Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
File: Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft (raw, json)
Hash identifier: jbS8wrKrKSl173rUsDl71o3vTSwYOJs3XAc8JYu7FPg=
Subject key identifier: 8D:7D:0B:8E:CA:E5:FA:3C:0E:59:B2:0E:01:05:70:27:B0:E9:E1:30
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Certificate issuer: /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial: 01978B477422DEF91039215FB4B1C2EFFD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
Manifest number: 159A
Signing time: Fri 20 Jun 2025 03:00:05 +0000
Manifest this update: Fri 20 Jun 2025 03:00:05 +0000
Manifest next update: Sat 21 Jun 2025 03:00:05 +0000
Files and hashes: 1: 1Cpy8hReysvqo6rJK2S7mrGPkKE.roa (hash: D4UL2BT0SqLhRGOh0lwv2Oqr8FVnOBm4wqYMVb3RDbk=)
2: Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl (hash: Gc+kZK8oPCc1Jn+lGzam6VF0V4UngtUQz4xtWtdmmdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:47:74:22:de:f9:10:39:21:5f:b4:b1:c2:ef:fd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Validity
Not Before: Jun 20 03:00:05 2025 GMT
Not After : Jun 21 03:00:05 2025 GMT
Subject: CN=8d7d0b8ecae5fa3c0e59b20e01057027b0e9e130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ef:e0:2c:f1:b1:03:9f:a2:27:5b:47:67:19:
3d:3e:74:dd:4e:08:d8:28:da:3f:f9:7d:79:a5:29:
38:cb:c7:63:6d:8c:f6:3b:f4:f4:68:03:92:47:22:
3e:1b:77:72:be:ed:9e:b1:87:4f:68:8c:b8:e6:ce:
2f:19:38:46:c9:07:a2:8f:84:f7:90:07:f9:93:45:
c9:2f:2b:60:5e:5f:9f:0e:09:67:a5:3b:e6:cb:fb:
3a:77:df:9f:af:a5:79:12:25:72:fe:8d:ef:57:8e:
e6:f1:c1:77:e2:08:ef:26:1f:6f:3f:2b:9e:6a:46:
09:14:51:b5:9e:19:b9:4e:6b:d1:5e:e3:8a:dd:79:
7b:82:9a:d2:3a:32:c3:c3:d5:8c:a6:21:dd:78:fc:
32:95:44:6e:81:24:5e:47:5d:95:3d:b5:92:68:8e:
30:0c:1a:dd:7b:a6:12:ef:d2:d5:0a:be:d9:2e:27:
7e:e0:11:f3:d5:c4:0b:98:b4:2a:71:f9:d0:dd:ec:
bc:eb:b8:0c:50:ff:44:81:b5:8a:1d:37:1a:18:a7:
d3:3e:91:7b:a8:1d:13:61:95:8e:e8:03:31:b9:32:
9a:28:12:96:da:5f:f3:a2:e3:8e:ba:46:0e:af:3d:
c8:a6:47:1f:5c:e6:c6:eb:95:ae:a6:e8:1e:7d:4e:
f5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7D:0B:8E:CA:E5:FA:3C:0E:59:B2:0E:01:05:70:27:B0:E9:E1:30
X509v3 Authority Key Identifier:
keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ef:8c:36:ef:9f:a8:db:37:7c:9b:79:76:96:a9:c1:0c:7b:
8b:c8:37:e1:c8:55:90:3b:e6:f6:4e:11:10:a4:6e:8d:6d:be:
e7:56:a5:57:5d:30:6a:11:98:e3:30:12:b5:24:a2:4e:78:38:
78:a1:e7:b9:23:31:b5:b3:6d:d5:76:22:62:c6:f1:e9:76:8f:
a4:5a:a6:b7:1f:c4:b1:fc:6a:aa:00:7e:92:4c:36:04:72:42:
fe:4d:71:17:4c:2d:5f:04:0f:79:10:3b:b7:d9:c6:66:7e:85:
f6:c5:84:ad:05:82:ed:99:9f:57:f7:e0:9a:ad:fd:67:8b:2c:
ab:ba:c5:65:48:f4:0e:26:fb:2f:01:5d:31:03:d0:c2:b2:b3:
b8:c8:d8:d6:38:dc:9b:df:a4:7f:36:8b:b5:cb:79:27:27:1c:
24:64:98:66:33:23:98:ec:bb:c3:24:e2:67:35:40:6b:ca:26:
db:74:65:2e:07:2a:35:d7:a6:12:8b:74:d7:65:9b:15:28:ff:
d3:d6:76:60:4e:84:d4:c5:e0:2a:dd:2a:75:d7:0d:83:5c:02:
d8:27:ab:e6:b0:4f:18:21:7a:00:cf:28:f8:40:5d:7b:92:c2:
2f:d0:62:34:94:2a:ec:5b:5c:09:6c:c1:59:8b:a4:4b:3a:a1:
c8:c4:84:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 06:47:07 2025 by rpki-client