
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
File: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft (raw, json)
Hash identifier: eXDY6QZuitn3optgLPbhIvfI70SxG8pEcFAV34CIZKc=
Subject key identifier: 82:57:C4:4E:83:3F:63:5E:9A:D4:7A:3B:4E:5B:7C:A2:5F:30:34:D5
Authority key identifier: 83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
Certificate issuer: /CN=83020637e89655e299d91843769254af07714994
Certificate serial: 0199FBEAC59B995B22C65C2CB8333912E408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
Manifest number: 0B4A
Signing time: Sun 19 Oct 2025 10:01:31 +0000
Manifest this update: Sun 19 Oct 2025 10:01:31 +0000
Manifest next update: Mon 20 Oct 2025 10:01:31 +0000
Files and hashes: 1: 1-R9Qf46XIEkfXqrQvwwzD2Tou7g.roa (hash: MQ5+3E8S339NrGygiORsr3A7NuJnR4bP2xWWIaK0oj4=)
2: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl (hash: x0niox6eym5FjDPFROaqWhjxaSNyul031E3MNZTalfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c5:9b:99:5b:22:c6:5c:2c:b8:33:39:12:e4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83020637e89655e299d91843769254af07714994
Validity
Not Before: Oct 19 10:01:31 2025 GMT
Not After : Oct 20 10:01:31 2025 GMT
Subject: CN=8257c44e833f635e9ad47a3b4e5b7ca25f3034d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:09:21:c6:e5:22:16:fd:30:ba:2d:87:4e:
48:58:cf:ef:36:ed:e6:d0:9d:dc:66:5d:1f:b0:39:
ea:23:fb:36:df:71:38:6d:7d:4f:7f:5b:37:c9:f7:
ed:d1:25:8f:2e:21:00:51:83:e5:27:72:8a:05:5d:
9b:10:3e:98:e4:9f:da:99:3d:70:85:20:d2:07:59:
1e:bd:61:e8:7f:82:4a:a0:9a:9a:ee:07:94:6f:93:
bd:48:67:74:83:94:de:a4:7b:89:82:9b:f4:d6:5a:
24:c5:85:b3:13:37:83:bc:f8:51:c9:06:12:26:7a:
97:d4:3c:16:05:ce:77:21:5d:e6:5f:a7:eb:81:13:
96:71:55:05:aa:85:02:b8:c0:c1:6b:2c:a1:0e:f4:
f1:9e:79:43:44:56:f8:16:6f:9c:2b:c9:88:73:ab:
05:52:62:2f:80:75:9b:bf:1d:02:70:3e:bf:b5:f8:
4f:72:fa:54:30:c4:19:2d:0d:f6:fe:2d:0a:0f:50:
75:26:fe:85:03:38:32:53:ec:8b:96:d2:ca:0d:bc:
5b:56:fa:f3:1f:31:fe:a0:24:0a:2b:1b:6f:53:64:
58:e0:94:be:63:f0:70:6d:57:43:1d:35:f8:2e:57:
eb:87:06:dc:49:5f:a6:e6:c6:dd:0f:fd:d5:a9:f9:
16:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:57:C4:4E:83:3F:63:5E:9A:D4:7A:3B:4E:5B:7C:A2:5F:30:34:D5
X509v3 Authority Key Identifier:
keyid:83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:22:29:a2:4a:d7:b2:7f:3d:8e:6e:8e:dc:a0:11:b9:e1:d4:
63:1d:ec:d7:c8:41:06:20:64:e2:b7:58:90:62:bb:87:bc:c4:
c9:9b:8a:0b:3e:57:b5:90:bc:5b:45:50:d9:7a:8e:dd:21:cd:
26:6d:8d:b7:57:b1:54:23:31:bf:74:c5:b1:1e:3b:70:11:47:
5f:f0:58:e1:0f:b0:7e:f1:67:2b:13:47:f0:a9:db:f1:e0:0e:
0f:23:8a:14:f2:d9:e7:f3:c5:91:6a:86:80:9f:c2:32:a2:cb:
d4:f3:64:7b:88:a9:55:56:12:2f:76:a3:ba:8a:25:8a:48:28:
d6:91:c7:e7:1e:28:23:c4:a1:12:5b:1e:87:a3:b9:aa:5f:47:
01:25:03:cf:40:dc:86:90:2d:27:d5:a0:7b:21:95:35:77:be:
05:86:d0:b7:a8:25:91:06:45:b7:f6:d8:f8:b2:52:a2:11:b2:
d6:7f:62:5c:36:de:58:30:b9:f8:5d:95:f7:7d:81:0c:a9:30:
cf:c1:5e:27:1e:e8:6f:67:28:5a:18:1d:b1:cd:2d:fa:b9:88:
ab:7e:00:fc:49:5d:f6:7f:c3:3d:7a:ca:00:6f:4d:a4:7f:28:
e7:1c:a3:73:aa:c5:91:ba:87:e0:9c:ea:3e:2e:8d:10:43:6d:
44:d3:04:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76sWbmVsixlwsuDM5EuQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDIwNjM3ZTg5NjU1ZTI5OWQ5MTg0Mzc2OTI1NGFmMDc3
MTQ5OTQwHhcNMjUxMDE5MTAwMTMxWhcNMjUxMDIwMTAwMTMxWjAzMTEwLwYDVQQD
Eyg4MjU3YzQ0ZTgzM2Y2MzVlOWFkNDdhM2I0ZTViN2NhMjVmMzAzNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA074JIcblIhb9MLoth05IWM/vNu3m
0J3cZl0fsDnqI/s233E4bX1Pf1s3yfft0SWPLiEAUYPlJ3KKBV2bED6Y5J/amT1w
hSDSB1kevWHof4JKoJqa7geUb5O9SGd0g5TepHuJgpv01lokxYWzEzeDvPhRyQYS
JnqX1DwWBc53IV3mX6frgROWcVUFqoUCuMDBayyhDvTxnnlDRFb4Fm+cK8mIc6sF
UmIvgHWbvx0CcD6/tfhPcvpUMMQZLQ32/i0KD1B1Jv6FAzgyU+yLltLKDbxbVvrz
HzH+oCQKKxtvU2RY4JS+Y/BwbVdDHTX4LlfrhwbcSV+m5sbdD/3VqfkWnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJXxE6DP2NemtR6O05bfKJfMDTVMB8GA1UdIwQY
MBaAFIMCBjfollXimdkYQ3aSVK8HcUmUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MjFkMTItZmU3YS00ZDk0LThmYTkt
YjJiZmFjM2IzMjA0LzEvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81MjFkMTItZmU3YS00ZDk0LThmYTktYjJiZmFjM2IzMjA0
LzEvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViIpokrX
sn89jm6O3KARueHUYx3s18hBBiBk4rdYkGK7h7zEyZuKCz5XtZC8W0VQ2XqO3SHN
Jm2Nt1exVCMxv3TFsR47cBFHX/BY4Q+wfvFnKxNH8Knb8eAODyOKFPLZ5/PFkWqG
gJ/CMqLL1PNke4ipVVYSL3ajuoolikgo1pHH5x4oI8ShElseh6O5ql9HASUDz0Dc
hpAtJ9WgeyGVNXe+BYbQt6glkQZFt/bY+LJSohGy1n9iXDbeWDC5+F2V932BDKkw
z8FeJx7ob2coWhgdsc0t+rmIq34A/Eld9n/DPXrKAG9NpH8o5xyjc6rFkbqH4Jzq
Pi6NEENtRNMElw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:02 2025 by rpki-client