Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
File: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft (raw, json)
Hash identifier: jGFvVF8MsnfPTc2UtuEMVCaIpjBe4ljUJRDfJnyTvws=
Subject key identifier: 77:51:90:24:84:89:42:64:DA:47:52:DF:58:1C:BD:38:C8:67:DA:3E
Authority key identifier: 83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
Certificate issuer: /CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Certificate serial: 0198D5F1A63CBFB651CC97F649F7B71F6132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 08:00:40 +0000
Manifest this update: Sat 23 Aug 2025 08:00:40 +0000
Manifest next update: Sun 24 Aug 2025 08:00:40 +0000
Files and hashes: 1: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl (hash: ELSeQW/HOy6wGRwUxuBPgPMGNLtdyR9+xPCkQhtOr7E=)
2: rqs2jYsXIEmeZSer38OOcJGK7EU.roa (hash: m+TNUwZvlDUtkC5/TwdymkZwjEw131NWG7VhMWfXmRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a6:3c:bf:b6:51:cc:97:f6:49:f7:b7:1f:61:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Validity
Not Before: Aug 23 08:00:40 2025 GMT
Not After : Aug 24 08:00:40 2025 GMT
Subject: CN=7751902484894264da4752df581cbd38c867da3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:03:90:3e:6e:67:be:de:c7:a5:87:f7:88:
33:1f:60:ad:dc:3f:a2:3e:47:73:b3:bf:c5:b7:91:
9f:db:fc:9b:e7:ba:b6:e2:3e:ab:57:02:09:2a:12:
18:c9:c6:83:67:6d:85:57:88:56:38:4b:f7:5c:e3:
65:39:54:75:b5:9b:1b:82:e9:e2:35:a9:d6:b8:cc:
b1:e3:9c:0a:9d:34:98:2c:82:93:60:af:99:8d:d5:
94:64:0c:b4:99:3d:0d:22:69:59:fa:a1:95:34:2a:
28:b2:84:e2:f9:24:d0:2f:d1:71:e1:7c:a3:04:cf:
b4:a6:de:02:33:65:81:f8:ea:78:c0:42:f4:1c:4d:
b7:f4:6e:bc:e3:16:28:51:65:2f:6f:bc:74:ad:b6:
c2:13:3b:fa:b4:42:14:27:42:df:4f:5b:c0:b4:7a:
ab:51:de:ab:e1:69:30:95:3d:d4:50:6a:0f:5d:06:
91:42:ca:a6:27:1f:b7:cf:01:35:2d:70:dd:16:1d:
5d:5e:84:fb:67:f3:25:98:d3:01:4f:83:8f:8b:8d:
16:b4:05:a6:b2:89:ee:03:d9:c8:d2:7f:6a:32:7b:
15:1e:9d:15:a7:d0:64:7f:28:73:fe:65:43:12:4f:
1d:68:2f:80:16:1e:4f:af:4a:4c:c8:9f:76:fb:94:
dc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:51:90:24:84:89:42:64:DA:47:52:DF:58:1C:BD:38:C8:67:DA:3E
X509v3 Authority Key Identifier:
keyid:83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:13:6e:f2:91:9e:d8:42:9a:eb:ce:30:09:6a:66:9f:28:19:
10:00:3e:59:29:71:0d:15:46:43:b6:72:d0:ec:2e:6a:41:fb:
da:02:85:62:ae:15:5e:b9:b0:20:db:f6:64:33:a3:f3:e0:d0:
48:62:10:15:0c:1c:66:bd:88:fa:0c:fc:05:91:b0:3a:87:e7:
c3:94:60:05:45:11:43:ad:30:75:94:e5:0a:ac:8e:a8:4e:f0:
20:ca:fa:c8:c9:6c:ab:de:65:d2:c2:3c:b5:ca:d9:56:52:ee:
34:a9:24:54:69:ec:e7:69:b9:6f:0c:86:f8:7d:cf:6c:eb:d1:
73:50:27:b7:50:46:0e:7a:a1:2f:8e:e4:b9:df:70:01:c1:8c:
98:bf:01:3a:18:3c:0c:34:aa:2c:6d:bb:ca:b7:93:b4:5b:69:
40:f6:de:45:fe:04:5e:e8:63:44:c3:c3:31:a1:42:cd:e7:88:
db:80:80:b0:86:74:ed:db:84:25:88:78:ae:94:0a:c9:ee:70:
5b:a6:82:f8:24:c0:26:41:75:f0:ac:1d:1e:ce:cd:79:fa:bb:
4c:ec:ee:6e:6b:a4:ff:46:1c:b7:8f:20:f0:f3:3e:e2:8f:09:
78:e6:0f:b8:23:29:88:91:fd:29:1a:fa:66:7b:a1:d3:08:1a:
9b:73:df:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:54 2025 by rpki-client