Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: 1xOlWEJtx6UAADVwZj/FveeXbcBZpbW25fhBmbUmqA4=
Subject key identifier: B6:6A:AD:D9:8A:31:79:F2:41:2E:C1:FD:0E:48:B1:E5:18:82:B3:A1
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 0199FBEB7A0BB955D1DC63985F3BCE3E5D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:17 +0000
Manifest this update: Sun 19 Oct 2025 10:02:17 +0000
Manifest next update: Mon 20 Oct 2025 10:02:17 +0000
Files and hashes: 1: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: DWOsoQwQ6u15CzT/WFOJM4pw5nkTmibpnV5ezGzej5g=)
2: smR56PkXYVe9TX2HDTFHOdEfzmA.roa (hash: Sy1g3FvvZhbNKF9SZtRpU0M+VhDMdQVYf1yY8kTyMT0=)
3: z45Pl2HIpMthc8mWmMny5O7sL4E.roa (hash: Fh6l02AaD6oxps7qwBCXlSR7cWfTt60ybgfv5Z0qI7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7a:0b:b9:55:d1:dc:63:98:5f:3b:ce:3e:5d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Oct 19 10:02:17 2025 GMT
Not After : Oct 20 10:02:17 2025 GMT
Subject: CN=b66aadd98a3179f2412ec1fd0e48b1e51882b3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d5:a2:8a:fd:bf:6d:ca:b5:35:bf:a1:2d:d5:
54:23:90:55:ff:0e:4c:c3:b6:b5:cd:80:9e:3a:ca:
88:76:e9:8c:18:7e:24:04:95:a9:b4:09:ea:4f:d5:
7e:94:23:e9:1d:41:0f:ae:5a:d8:4d:62:78:4d:3c:
25:bf:84:b3:42:2b:2b:46:c8:d4:64:91:0d:86:8e:
17:22:d5:42:ba:9a:77:11:7a:7d:59:e0:94:44:26:
7b:3b:93:b1:a1:0a:c2:6f:6b:2a:4e:ae:88:8c:ce:
e3:8d:b1:5e:d9:0a:56:e2:09:79:fb:9c:b3:40:f0:
cf:71:2b:13:23:9f:57:b1:a8:86:fe:bc:ba:c8:94:
e6:f0:42:1b:54:58:ba:76:00:70:a5:dc:e8:55:0d:
64:63:a1:71:7c:44:0e:63:c4:21:22:90:c5:87:e6:
a2:4a:6d:9c:4d:df:01:e1:4e:73:5c:85:08:04:9a:
ed:7a:6e:4a:2a:2e:33:9b:e7:ec:89:0f:2a:de:31:
58:8a:e5:5a:91:8b:f6:48:87:15:be:f0:58:dc:5c:
32:cb:14:2f:9c:e2:36:aa:3a:07:52:c3:ce:a4:d7:
2c:d4:b5:15:dc:1b:d7:cf:95:79:3b:7c:db:5a:1f:
95:68:fb:ca:d1:2c:fc:fb:9c:a9:8c:f4:b5:36:b5:
64:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6A:AD:D9:8A:31:79:F2:41:2E:C1:FD:0E:48:B1:E5:18:82:B3:A1
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9c:60:a8:d8:96:e8:25:d9:dd:9d:48:73:94:d4:a2:4d:f2:
b2:6d:35:01:ca:a2:b4:74:4a:68:d8:65:dd:32:99:31:2e:e2:
3c:16:38:ab:55:ac:92:f3:cc:b1:7a:13:da:13:4b:ad:25:65:
05:80:db:e3:4d:d8:bb:9c:c5:92:60:9c:4f:31:69:3f:8f:4a:
37:dc:9e:78:d8:57:a3:bb:13:7f:ec:d0:e9:7f:94:2e:64:3a:
2f:70:ee:5c:2d:aa:d0:56:09:f4:2a:7e:62:79:33:c5:63:9c:
a7:20:b9:66:0a:25:38:c4:99:0f:2e:97:34:76:da:cc:5e:2d:
66:96:bc:15:95:b0:28:01:ff:77:a7:0e:93:1c:9b:92:f3:e6:
27:cd:bd:94:58:cb:5a:5a:62:6e:3b:85:d9:8a:90:9f:e6:58:
f9:94:ac:8f:a0:98:b4:a5:6c:64:7a:bc:d7:81:be:cb:8b:53:
59:42:cd:70:66:2c:d1:d5:d1:ec:e2:56:e9:eb:d9:42:d9:06:
f5:f7:37:75:d3:22:79:52:62:c1:dd:4c:c2:0c:88:ef:32:bc:
5b:e6:b2:0c:43:18:4b:a7:f6:73:35:95:5b:13:08:45:14:4d:
89:f7:b6:67:bf:bf:ad:9b:12:88:d7:46:45:f4:40:8f:18:4e:
5b:e3:06:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:38 2025 by rpki-client