Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: nwcv3WsAsxCMr/C4YnorFtEv/RJ0NjJ2kGFPRmqZd40=
Subject key identifier: 4C:53:5D:37:04:42:FD:7E:E2:DF:A4:03:0F:76:5F:9C:3B:87:EF:3E
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 0197BA7E14B1DDDE8E38A99A7B216298CB1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 07:01:54 +0000
Manifest this update: Sun 29 Jun 2025 07:01:54 +0000
Manifest next update: Mon 30 Jun 2025 07:01:54 +0000
Files and hashes: 1: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: F4mQ0qT+ApfIwxhnSxKeWP3IU58yvd2bUikqKXjXM4s=)
2: smR56PkXYVe9TX2HDTFHOdEfzmA.roa (hash: Sy1g3FvvZhbNKF9SZtRpU0M+VhDMdQVYf1yY8kTyMT0=)
3: z45Pl2HIpMthc8mWmMny5O7sL4E.roa (hash: Fh6l02AaD6oxps7qwBCXlSR7cWfTt60ybgfv5Z0qI7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:14:b1:dd:de:8e:38:a9:9a:7b:21:62:98:cb:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Jun 29 07:01:54 2025 GMT
Not After : Jun 30 07:01:54 2025 GMT
Subject: CN=4c535d370442fd7ee2dfa4030f765f9c3b87ef3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:52:f6:c1:9b:70:d0:eb:16:ce:b9:ca:a3:ff:
1f:2f:a9:42:9a:04:e3:ca:90:ee:2c:a6:10:86:4d:
c5:5d:b6:f4:a8:f7:a1:b6:d3:d4:48:bd:95:8c:ef:
ce:e1:49:7c:5e:09:0b:01:d6:f9:5e:27:43:e9:46:
32:f6:c5:24:b4:8b:a2:0d:8d:f3:ba:c0:00:75:25:
32:82:14:e1:86:39:24:7b:70:ec:b3:2a:e5:d3:a2:
f9:eb:05:67:a9:22:3d:2c:02:b8:c1:c1:3a:61:d2:
68:1d:e3:d8:75:b1:02:27:2f:35:a0:fd:09:04:86:
95:d6:2e:af:42:77:8f:51:41:b2:d1:a4:b5:52:8c:
aa:72:4a:0c:51:00:03:a5:f4:1d:4c:8d:64:1e:1b:
e6:9d:47:59:51:e5:db:5f:82:2d:05:38:c2:3e:8c:
bd:99:b2:87:84:a3:fd:00:52:8d:ec:47:3c:1f:16:
1e:99:65:b6:38:26:90:65:f3:4e:66:00:01:53:c7:
d8:4d:19:a0:50:ce:78:dd:07:f8:73:43:ec:36:76:
b3:28:46:73:9a:9c:f2:cf:be:73:a4:c8:80:c0:85:
0e:c5:e6:03:73:03:d8:73:30:4c:2f:a9:4c:0a:0c:
92:b7:88:be:4c:1f:3d:ee:44:c5:6b:cf:b5:08:82:
da:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:53:5D:37:04:42:FD:7E:E2:DF:A4:03:0F:76:5F:9C:3B:87:EF:3E
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:57:75:36:9e:d1:6b:4b:23:b4:1e:d4:d3:60:d5:0f:3e:57:
19:97:55:12:ad:95:36:76:8c:16:96:04:b1:34:69:31:75:9e:
ac:f8:6e:2e:9f:6e:bb:96:7c:0a:45:2e:c9:6c:31:be:aa:8c:
6c:f1:e4:9a:26:9c:d4:61:9f:21:dd:54:4e:aa:c7:67:ee:b6:
72:80:ab:88:0c:0f:7e:e8:b6:11:a0:67:d2:26:80:e6:c1:93:
78:30:4c:0c:85:be:ab:85:19:57:3a:a2:0e:9a:3e:a6:13:68:
93:5b:79:65:b3:08:e2:53:b9:4a:48:f5:fd:cf:49:a7:c4:9c:
15:bd:e7:22:83:5a:88:19:de:a5:a0:5e:da:66:38:4a:3a:33:
3d:83:ac:74:45:2e:26:f0:1e:49:bf:bc:50:5e:ee:28:d2:54:
be:c8:bd:38:de:fd:a8:c2:8e:b4:6e:f5:f6:2c:73:44:97:08:
f3:25:bf:31:37:7e:8a:65:dc:85:f6:e4:20:cd:11:e3:4b:db:
2a:3b:84:7c:c5:1d:f3:58:02:33:3f:a0:bd:3a:e7:31:bb:28:
a8:61:ad:83:84:62:f2:32:1a:ad:2e:b1:1a:be:9e:c6:e7:83:
52:26:13:ef:08:a4:05:66:83:9e:a3:43:5e:33:4f:82:90:59:
4e:77:c8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:25:13 2025 by rpki-client