Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
File: Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft (raw, json)
Hash identifier: Z+c+ACOqhaCi/Zh9tq02Rmyf3j0VqR08PXKNJIYNj1I=
Subject key identifier: CA:A7:53:1D:B5:1D:65:75:B5:9B:4D:2F:5A:B9:B0:FA:0C:03:BD:BE
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Certificate issuer: /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial: 019891ECF7B27B9EB3CC9255A548EE212ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
Manifest number: 1622
Signing time: Sun 10 Aug 2025 03:01:22 +0000
Manifest this update: Sun 10 Aug 2025 03:01:22 +0000
Manifest next update: Mon 11 Aug 2025 03:01:22 +0000
Files and hashes: 1: 1Cpy8hReysvqo6rJK2S7mrGPkKE.roa (hash: D4UL2BT0SqLhRGOh0lwv2Oqr8FVnOBm4wqYMVb3RDbk=)
2: Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl (hash: L54WCvVwR8L+o2YqW12aLWKmoMaq+p2YJo+Uxuqq3nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:ec:f7:b2:7b:9e:b3:cc:92:55:a5:48:ee:21:2a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Validity
Not Before: Aug 10 03:01:22 2025 GMT
Not After : Aug 11 03:01:22 2025 GMT
Subject: CN=caa7531db51d6575b59b4d2f5ab9b0fa0c03bdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:ad:33:25:0e:55:ee:41:ac:9e:86:29:20:
30:9f:db:c2:09:ae:95:2d:0f:47:89:09:01:fa:34:
b0:59:46:de:19:9d:c6:ac:b3:d2:00:35:f1:d2:15:
c2:af:31:08:95:80:4e:9c:7a:40:78:ae:7f:94:c5:
42:08:4f:94:20:69:4d:9e:2b:53:82:4f:4e:7c:6b:
f7:d9:80:ed:7b:d1:a1:6b:76:f5:bc:ac:c3:67:ef:
2c:d3:ce:19:2e:25:ed:2f:07:f3:41:97:38:29:91:
db:b7:e0:27:0e:18:2e:cd:de:0d:04:47:02:26:cd:
00:91:00:d0:5c:2e:21:ce:ac:0d:cb:85:99:61:b9:
fd:1e:0e:d5:c9:cc:56:ce:4c:0c:ef:00:22:2c:0f:
10:d7:dc:32:dc:f6:10:e2:4f:67:0f:4a:0f:9f:27:
8f:05:11:29:29:64:18:e6:de:a4:4a:e2:aa:0e:65:
3e:9c:56:6e:49:a3:fd:94:ca:ec:fe:a7:e4:c3:7f:
1a:2a:f4:ac:12:ca:98:53:5b:99:17:a0:10:72:b4:
62:fc:bd:b0:a8:dc:b3:e1:41:03:2d:d6:e4:ef:80:
e8:31:0a:54:5c:fb:45:e8:fa:01:86:a4:2f:e8:3a:
bf:46:fa:85:16:3a:43:4c:40:6a:a7:15:2f:80:1f:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A7:53:1D:B5:1D:65:75:B5:9B:4D:2F:5A:B9:B0:FA:0C:03:BD:BE
X509v3 Authority Key Identifier:
keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9b:ad:93:0d:ab:aa:91:d5:e0:e1:24:36:99:3b:7d:1f:7c:
92:86:0b:97:d8:5f:e2:5d:6a:b1:bf:08:92:e4:4a:e3:9b:a9:
8f:33:58:2e:7d:39:e5:3c:5c:d6:34:ee:b0:39:d1:76:f1:1d:
a3:29:85:ff:3b:a9:40:68:0a:d6:03:8a:81:7a:9f:12:f9:75:
7f:cc:84:9b:0a:d6:4f:44:09:e1:e3:b7:f5:39:92:b1:45:eb:
00:14:dc:f3:61:29:90:0d:32:06:70:aa:3a:bf:f4:b6:14:5e:
cc:d5:a3:06:cf:b8:c4:2a:95:ff:05:80:bd:39:a5:fe:25:c1:
55:aa:b1:d9:bf:eb:e8:2d:3b:14:eb:92:2e:b0:c6:2a:68:c9:
d7:6e:f0:08:69:9c:d6:51:74:9d:5d:aa:30:c6:f6:62:d8:e9:
f9:ce:21:7c:0c:21:cd:39:80:65:83:3d:1e:fa:84:ae:b5:35:
d9:19:24:68:a4:ba:80:3a:ce:90:52:75:a7:25:b5:6f:d8:24:
be:45:18:6d:1f:42:7b:cc:03:6e:7d:c5:90:a7:97:51:c6:db:
b5:1b:16:30:ca:de:36:b0:92:48:3b:25:e4:9b:e2:5e:af:2b:
80:df:ce:a4:96:ab:24:17:e4:2d:1d:58:fd:13:f1:ff:f1:1d:
f6:3b:ca:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiR7Peye56zzJJVpUjuISrfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2NhZmRlMzEzNWEyNmJkZDQxNzkwMjllZWJmNzQxNGU5
NjQzYWYwHhcNMjUwODEwMDMwMTIyWhcNMjUwODExMDMwMTIyWjAzMTEwLwYDVQQD
EyhjYWE3NTMxZGI1MWQ2NTc1YjU5YjRkMmY1YWI5YjBmYTBjMDNiZGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfStMyUOVe5BrJ6GKSAwn9vCCa6V
LQ9HiQkB+jSwWUbeGZ3GrLPSADXx0hXCrzEIlYBOnHpAeK5/lMVCCE+UIGlNnitT
gk9OfGv32YDte9Gha3b1vKzDZ+8s084ZLiXtLwfzQZc4KZHbt+AnDhguzd4NBEcC
Js0AkQDQXC4hzqwNy4WZYbn9Hg7VycxWzkwM7wAiLA8Q19wy3PYQ4k9nD0oPnyeP
BREpKWQY5t6kSuKqDmU+nFZuSaP9lMrs/qfkw38aKvSsEsqYU1uZF6AQcrRi/L2w
qNyz4UEDLdbk74DoMQpUXPtF6PoBhqQv6Dq/RvqFFjpDTEBqpxUvgB+5KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqnUx21HWV1tZtNL1q5sPoMA72+MB8GA1UdIwQY
MBaAFBp8r94xNaJr3UF5Ap7r90FOlkOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR255djNqRTFvbXZkUVhrQ251djNRVTZXUTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82MmFmYmItYjhmOC00YjEyLTkxOTMt
MWM1MTA3Y2FiMzUzLzEvR255djNqRTFvbXZkUVhrQ251djNRVTZXUTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82MmFmYmItYjhmOC00YjEyLTkxOTMtMWM1MTA3Y2FiMzUz
LzEvR255djNqRTFvbXZkUVhrQ251djNRVTZXUTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVputkw2r
qpHV4OEkNpk7fR98koYLl9hf4l1qsb8IkuRK45upjzNYLn055Txc1jTusDnRdvEd
oymF/zupQGgK1gOKgXqfEvl1f8yEmwrWT0QJ4eO39TmSsUXrABTc82EpkA0yBnCq
Or/0thRezNWjBs+4xCqV/wWAvTml/iXBVaqx2b/r6C07FOuSLrDGKmjJ127wCGmc
1lF0nV2qMMb2Ytjp+c4hfAwhzTmAZYM9HvqErrU12RkkaKS6gDrOkFJ1pyW1b9gk
vkUYbR9Ce8wDbn3FkKeXUcbbtRsWMMreNrCSSDsl5JviXq8rgN/OpJarJBfkLR1Y
/RPx//Ed9jvKjg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:50:36 2025 by rpki-client