Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
File: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft (raw, json)
Hash identifier: zWEukhAA9P9PliK3ZjPYbLNYIPveUbGI/GCuVFW1K6E=
Subject key identifier: FE:ED:34:08:1F:B5:CA:9E:DF:5D:44:CA:84:E5:C8:2C:4B:68:AF:51
Authority key identifier: 83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
Certificate issuer: /CN=83020637e89655e299d91843769254af07714994
Certificate serial: 0197B6A16861E0CEF93A8F01E210BBCC28BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
Manifest number: 0A1D
Signing time: Sat 28 Jun 2025 13:02:00 +0000
Manifest this update: Sat 28 Jun 2025 13:02:00 +0000
Manifest next update: Sun 29 Jun 2025 13:02:00 +0000
Files and hashes: 1: 1-R9Qf46XIEkfXqrQvwwzD2Tou7g.roa (hash: MQ5+3E8S339NrGygiORsr3A7NuJnR4bP2xWWIaK0oj4=)
2: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl (hash: M1H8EEVmWn2XgXPz2RUAHe5RH+uB1Z5Y+FAJdepdp2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:68:61:e0:ce:f9:3a:8f:01:e2:10:bb:cc:28:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83020637e89655e299d91843769254af07714994
Validity
Not Before: Jun 28 13:02:00 2025 GMT
Not After : Jun 29 13:02:00 2025 GMT
Subject: CN=feed34081fb5ca9edf5d44ca84e5c82c4b68af51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:bd:54:bf:4f:1b:53:db:16:a6:93:ae:d4:
80:a1:ad:ac:4e:2c:f3:44:a1:ce:26:b1:77:96:04:
c2:39:5b:1e:e7:90:da:5d:f4:71:3f:47:59:67:07:
10:e5:78:05:72:4e:3c:6a:23:23:5e:95:e2:d2:b7:
03:93:6c:50:e8:8b:c9:80:03:0a:7b:16:96:76:b9:
46:fe:f2:53:e8:5e:cb:df:9e:9c:c9:a8:1c:75:ef:
52:b8:f1:a1:69:95:77:77:28:9f:14:d0:16:7c:1e:
89:3f:a1:0f:95:e3:41:4e:16:38:fb:b2:73:57:7c:
4d:d9:2b:bd:36:48:1d:14:8a:94:71:eb:28:77:7e:
5f:fc:eb:70:d5:16:1e:eb:50:91:e3:0f:c3:4b:00:
53:f2:5d:ff:6e:b7:91:27:f9:6b:8c:a9:f4:b9:d1:
8b:8c:75:f0:f2:c7:71:62:7f:b4:9b:40:c3:8d:0f:
46:b0:c4:03:55:59:44:1c:95:6d:30:67:8d:b8:9e:
58:96:c0:91:0c:38:ab:9e:bd:4f:34:9b:27:32:2c:
9d:75:99:97:80:aa:5f:10:d1:69:0f:81:b2:e2:2c:
c1:b7:d6:d4:24:53:d8:25:60:62:6e:a5:1f:a5:dc:
7f:d6:6a:79:8e:73:c8:2d:9e:df:3c:f7:ac:dc:e5:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:ED:34:08:1F:B5:CA:9E:DF:5D:44:CA:84:E5:C8:2C:4B:68:AF:51
X509v3 Authority Key Identifier:
keyid:83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:58:cb:48:e2:8e:db:cf:69:c8:ab:2b:94:c2:ac:0c:9f:dd:
67:ce:52:54:94:6f:76:e8:ab:fd:2a:78:c6:30:0f:87:d2:a1:
0e:bf:4a:ee:61:88:da:9f:de:ff:0f:ff:36:ea:99:da:c2:97:
85:10:ff:54:ad:47:a7:b7:51:3e:e8:7e:d9:f7:f0:5b:f3:9d:
eb:63:73:9f:39:9a:09:fd:47:63:db:3a:6e:85:31:21:e3:c5:
cf:37:ac:f1:b9:df:a4:95:68:97:f1:85:60:e1:cc:bf:94:05:
6c:10:00:e4:57:62:6e:39:6f:8a:f4:d5:47:14:06:4a:56:3b:
cc:04:5d:68:cc:46:ec:37:9d:bf:f6:1a:2c:5d:e4:8c:f6:e5:
ef:d5:23:bc:92:33:0b:48:5d:0a:7d:f9:03:0f:95:b5:0c:3b:
4f:08:ca:7f:8d:eb:77:65:14:c2:dc:31:e8:cd:b0:39:fa:7b:
50:19:e3:a2:70:d9:c5:48:9e:cd:ba:36:0e:1c:f2:36:8f:0f:
76:4d:77:e1:f8:62:8b:3b:63:8d:3b:a5:4c:e8:ef:47:91:a0:
1f:02:29:a4:7a:d3:3d:97:00:3b:c6:e7:bd:f5:f4:8a:95:cc:
9b:e1:c3:fe:b2:5d:56:2b:dd:a9:46:49:e3:f8:48:1c:46:ee:
f5:df:b3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:30:50 2025 by rpki-client