Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
File: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json)
Hash identifier: eIJmb7fTjmEjNpiKT7TtLHeuMPdjROJZ/1mrnOaxW2M=
Subject key identifier: 33:AD:F3:E8:86:31:5F:59:3E:7C:E7:DE:22:B0:EA:89:B2:E6:FC:43
Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
Certificate issuer: /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Certificate serial: 0197B7EA48CEA8B61DD0EF3718D5D336DD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
Manifest number: 0149
Signing time: Sat 28 Jun 2025 19:01:13 +0000
Manifest this update: Sat 28 Jun 2025 19:01:13 +0000
Manifest next update: Sun 29 Jun 2025 19:01:13 +0000
Files and hashes: 1: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: eZFXZZbzbWOHpjQWUOXjRPbMz7mWmGk1PTBoSPTQJIA=)
2: HbzqPjxV2gzVXrBA-nWLmjfTDxo.roa (hash: cWFkMXXdUpsLxuuBafoKiMAojPQ1C+2JXUGxa/p9/qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:48:ce:a8:b6:1d:d0:ef:37:18:d5:d3:36:dd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Validity
Not Before: Jun 28 19:01:13 2025 GMT
Not After : Jun 29 19:01:13 2025 GMT
Subject: CN=33adf3e886315f593e7ce7de22b0ea89b2e6fc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:6d:24:2c:79:7a:a0:7d:db:79:03:08:2b:
3a:d2:30:64:a6:e8:b7:0d:9f:7b:31:11:72:4d:31:
0e:77:1c:14:44:eb:be:e1:22:cc:9f:17:76:19:68:
79:d3:4a:c6:e9:db:c0:7c:87:73:4c:ed:d5:96:3e:
05:cf:5d:70:35:ad:3f:65:1f:5e:5b:f7:56:b0:d7:
51:69:53:5f:ea:77:da:94:4b:ea:10:92:31:3e:6d:
33:31:eb:06:b8:f5:63:45:b8:27:6d:48:61:a9:17:
9c:4e:56:83:70:f8:78:16:ad:6b:42:1c:ad:19:57:
4c:a3:68:9d:0f:dd:6a:31:05:1f:25:cd:b8:c7:41:
74:d3:60:71:39:89:55:2b:69:32:a8:62:6b:74:96:
d2:71:23:91:42:60:8a:04:ef:6a:2b:68:f0:69:68:
e5:e2:30:36:c8:56:d7:00:52:8a:e9:e6:84:18:7e:
2d:be:7c:a1:09:9d:78:dd:c4:4a:9d:ce:d5:bd:76:
fc:86:7c:7f:aa:f1:95:85:5d:0a:5e:c0:a2:11:14:
04:7f:10:b9:ab:73:60:8d:0a:41:66:3e:fb:09:3d:
bf:27:40:f5:99:06:f1:98:e3:40:57:10:18:6a:72:
8d:55:1e:49:0c:75:f4:b7:cb:cd:db:12:43:d2:00:
72:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AD:F3:E8:86:31:5F:59:3E:7C:E7:DE:22:B0:EA:89:B2:E6:FC:43
X509v3 Authority Key Identifier:
keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:94:6a:19:e4:fe:c3:89:e4:a6:60:f9:7f:d6:54:8f:1d:35:
fc:a4:64:60:a8:b5:3e:4b:16:47:dc:ec:92:45:af:e0:d0:03:
dc:fc:df:d1:b7:f6:17:6f:72:e9:39:50:33:90:b1:39:0c:71:
40:9b:9a:09:30:ae:8a:15:d4:6d:26:46:e1:51:99:a2:cb:e3:
a4:04:6d:a7:4b:03:ac:3f:ac:cb:d5:8f:11:20:7e:d2:1a:03:
6d:e9:4f:a9:6b:ed:7d:84:0a:98:33:43:28:a9:b3:7e:1d:bf:
45:36:f7:6e:83:24:41:dd:68:ef:94:97:13:ce:71:fd:5c:9a:
47:10:d4:45:a9:5a:3c:ac:e8:51:45:a1:55:2d:1a:31:d9:af:
8a:64:14:04:c8:81:d8:86:0b:43:35:1f:47:37:ee:23:be:73:
db:4b:b7:83:69:a6:06:cb:cc:ad:49:83:38:5f:46:6d:eb:0c:
c0:ca:c5:93:15:97:4c:b4:8e:ee:b5:04:e4:c8:28:c3:15:00:
59:35:8e:51:f1:da:7c:e9:ab:c2:7c:01:e0:3d:e0:9d:57:2d:
71:d3:c0:b5:64:9b:f3:2c:77:51:31:f4:47:eb:8a:93:5a:dc:
f8:14:94:04:81:f6:b0:f4:09:aa:17:ea:7e:1d:e2:da:25:ce:
61:f6:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:39:39 2025 by rpki-client