:ba:3a:73:
37:b5:82:83:07:04:07:fd:af:df:59:0b:96:b5:22:
4c:a2:9f:18:d0:b5:99:f0:3c:44:9c:34:68:d2:52:
c6:27:c5:f8:4c:ef:da:c3:e6:97:e5:44:4b:30:35:
5a:01:2d:92:09:6a:d3:8c:8d:12:f7:82:55:12:c8:
09:7a:21:bb:09:ee:48:76:2b:60:a6:cb:ae:b8:3a:
42:68:e7:5d:26:dc:05:aa:52:5d:59:48:9e:2a:53:
bc:e0:94:20:2e:de:f2:e3:60:5c:76:ea:c4:2f:5a:
72:ac:8b:fa:4a:8f:92:62:cf:96:72:14:4d:d5:b6:
06:9f:62:cc:4d:94:76:f7:0b:4b:e8:c4:60:cb:87:
9d:27:b3:b5:eb:92:53:50:96:74:b8:53:1d:b6:7c:
c2:ec:fc:ba:12:60:eb:a0:ef:5d:34:8d:ef:84:4e:
75:40:e4:91:b2:3f:60:e8:2c:90:5c:94:69:9d:ac:
f7:e0:b7:44:1c:a0:e9:f9:80:21:3a:c1:e8:c2:9d:
40:d0:3f:a7:c4:dd:7a:c4:5f:b3:cd:3d:a2:92:ba:
cf:16:b9:1b:1d:5e:e4:77:26:3b:6e:b8:a9:f2:a4:
7e:71:b1:e6:5d:19:e4:ec:32:9d:97:c8:6c:74:91:
f8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:68:94:96:6E:70:BC:2A:E9:41:70:A7:89:42:89:38:94:74:7B:1D
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cb:61:c9:af:cb:6f:bb:d7:ba:ca:01:da:8c:f9:19:6e:32:
be:be:49:9b:c6:23:ca:28:fd:67:ea:f3:06:ef:e4:59:c4:dd:
20:cd:26:c8:34:15:33:46:1a:20:f1:93:b6:c1:ad:14:0a:b3:
0a:2a:3a:9f:74:7c:51:27:a2:9b:01:74:37:80:06:37:45:02:
76:5d:32:bb:c2:5d:ea:93:89:4c:b1:23:38:b1:66:4f:9a:99:
e0:1f:4f:72:fe:45:75:c1:e2:89:11:cc:1d:28:38:0e:64:28:
1d:0c:5d:d9:69:81:cc:f3:c1:d2:43:04:f8:f1:06:18:f6:81:
dd:a7:f3:39:6a:c5:be:42:07:96:b7:30:55:d0:5c:ab:cf:56:
8d:83:b5:24:89:00:fb:d4:77:1d:98:51:57:40:02:30:ab:76:
d3:f6:95:03:78:45:f0:04:83:3b:11:3c:22:2c:72:b7:03:6e:
0a:41:6d:af:4b:d9:29:dc:8a:03:ed:40:60:b6:78:6b:72:71:
11:17:cf:e8:15:6d:f7:ac:38:cc:00:c8:54:4e:b7:b3:ea:35:
d3:1a:42:a8:38:82:95:6e:4a:97:f1:b8:10:cc:bd:e8:c8:ff:
ce:03:6a:6a:9d:b2:cb:55:6a:58:eb:ea:50:87:97:18:ce:e8:
54:df:43:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:41:08 2025 by rpki-client