Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File: GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier: Hz4VsU4KkSxa1jNWoAFCTpjfCFpFuOXRLFV5Y6cJLbs=
Subject key identifier: 9D:EA:8F:41:5B:42:FD:D2:DC:47:22:DE:49:59:B0:E7:36:54:3E:A7
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial: 0199FD341E1A0B67D3F78029E297B60BBC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number: 08E0
Signing time: Sun 19 Oct 2025 16:01:15 +0000
Manifest this update: Sun 19 Oct 2025 16:01:15 +0000
Manifest next update: Mon 20 Oct 2025 16:01:15 +0000
Files and hashes: 1: 1MMOey2DFiHGwBuawoDAV5GTR0U.roa (hash: C6gJNXtwf6inO2jQLVsOQct8LTsyFQuwXSbNPT+y76g=)
2: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: S5foNqLJ0NgHD9GIbTeTzW05yXwy3IlCFKC+l/Z3RAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1e:1a:0b:67:d3:f7:80:29:e2:97:b6:0b:bc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
Validity
Not Before: Oct 19 16:01:15 2025 GMT
Not After : Oct 20 16:01:15 2025 GMT
Subject: CN=9dea8f415b42fdd2dc4722de4959b0e736543ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:27:d2:69:9d:1c:01:af:c5:20:94:91:7b:dd:
28:3e:bf:39:bb:ac:49:18:27:96:04:e1:b5:51:19:
8b:e8:f7:e3:e6:5f:b4:1b:9a:ca:09:b5:da:d2:12:
27:76:9b:4c:c0:c2:d6:2b:aa:5a:81:c8:ca:23:b8:
ec:a5:e6:90:58:2a:e4:a4:fa:95:1d:27:8e:24:c9:
d4:f7:05:f8:68:d4:af:3f:44:78:ce:f1:3e:35:bd:
84:10:cb:cc:69:6b:66:c6:23:43:b5:00:de:a0:23:
0a:73:2f:84:f8:fd:22:53:d1:be:7a:b1:67:0e:25:
62:25:fb:7f:61:6b:be:4f:39:d8:e4:5a:db:a0:9c:
e8:96:d5:a4:e6:7b:0b:55:c4:52:16:36:26:c5:11:
7c:96:ba:0e:45:29:4d:e8:eb:36:9c:55:d4:ae:e2:
92:fd:5b:e9:50:d1:31:ef:2e:66:a5:8a:86:4a:01:
b8:c4:19:80:37:ce:37:bd:94:f7:1f:7d:29:6f:9d:
cb:b5:64:c0:71:43:56:1e:5a:92:f9:fc:83:25:df:
66:96:09:73:b7:9c:6b:ba:b8:d0:30:83:0f:f6:3b:
38:33:d6:70:f9:56:a6:38:00:23:2d:03:a4:20:8b:
cc:34:aa:fc:9d:63:8a:3b:52:70:8f:54:7f:d9:24:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EA:8F:41:5B:42:FD:D2:DC:47:22:DE:49:59:B0:E7:36:54:3E:A7
X509v3 Authority Key Identifier:
keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a4:af:03:9f:5b:5d:bf:c7:5d:74:29:7b:60:e7:b1:e1:55:
c9:83:6b:f8:bb:ae:00:04:fb:c4:b3:03:a3:55:1c:22:8f:08:
6e:25:1d:a6:94:7a:8f:76:0f:a4:ba:db:af:ad:8d:ea:ce:f2:
94:66:2a:aa:f9:87:87:72:f1:61:1a:e0:ca:47:a2:7a:f5:ec:
5b:33:3c:94:c0:24:70:0d:64:98:fb:7a:7c:60:28:e0:a6:f0:
42:61:8e:8e:4d:32:bb:ae:0c:26:e2:bc:41:66:4c:47:86:c7:
05:0b:85:9d:3c:5e:2b:31:75:32:37:80:69:2a:26:35:ef:dd:
2f:05:d6:41:54:a3:5d:54:a5:04:85:f0:b9:02:e6:34:cf:09:
65:23:bd:93:62:15:fa:4c:b0:ad:d2:8e:7e:0d:48:24:23:4e:
45:d7:54:ad:58:b5:bc:34:6d:cc:f9:ba:5a:1d:42:0b:eb:45:
2a:dd:87:96:49:6a:7d:26:54:ca:0e:20:35:2b:e8:ea:9f:87:
91:df:40:20:09:fc:de:09:69:41:19:6c:7f:37:da:98:70:6b:
0a:da:d4:ab:9e:83:16:8a:55:e8:5c:72:d3:95:8b:f1:f0:f6:
fd:ca:35:85:8a:9d:38:3f:c8:46:89:6e:f2:f7:2b:d7:1a:2b:
e9:38:cd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:41 2025 by rpki-client