Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
File: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft (raw, json)
Hash identifier: ph7lewCkOQJWxPdMXEtVmpm5G7EnOS5icY3Ph1ASnkk=
Subject key identifier: 94:33:F9:6F:74:BF:07:99:5B:E4:B6:E6:05:42:73:3B:EA:FD:19:55
Authority key identifier: 83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
Certificate issuer: /CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Certificate serial: 019A0711E2B6A33D06244F22D6242EE06DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
Manifest number: 16E6
Signing time: Tue 21 Oct 2025 14:00:03 +0000
Manifest this update: Tue 21 Oct 2025 14:00:03 +0000
Manifest next update: Wed 22 Oct 2025 14:00:03 +0000
Files and hashes: 1: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl (hash: W2IpM8vLxf1OtSUdFOOzACxJfKAhwTyUwuNLUkqvGdM=)
2: rqs2jYsXIEmeZSer38OOcJGK7EU.roa (hash: m+TNUwZvlDUtkC5/TwdymkZwjEw131NWG7VhMWfXmRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:11:e2:b6:a3:3d:06:24:4f:22:d6:24:2e:e0:6d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Validity
Not Before: Oct 21 14:00:03 2025 GMT
Not After : Oct 22 14:00:03 2025 GMT
Subject: CN=9433f96f74bf07995be4b6e60542733beafd1955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:5c:64:19:36:ff:ee:29:43:1f:35:3b:16:
c9:02:a2:5a:92:93:dc:80:a1:02:c8:a5:a5:d5:ae:
41:46:eb:6e:5b:09:f0:15:f0:ad:09:fe:7b:fd:9a:
08:c5:e2:da:dc:10:7a:49:18:d6:bb:6b:02:f1:8d:
1e:7a:7a:d0:56:34:26:b0:1b:fc:9e:8b:04:22:99:
70:ec:a6:db:9f:68:1f:07:45:fe:49:87:3b:d1:7e:
c4:8c:fc:5c:f3:b2:1d:0c:89:09:c6:94:9c:33:3a:
c4:86:10:29:b1:a1:c2:5d:05:00:b3:95:58:07:02:
5a:95:e0:e2:80:56:d1:41:71:54:4d:77:da:71:ed:
a5:41:3b:46:4a:96:68:ad:b9:1e:fa:24:33:c8:c9:
0e:59:5e:7e:0f:d4:19:03:c2:34:5c:ee:dd:47:97:
93:7f:93:24:c3:6d:f4:e9:b4:7a:a5:46:ea:67:f4:
e5:54:b3:84:d5:44:f0:e3:11:58:10:a0:ff:2c:f3:
59:a8:42:30:c5:34:42:71:85:14:bd:ff:04:31:5f:
62:be:e4:cf:c8:11:80:58:59:a6:cf:da:54:44:d4:
cc:10:c0:ad:a4:ff:4a:e3:c3:e5:25:3a:65:df:8a:
bf:fa:bf:0a:a7:ee:f7:af:e1:ca:f9:96:2a:2b:9c:
05:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:33:F9:6F:74:BF:07:99:5B:E4:B6:E6:05:42:73:3B:EA:FD:19:55
X509v3 Authority Key Identifier:
keyid:83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:e1:8a:9f:1e:7a:ad:69:b7:f6:20:07:b0:4a:e3:a2:98:14:
2e:46:94:56:06:55:50:28:f9:47:34:6e:ad:a2:c4:b2:3c:b6:
44:96:5e:0e:bc:af:15:2f:b0:fb:9c:4e:6d:95:98:a8:7b:4a:
b0:5e:db:77:6f:64:41:28:63:af:ea:17:80:10:99:34:e9:af:
28:c6:66:76:16:75:9d:5d:7c:c9:c7:fc:bf:29:5f:bd:e2:8a:
06:8b:8f:aa:82:ba:67:46:45:5b:fe:7c:d8:74:01:3e:d2:6a:
f6:3a:1a:09:c1:4d:21:fd:46:55:f8:4b:95:82:f3:55:95:a4:
af:b2:88:87:c2:46:09:79:1b:b6:60:41:c3:30:26:b9:d0:3b:
36:62:ac:4f:2f:0d:2b:63:81:9d:56:fd:1c:96:6d:29:71:e7:
5f:93:3e:11:0a:9c:b2:b8:5a:88:10:33:3d:07:03:0a:50:3c:
9e:69:a4:35:3e:7b:d6:4a:54:b1:ac:53:61:f7:ea:3d:5d:6c:
28:b7:49:4b:b0:67:61:36:bb:fb:90:3f:0f:36:51:9e:e0:83:
8f:e8:32:d5:78:1b:03:fd:7a:34:5f:78:25:03:af:fa:1b:c8:
66:7a:e1:cb:99:a7:64:9f:ea:2d:70:25:77:d9:64:91:01:27:
6d:99:76:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoHEeK2oz0GJE8i1iQu4G2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDA5OTZjMDg4OTBiZDVlMWU2ZGQwNTI4MjE3ZDI4Zjlk
MDkzNTUwHhcNMjUxMDIxMTQwMDAzWhcNMjUxMDIyMTQwMDAzWjAzMTEwLwYDVQQD
Eyg5NDMzZjk2Zjc0YmYwNzk5NWJlNGI2ZTYwNTQyNzMzYmVhZmQxOTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4hcZBk2/+4pQx81OxbJAqJakpPc
gKECyKWl1a5BRutuWwnwFfCtCf57/ZoIxeLa3BB6SRjWu2sC8Y0eenrQVjQmsBv8
nosEIplw7Kbbn2gfB0X+SYc70X7EjPxc87IdDIkJxpScMzrEhhApsaHCXQUAs5VY
BwJaleDigFbRQXFUTXface2lQTtGSpZorbke+iQzyMkOWV5+D9QZA8I0XO7dR5eT
f5Mkw2306bR6pUbqZ/TlVLOE1UTw4xFYEKD/LPNZqEIwxTRCcYUUvf8EMV9ivuTP
yBGAWFmmz9pURNTMEMCtpP9K48PlJTpl34q/+r8Kp+73r+HK+ZYqK5wFHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQz+W90vweZW+S25gVCczvq/RlVMB8GA1UdIwQY
MBaAFIMAmWwIiQvV4ebdBSghfSj50JNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dDWmJBaUpDOVhoNXQwRktDRjlLUG5RazFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jMDEzMDYtNjZmNS00MjA5LThjODgt
MmRiNjkxYjFkNGFiLzEvZ3dDWmJBaUpDOVhoNXQwRktDRjlLUG5RazFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9jMDEzMDYtNjZmNS00MjA5LThjODgtMmRiNjkxYjFkNGFi
LzEvZ3dDWmJBaUpDOVhoNXQwRktDRjlLUG5RazFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0OGKnx56
rWm39iAHsErjopgULkaUVgZVUCj5RzRuraLEsjy2RJZeDryvFS+w+5xObZWYqHtK
sF7bd29kQShjr+oXgBCZNOmvKMZmdhZ1nV18ycf8vylfveKKBouPqoK6Z0ZFW/58
2HQBPtJq9joaCcFNIf1GVfhLlYLzVZWkr7KIh8JGCXkbtmBBwzAmudA7NmKsTy8N
K2OBnVb9HJZtKXHnX5M+EQqcsrhaiBAzPQcDClA8nmmkNT571kpUsaxTYffqPV1s
KLdJS7BnYTa7+5A/DzZRnuCDj+gy1XgbA/16NF94JQOv+hvIZnrhy5mnZJ/qLXAl
d9lkkQEnbZl2wA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 16:08:17 2025 by rpki-client