Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File: GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier: iqz5NMkYBD/WDn1Zi4uAhqyv/G65UiYiYzfJiuZiHkw=
Subject key identifier: B3:4F:63:34:91:B1:9A:BA:C9:11:8C:5C:A6:E9:90:98:79:1C:E0:AB
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial: 0198D5BC52F09E0B4885463EC7DA737D1EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number: 0847
Signing time: Sat 23 Aug 2025 07:02:25 +0000
Manifest this update: Sat 23 Aug 2025 07:02:25 +0000
Manifest next update: Sun 24 Aug 2025 07:02:25 +0000
Files and hashes: 1: 1MMOey2DFiHGwBuawoDAV5GTR0U.roa (hash: C6gJNXtwf6inO2jQLVsOQct8LTsyFQuwXSbNPT+y76g=)
2: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: 5HpVpczi7yKVU6f/8ngZ7vdes+y9fGF3aFQ5rnBg4Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:52:f0:9e:0b:48:85:46:3e:c7:da:73:7d:1e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
Validity
Not Before: Aug 23 07:02:25 2025 GMT
Not After : Aug 24 07:02:25 2025 GMT
Subject: CN=b34f633491b19abac9118c5ca6e99098791ce0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:f7:75:1f:7c:f8:f1:8b:e1:56:87:0c:9b:
1c:a7:94:9e:e7:5d:e1:bf:81:73:e7:0b:e4:99:62:
72:82:fc:3d:99:19:39:69:7a:42:da:bf:0e:2c:0e:
00:3c:e8:08:a4:29:01:9a:96:cd:2a:9a:e7:e6:68:
b5:2e:95:b1:66:f2:af:1b:11:c5:de:39:6a:78:91:
46:85:0e:9f:39:29:7e:50:46:35:40:88:4a:8b:ee:
41:ee:b2:d9:bd:d2:ec:c8:6b:60:6a:83:ee:6e:b0:
16:da:21:78:49:73:7e:30:c7:a8:76:d8:12:13:e5:
4c:71:38:c4:c8:77:6a:29:b3:dc:00:83:83:8e:9f:
98:12:2b:95:76:69:23:27:03:82:bd:c6:0c:eb:69:
9e:83:70:99:6b:1d:bc:52:10:0c:11:3b:8c:fa:2c:
82:d4:46:e3:a1:7f:5a:6f:d0:fe:a0:2d:99:d0:63:
df:0e:75:ae:25:4d:4d:4d:4a:15:56:16:1e:6b:e5:
12:64:6a:11:6b:db:9d:76:33:02:a9:6e:c0:5f:bd:
0e:ce:48:77:5e:fc:de:aa:bd:ef:3c:35:fe:c9:e6:
fe:4f:bf:97:30:dd:38:64:df:5f:f3:e6:eb:98:3f:
fb:86:ed:7e:1a:d6:1c:19:d0:e8:78:f0:c8:8c:80:
75:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4F:63:34:91:B1:9A:BA:C9:11:8C:5C:A6:E9:90:98:79:1C:E0:AB
X509v3 Authority Key Identifier:
keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bc:68:44:61:cb:6a:cd:7a:ab:31:65:7e:a8:98:64:f3:ba:
f9:c2:ee:24:3b:32:dc:ca:49:0a:cc:0e:27:e9:c2:a8:b7:a2:
f4:04:7d:c3:4d:9d:d6:54:ae:bd:c2:63:1b:d3:05:8b:86:42:
90:1d:2b:7d:d0:53:11:35:a2:70:70:2f:4e:56:72:fd:00:ab:
1c:be:75:37:28:76:ff:96:45:49:62:9d:23:b7:f9:e9:9e:aa:
0b:5f:46:c1:ef:1a:32:18:ac:77:58:b8:6a:ea:f0:b5:ef:31:
58:47:29:c7:c1:cb:9c:32:cc:94:3d:35:16:62:ac:8a:74:4d:
38:91:81:97:d3:ed:c8:eb:82:bf:66:39:bd:36:06:32:c3:20:
f6:e7:73:0e:b7:f2:4e:cf:5d:0d:28:fd:67:ce:44:12:a3:7c:
cc:7a:9f:7c:7a:08:99:0c:11:32:d7:2a:a2:7b:06:b1:7e:c0:
ff:21:16:13:17:a4:6a:a1:bf:8e:07:24:30:a8:d8:60:dc:4b:
c6:9c:e4:22:17:82:c2:f8:c6:8e:d0:0e:11:e5:29:ee:48:21:
d2:91:2c:f8:71:20:7b:df:4a:02:78:70:bc:d0:35:89:f7:b9:
8a:b5:45:d2:24:03:f1:98:35:8f:f9:78:83:83:a1:e1:d2:27:
24:e8:a2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:04 2025 by rpki-client