Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft
File: gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft (raw, json)
Hash identifier: GznH6UTqxfHiAur4nsqm0XTas21/aawXw3rK/VmEoMQ=
Subject key identifier: 6A:7A:61:05:34:AE:B6:F7:77:94:CF:D4:13:4D:B1:F3:C4:E6:3C:27
Authority key identifier: 83:03:A4:CB:23:84:C2:07:DD:37:37:F0:92:4F:A0:8E:93:28:2D:06
Certificate issuer: /CN=8303a4cb2384c207dd3737f0924fa08e93282d06
Certificate serial: 0199FB0F18D4F61B6884CFF971F1EF1452BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft
Manifest number: 8C
Signing time: Sun 19 Oct 2025 06:01:34 +0000
Manifest this update: Sun 19 Oct 2025 06:01:34 +0000
Manifest next update: Mon 20 Oct 2025 06:01:34 +0000
Files and hashes: 1: 2iWfeMriZFi-G_hS_QOYTqRzYCk.roa (hash: 03ngKG8f9ygpR1m9XSjIdbVbs0jTiLlbaTIDCyi4ZJU=)
2: gwOkyyOEwgfdNzfwkk-gjpMoLQY.crl (hash: iN/ys5UPfrO/FjED3AsN9w7ncj4WUYAOdXZ6UdXa6f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:18:d4:f6:1b:68:84:cf:f9:71:f1:ef:14:52:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8303a4cb2384c207dd3737f0924fa08e93282d06
Validity
Not Before: Oct 19 06:01:34 2025 GMT
Not After : Oct 20 06:01:34 2025 GMT
Subject: CN=6a7a610534aeb6f77794cfd4134db1f3c4e63c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:66:ad:fa:47:0e:37:2e:0f:46:1c:19:82:
e6:f1:0a:cc:fa:ab:da:de:b0:88:a0:5d:92:ca:4c:
ed:83:c5:f8:d1:b9:78:1c:93:23:cc:e9:3f:b7:54:
c3:84:af:26:97:c7:df:d0:c3:30:01:49:15:66:b7:
11:23:ee:22:54:3c:3e:b7:63:e7:9d:12:4f:e1:33:
4e:56:d3:a7:67:58:96:16:39:27:16:a2:d8:e9:30:
dd:ba:c2:e8:82:26:32:b7:48:3c:7b:e3:12:04:30:
77:50:4a:70:21:06:46:ca:d5:55:f5:0d:c0:fc:fc:
9d:65:99:03:b3:1e:52:b9:19:40:dc:fc:ca:09:1e:
2f:7b:22:5a:8d:f2:86:50:c2:fd:b6:a3:5f:39:99:
ea:36:6f:8a:26:07:d6:69:e9:68:8f:b9:86:66:67:
0e:ca:ed:51:f4:06:c4:05:69:08:af:d5:58:01:4a:
0b:4c:bf:20:06:57:55:53:b4:ba:bb:d6:c9:87:81:
38:e1:24:5f:3f:75:4d:dc:ff:25:c6:65:81:02:13:
05:35:bd:fe:a7:1e:2e:09:1c:59:fc:31:be:8e:75:
5d:6b:90:aa:33:84:0c:e2:cb:68:f6:71:d3:b8:9f:
c9:a1:4e:79:30:31:3e:70:15:5f:e6:fa:6b:62:50:
f1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7A:61:05:34:AE:B6:F7:77:94:CF:D4:13:4D:B1:F3:C4:E6:3C:27
X509v3 Authority Key Identifier:
keyid:83:03:A4:CB:23:84:C2:07:DD:37:37:F0:92:4F:A0:8E:93:28:2D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwOkyyOEwgfdNzfwkk-gjpMoLQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/577eae-3f3d-4d3f-9c07-f019db2acca8/1/gwOkyyOEwgfdNzfwkk-gjpMoLQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ae:d5:d1:52:17:c8:96:2b:d7:4a:d6:f1:48:08:6c:d6:5b:
dd:47:18:c3:13:6c:b7:ed:e8:93:cb:01:43:15:99:63:f8:48:
35:fc:86:dd:ac:9a:64:e6:e7:59:4f:29:b6:3f:ec:97:23:34:
da:c4:a7:0d:47:ab:83:3d:80:59:31:25:a8:04:9a:47:1e:82:
32:7a:f8:97:2b:4c:d0:5c:a2:42:b1:b8:36:68:67:fa:56:0e:
29:a7:a4:b2:99:17:c4:1f:36:fc:a1:0d:f5:68:67:c4:57:d2:
4a:cb:2f:85:f7:47:7d:30:e9:31:c9:38:63:87:77:d2:d2:f0:
20:8c:3c:41:c3:c1:1d:34:de:99:c3:bd:78:4d:4c:9f:d0:d9:
35:9b:33:07:1e:c2:0b:b5:e9:e0:e8:8d:a9:13:c2:c1:c1:45:
15:7d:f5:bf:05:16:29:08:fb:ec:7f:e7:b7:b1:ad:5f:f5:0a:
15:bb:9a:94:ce:77:3a:1d:2a:07:35:b1:e9:75:1a:67:5c:a6:
fe:bf:47:4a:ae:c7:02:a5:dc:a9:cf:7b:a0:b1:b3:b9:0c:d1:
ce:db:81:fb:2f:3b:77:45:54:5b:30:e7:15:9e:bf:13:2b:2b:
73:e6:70:af:df:ed:ec:70:c0:10:32:35:4e:1c:6d:db:35:8e:
15:b0:7b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:13 2025 by rpki-client