
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: mCnQ+5sFByE1WWSsvs2eH+48k0oVHBrwXzpD1hqwn/4=
Subject key identifier: C2:9F:CF:16:34:D1:EB:E0:E1:93:E0:6E:09:5D:B9:3E:68:63:82:77
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 0198733D95316B623E01AA82BAF448820A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 09D3
Signing time: Mon 04 Aug 2025 04:01:12 +0000
Manifest this update: Mon 04 Aug 2025 04:01:12 +0000
Manifest next update: Tue 05 Aug 2025 04:01:12 +0000
Files and hashes: 1: 0x8juoo7AM8ugf31uQycejLtims.roa (hash: sJQg/bbbZFsef+zbbHa9OzqRT4fumHdl0Xl81Is/6E0=)
2: Nzh8YLpNUF4cU0rzBjfGCERDcYE.roa (hash: i2B2OXXjCTbw2kGS650IvMFo0E46R+ycXmvCyPDbizQ=)
3: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (hash: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=)
4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: rgJKggobWiX5MjPW1GPr99ms9CkBoqVSPrxeAlS0mJg=)
5: i4pBlijYu7sjz616Su8j6sEp0KM.roa (hash: uHKnyOrHeN8Niu67x/4Qi3vMRGo0ABBXAuttwGbGRuk=)
6: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (hash: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=)
7: sizZNRJeMyfvZoIYAB6UC-zVc7U.roa (hash: Hn9xitBE6shoqbTIVL8aOgZmfrDePFpERxPmyPyqVEs=)
8: vywQrYyohPA7HiVpUnZvxi_OkIw.roa (hash: 9ddLtzX64XyzhFvBqGsy3QFMWw7/oarf8SrkFQVzpQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:95:31:6b:62:3e:01:aa:82:ba:f4:48:82:0a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Aug 4 04:01:12 2025 GMT
Not After : Aug 5 04:01:12 2025 GMT
Subject: CN=c29fcf1634d1ebe0e193e06e095db93e68638277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6c:ab:3a:37:e7:ea:f9:06:3f:39:5c:0f:93:
40:5f:0f:48:d7:ee:07:13:a3:95:1a:0b:b4:39:bd:
8d:8c:d6:e9:cb:21:a0:7c:75:fa:24:34:02:af:11:
d3:52:2f:82:aa:66:41:c0:38:94:88:aa:b3:d6:56:
ec:77:9a:ab:1a:fa:a3:14:8a:37:1b:f4:92:12:56:
c3:fd:22:21:c9:89:11:d9:27:55:de:e4:a5:5e:de:
55:19:19:5e:75:ff:1d:90:64:af:7c:90:9b:c4:0e:
ad:bc:76:61:77:e2:59:f7:e1:79:d0:71:11:0d:62:
25:c4:ae:80:2f:bb:41:5a:28:83:92:c9:a2:ba:20:
e0:9b:80:39:49:55:70:a7:25:02:78:43:1c:64:0f:
eb:0b:78:67:07:92:94:8f:61:2f:d9:75:16:3f:f4:
11:73:ee:3c:5e:0d:84:2c:09:bc:c6:59:16:74:d6:
66:4b:c3:67:e4:ed:8e:35:65:7d:a2:91:f4:c6:64:
ac:f4:3b:2d:41:07:36:90:79:b2:3a:cb:2f:85:e9:
e2:70:b1:dc:10:56:72:dc:36:87:de:8b:79:bb:bd:
c3:ff:c9:27:15:ea:29:fc:6b:55:dc:8d:4b:aa:f1:
e7:c9:60:28:8b:69:38:b9:fd:8b:11:5f:a2:d7:b5:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9F:CF:16:34:D1:EB:E0:E1:93:E0:6E:09:5D:B9:3E:68:63:82:77
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7d:3c:ca:fe:ff:0b:ac:ab:73:92:a7:78:83:4a:67:6f:b3:
a5:b7:f0:2f:20:f5:e5:f4:83:b2:26:10:0c:a3:01:35:5a:f0:
99:4d:dd:53:cd:f6:a2:2e:96:ee:7e:12:fb:9e:ec:a5:25:40:
61:5d:a3:da:48:b9:c7:c4:6c:d6:e1:cc:9d:d1:e4:4d:0a:44:
87:82:8e:d6:06:76:45:12:fe:82:91:97:19:56:5d:7f:81:f9:
3a:91:85:14:f4:56:e9:71:e0:c5:68:cf:10:5e:27:88:5c:b2:
c9:94:1b:ff:f7:e7:b6:56:08:a2:c2:cd:40:28:b6:58:f9:52:
a6:2c:42:b4:46:22:e3:ec:d1:97:7d:e3:4b:cb:52:a2:2d:6b:
19:19:4c:f8:4b:db:fa:ee:48:50:45:8b:18:87:0f:34:da:cb:
3b:99:61:be:d0:d4:f2:46:9d:a6:be:5b:6b:7f:54:4a:dc:f3:
f9:5b:ef:41:45:0b:af:39:05:58:47:99:29:4c:42:bc:67:81:
05:57:cf:10:85:33:f0:2c:15:0d:71:17:35:de:2f:24:c1:8d:
3f:b4:71:2a:f4:4a:f0:41:1c:b0:d2:35:ad:14:e2:32:87:c7:
2b:83:a9:70:ad:2a:83:46:d1:9c:a0:a5:e8:a2:ae:f2:a2:fe:
d0:af:5b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:59 2025 by rpki-client