Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
File: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft (raw, json)
Hash identifier: JwMYIrprqVgv4LUcjoJUtmMpa/19LnD5Spga4BWoyDk=
Subject key identifier: B7:CB:6A:5B:91:A3:71:3D:FE:BD:15:36:D1:5F:F0:B0:48:E2:EE:27
Authority key identifier: 83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
Certificate issuer: /CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Certificate serial: 0197B820EE45608AD1DC27D89DE341932511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 20:00:55 +0000
Manifest this update: Sat 28 Jun 2025 20:00:55 +0000
Manifest next update: Sun 29 Jun 2025 20:00:55 +0000
Files and hashes: 1: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl (hash: es0VgUgdjxZ6Ze+IHJ/sD6k6jhzKxs4UyEldRH4pujw=)
2: rqs2jYsXIEmeZSer38OOcJGK7EU.roa (hash: m+TNUwZvlDUtkC5/TwdymkZwjEw131NWG7VhMWfXmRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ee:45:60:8a:d1:dc:27:d8:9d:e3:41:93:25:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Validity
Not Before: Jun 28 20:00:55 2025 GMT
Not After : Jun 29 20:00:55 2025 GMT
Subject: CN=b7cb6a5b91a3713dfebd1536d15ff0b048e2ee27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:81:c2:3a:dc:2b:1b:d3:4c:7e:ad:8c:3d:
b3:dc:81:b8:98:5e:06:9a:82:a7:23:e1:9b:6f:41:
44:b7:18:c3:50:1b:07:eb:0a:e9:0f:23:30:5c:62:
10:d2:57:36:c6:93:a1:bd:bf:2d:2a:12:39:b3:b1:
da:c6:06:67:d5:ed:57:a6:d9:ed:0d:28:58:db:5b:
c4:d1:56:3c:83:4d:df:c7:88:7d:22:95:20:31:37:
a0:06:35:34:bd:ac:d8:39:e8:6b:c5:b8:d5:79:c8:
d3:54:65:e5:a0:68:9c:7c:d1:cb:a5:84:38:42:5a:
20:5c:d3:40:16:bb:28:92:ed:f3:f2:0d:44:86:09:
98:f6:25:b7:8f:89:31:84:0e:26:f1:d1:b0:8a:4e:
ae:51:8e:ce:08:d5:63:40:bb:69:23:7c:52:b6:84:
0a:b3:72:1f:12:9c:62:dd:98:4a:48:a6:d3:77:95:
6a:1a:9a:43:4b:fa:0a:d2:9b:29:20:8c:e5:71:32:
cd:68:17:a8:67:ed:57:51:ec:81:66:59:c2:e0:8b:
94:88:23:8b:5a:d2:b1:94:1c:79:11:9f:bd:4a:1d:
e2:26:93:f6:b8:a6:a7:2d:55:6b:23:4f:27:f0:53:
c2:ff:31:81:b8:25:c5:44:75:84:12:f8:48:1e:93:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CB:6A:5B:91:A3:71:3D:FE:BD:15:36:D1:5F:F0:B0:48:E2:EE:27
X509v3 Authority Key Identifier:
keyid:83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f7:d4:58:76:b6:75:4e:b5:fe:99:a2:76:e1:22:60:e5:f1:
1f:73:35:93:15:dc:fd:0e:79:57:96:c0:d4:74:71:00:9a:a9:
13:ea:f6:19:70:b2:bd:58:2f:bb:23:db:7f:b9:86:cd:d4:17:
7e:e8:7d:bb:2f:4a:b0:7f:37:35:14:a4:1e:5f:87:27:a2:11:
1b:b5:03:fe:39:fc:c6:77:2d:dd:f3:51:14:f5:f2:d3:43:d4:
87:5d:f0:9d:5d:47:0d:54:80:d6:b2:1d:14:23:e5:c0:eb:d6:
f1:5b:24:30:cc:a8:ee:ae:f9:63:dd:1c:55:79:f7:5e:ed:c3:
8c:57:81:58:c9:19:fa:b8:ed:bb:d6:68:74:0f:2d:f8:d7:a9:
b5:c9:b8:ad:a9:21:9d:b5:c4:ae:18:4b:ca:f3:77:bb:07:7d:
88:d4:0c:8a:6f:76:64:ff:bf:a0:a9:71:77:9e:fb:d6:80:73:
25:01:14:6a:4b:87:a9:1d:85:31:ac:7f:43:01:8f:e9:bb:37:
a5:e9:84:aa:0c:9f:2c:52:16:7a:34:14:70:64:e3:62:7f:60:
93:9d:eb:b2:12:6a:a2:5e:9f:d2:6b:27:7b:05:c1:4e:82:87:
ed:f3:8a:5f:d4:71:97:ed:17:d5:34:19:a6:a2:25:c0:dc:bd:
51:84:f0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:12 2025 by rpki-client