Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
File: GiynpYOySXw2fp6G3rect6c3Wkc.mft (raw, json)
Hash identifier: 4SW129CqpcrAWIc9CHE4JU0nwIOQFTORcs+OTAU1xZw=
Subject key identifier: EB:4E:12:22:DC:D6:D2:24:FD:2F:C5:97:4F:75:6D:58:93:BA:83:70
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 01987373E3D6282013B8525C18ABB932E0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
Manifest number: 0CAE
Signing time: Mon 04 Aug 2025 05:00:31 +0000
Manifest this update: Mon 04 Aug 2025 05:00:31 +0000
Manifest next update: Tue 05 Aug 2025 05:00:31 +0000
Files and hashes: 1: Btc4qpdT0aRzIHC1dA2Swul-oTg.roa (hash: uKGbMNZQlHtPafIv0wdS9IBOfkHQ7RxwMz40Kx+7kY8=)
2: GiynpYOySXw2fp6G3rect6c3Wkc.crl (hash: CEwLW8dfnjVcsXg5Huq3Ilnn5BELvr2Is8mW8HAiN1g=)
3: LowqF6jNQcP5gUuUZPzdzSTRQ_E.roa (hash: MaL24Dedevc8MXN5LlmhfVbJ0dnqBAZxBiWzlel5CFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:e3:d6:28:20:13:b8:52:5c:18:ab:b9:32:e0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Aug 4 05:00:31 2025 GMT
Not After : Aug 5 05:00:31 2025 GMT
Subject: CN=eb4e1222dcd6d224fd2fc5974f756d5893ba8370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:3a:cf:60:22:75:cd:bc:ee:87:5f:52:79:
3d:51:c0:13:aa:f7:2c:9f:69:bf:45:f8:fc:45:07:
21:fb:c3:06:dd:96:32:8d:61:50:0b:fc:5f:a5:ac:
90:81:84:b3:ac:d2:a0:81:9a:ae:9e:00:33:6c:8b:
d2:04:ef:65:28:f9:d2:a7:cb:c1:92:cd:fc:d3:c7:
14:58:55:52:68:2f:ee:0b:e9:ad:de:f9:98:94:70:
92:6e:55:e8:d3:37:2e:8a:71:83:4b:be:6d:68:69:
c6:31:3a:0f:82:81:ba:cd:00:ba:63:99:27:40:82:
16:3a:e2:6d:c7:c1:29:9b:a6:85:7b:2b:d3:fa:d5:
03:53:21:93:1b:38:6b:ab:f3:39:0f:94:af:7e:dc:
81:df:1f:ab:d7:7e:02:a1:59:b5:c5:70:33:2b:4c:
14:f7:64:b2:9b:91:03:d9:96:9a:b7:89:78:48:79:
f6:6c:58:50:15:d3:9e:19:7a:09:a5:86:f1:90:84:
4f:5a:3d:18:93:4d:52:4a:37:1c:c7:87:4d:40:a3:
2c:5d:6d:92:8b:10:25:38:2a:37:ff:54:f4:e7:fe:
79:f0:31:cd:70:93:5b:81:46:38:26:d3:15:a3:a3:
99:23:64:80:ca:02:26:9a:00:41:d2:ae:40:ea:7d:
d6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4E:12:22:DC:D6:D2:24:FD:2F:C5:97:4F:75:6D:58:93:BA:83:70
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d8:d1:20:86:ab:d8:21:d7:d1:a0:0c:32:ed:9f:30:8c:d6:
25:f4:ba:d3:10:2a:8c:11:3a:80:2d:33:11:67:82:de:e6:c4:
21:80:50:72:e6:99:a4:bd:d6:0f:e5:07:e9:61:a2:e4:64:d9:
1e:54:f4:d9:13:42:b4:43:91:01:a4:02:6b:a4:98:23:ae:53:
37:c9:6f:7c:c0:f6:9f:f0:a9:4f:f8:6b:ca:0b:e7:11:1b:fd:
c3:b8:9f:b1:8b:9e:ae:93:22:e8:1f:f0:d8:b0:98:fd:c3:9f:
58:0c:a4:8a:c9:74:0d:ff:87:9e:68:56:6d:6a:7f:15:6a:51:
0c:36:d4:b6:4d:ad:f9:d7:a1:65:02:0d:14:07:6a:ed:98:b3:
35:0f:a1:61:87:27:29:18:6e:f9:93:dd:0f:98:6d:82:fd:de:
c1:12:c9:11:e4:2e:39:c4:a5:b6:02:32:94:7b:93:19:0f:5d:
b8:75:e9:9d:62:7a:63:80:57:ca:eb:e7:ca:c8:17:f4:f4:42:
52:02:aa:c8:4c:59:30:fa:3b:ea:5c:98:d5:9f:3b:e2:3e:24:
5d:e9:3f:53:63:21:07:d4:39:41:08:82:e8:21:02:5e:49:b2:
f0:ce:6d:6c:9e:70:8a:98:61:e0:68:61:ec:d7:50:a2:33:30:
74:f9:a2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:16:25 2025 by rpki-client