Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
File: gwn4FzfW8X58GtWISa_3HFAGTwQ.mft (raw, json)
Hash identifier: mH5iJqQKtuL43JeevEOiK2Ks5CWW6HsF186HoZsEKv4=
Subject key identifier: A6:61:EB:C1:34:2F:98:31:21:75:04:8D:9A:B5:59:B5:F3:9A:23:59
Authority key identifier: 83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
Certificate issuer: /CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Certificate serial: 0198D4733714A15AE6E4DE31C52039CA9A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
Manifest number: 1430
Signing time: Sat 23 Aug 2025 01:02:57 +0000
Manifest this update: Sat 23 Aug 2025 01:02:57 +0000
Manifest next update: Sun 24 Aug 2025 01:02:57 +0000
Files and hashes: 1: C29j8BjW64hUTo90rvT2p7vncMk.roa (hash: z1gCCbWIlJIwgYs0Ud8cLUPoe3m6/PGlyP6Xd1WDnws=)
2: gwn4FzfW8X58GtWISa_3HFAGTwQ.crl (hash: u/Xk2IK6hAUMtqW0XFs8NNKTkXDgO7UQPvqMCC2WX3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:37:14:a1:5a:e6:e4:de:31:c5:20:39:ca:9a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Validity
Not Before: Aug 23 01:02:57 2025 GMT
Not After : Aug 24 01:02:57 2025 GMT
Subject: CN=a661ebc1342f98312175048d9ab559b5f39a2359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:57:ae:5a:73:74:53:09:c5:5a:d7:b0:cb:
db:a5:35:46:4e:0b:18:a0:db:27:56:c7:c7:1a:08:
6a:cb:b3:3a:f6:79:83:ca:c7:71:9a:c5:60:f4:5a:
4c:5e:df:c9:2c:42:78:f2:a4:02:23:8f:46:e9:a9:
c2:d6:ab:66:78:d1:9c:de:3e:f3:1a:e6:18:a2:e1:
53:61:b2:83:c9:33:0f:5c:db:b4:c9:2c:7b:9c:bf:
97:2c:89:99:89:bc:4c:57:3d:e3:86:09:74:76:84:
9d:6d:f7:6b:e0:3f:b7:7d:9b:14:96:58:a8:ef:e6:
ae:a0:a3:0b:74:44:a8:04:85:90:2b:f2:d0:8f:9b:
fb:d0:d6:fa:12:19:9d:de:58:3e:d1:54:f5:3d:ee:
cc:2b:98:c1:2a:39:db:0f:67:4e:89:5d:78:9b:2f:
c8:aa:35:a6:60:ab:83:33:e0:de:fa:5f:2e:b3:5a:
88:e3:a8:0d:46:ac:e2:e9:54:93:0c:c0:8e:68:23:
6f:56:8a:14:55:25:a7:7c:19:8d:e1:7b:a1:3c:9e:
e2:68:ea:cc:70:e4:53:bc:d8:84:e9:b2:2c:7d:53:
8b:87:4e:b5:9f:d4:04:33:0e:79:0e:51:ff:9b:24:
cd:59:aa:37:c0:79:1e:70:e5:84:04:83:14:02:23:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:61:EB:C1:34:2F:98:31:21:75:04:8D:9A:B5:59:B5:F3:9A:23:59
X509v3 Authority Key Identifier:
keyid:83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:61:47:4c:c9:30:37:d7:bd:e8:f9:69:4f:12:20:30:8b:d6:
2b:54:0e:b7:ce:02:d2:27:d8:ba:6f:21:e1:fe:03:9a:91:76:
ad:4d:2d:a5:79:63:f1:5b:d2:fd:ff:46:57:8e:53:d2:8d:70:
d2:31:6d:29:15:24:4f:0d:fc:60:3d:a7:aa:31:c4:f4:4a:a1:
91:30:75:09:42:28:bb:6b:e5:6a:6b:74:16:29:02:f4:1e:3c:
21:34:16:fc:6e:52:e8:1e:01:04:bd:4f:71:21:c3:0f:18:cc:
eb:59:bd:de:e6:3a:69:7e:5b:8d:28:96:49:fa:13:df:b3:31:
eb:4d:19:c5:03:fc:d6:71:9a:4e:ab:e0:89:3f:f1:86:21:57:
90:fd:94:6b:19:d3:62:b0:f4:4c:d8:a0:ba:c7:9e:74:d1:66:
71:6b:bd:48:e9:f1:01:3a:0d:3f:10:bb:03:f7:c8:7c:e8:6b:
9c:fb:ea:8c:85:c3:e7:96:f2:48:af:0b:39:de:48:5f:5a:d2:
79:e7:9a:54:2b:7c:3d:e7:6c:0f:ef:e6:00:c1:8a:32:61:87:
ab:a6:3b:a0:68:2e:5e:7d:59:86:7f:42:a3:1a:7e:23:dd:6d:
1b:0f:2d:ff:2b:e5:9e:96:69:30:43:f6:1f:db:6b:40:88:12:
0d:87:43:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:42 2025 by rpki-client