Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: pnnINe9MOOiqaBiUl/vgZxPFv+kJbMDtHxqHPq8OzuU=
Subject key identifier: 57:DE:07:10:E4:49:F6:02:A1:F1:CF:7B:A4:DB:09:53:50:D6:77:74
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 0199FE7DD088DB4667FF1A7644278F3C3E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 03E1
Signing time: Sun 19 Oct 2025 22:01:22 +0000
Manifest this update: Sun 19 Oct 2025 22:01:22 +0000
Manifest next update: Mon 20 Oct 2025 22:01:22 +0000
Files and hashes: 1: E6h98msuHIDDEo3EuNbedKUfRUE.roa (hash: LlRZmkIkDMo4tzcCd8AIz4o5Zg0OyytYjPKbff5wXqs=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: 5oSIjtZ7NBfoNdaVh4/FrCiu/dGXcRHelEiQiVk+MR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:d0:88:db:46:67:ff:1a:76:44:27:8f:3c:3e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: Oct 19 22:01:22 2025 GMT
Not After : Oct 20 22:01:22 2025 GMT
Subject: CN=57de0710e449f602a1f1cf7ba4db095350d67774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:14:b3:5e:2d:7a:c8:8d:d5:9e:c4:97:e2:be:
e2:a9:bf:69:59:fd:b5:2e:cd:f2:fb:2d:98:33:1e:
28:27:74:50:3c:c1:0c:90:1f:0a:2a:e8:fd:5f:15:
7c:28:06:70:f7:c7:9f:56:8b:cf:3a:82:a3:5c:4c:
83:fa:c6:05:ca:03:f3:2c:60:55:39:b3:bd:fc:51:
ef:bb:d2:76:ad:08:6f:2c:86:ec:c5:cc:98:e1:8a:
04:34:b0:9c:3d:33:65:71:f3:13:92:95:01:28:57:
06:f7:60:e4:7f:92:54:ef:03:f3:05:54:1c:f0:1d:
93:d8:69:b6:74:aa:3c:9d:c9:93:72:8c:51:01:05:
06:a5:1d:85:19:a5:57:9b:64:99:01:6f:61:8a:cc:
5d:00:19:48:d4:25:bc:8a:84:e4:8d:ff:6e:a9:1c:
2a:26:7e:7d:63:8b:dc:4a:53:a6:c5:64:38:6a:d7:
5c:67:35:9d:bf:7e:4b:dd:07:bf:4e:f8:21:d4:3e:
50:32:c9:86:fe:a6:ec:af:77:d7:92:8c:81:54:e8:
28:53:0d:ae:52:c8:7f:3b:fe:8d:05:02:d5:1b:25:
21:8e:82:af:0a:71:dc:17:d6:44:35:38:f6:a4:aa:
4b:3d:c0:2b:33:5b:3c:b6:31:ee:38:70:67:70:56:
7e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DE:07:10:E4:49:F6:02:A1:F1:CF:7B:A4:DB:09:53:50:D6:77:74
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:23:b2:65:69:00:dc:58:4a:b0:fc:56:d5:ee:40:fb:79:e7:
fb:0a:1c:62:1e:da:06:3c:bf:93:49:77:fd:9d:b9:b3:54:fc:
5e:78:dc:20:48:75:77:2f:d2:c3:8f:d2:3d:17:3d:00:11:32:
cf:14:da:7f:f7:0c:3c:15:b8:39:d1:e4:e8:73:02:38:95:b0:
e7:e8:cb:65:e6:28:79:08:9a:51:5f:47:fa:6c:26:5c:18:f5:
38:fe:62:84:fa:75:65:92:7e:3b:6d:3f:63:28:f2:18:7e:e9:
49:d1:ad:c9:ff:90:ec:4e:b3:35:cd:e5:79:a4:f4:42:0d:ba:
aa:8f:f6:3a:da:35:75:b3:a6:47:ac:ad:50:75:2e:bb:7e:9c:
95:79:de:b4:ca:f9:e2:0d:48:03:5d:29:2b:1c:bb:08:17:74:
dd:f8:a5:63:02:8b:75:eb:c9:69:54:36:fd:51:f2:17:b0:e1:
9a:b0:87:11:6d:67:65:15:46:24:bf:b4:14:9f:77:8c:fa:c2:
ad:43:68:16:28:79:1c:fd:c5:22:67:71:00:27:3c:f0:d2:b5:
6a:a1:26:04:71:70:59:f1:4d:1e:22:34:e7:f0:b8:ae:30:98:
70:df:09:1f:1d:b3:f4:bb:fe:d5:1c:00:cc:f5:52:c3:9e:f4:
c8:da:58:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fdCI20Zn/xp2RCePPD4jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDdhNTIyNGFlNmQ5YTkyZTQ3ZTY1NmRkODAxYjEwZmZi
OTA3MmIwHhcNMjUxMDE5MjIwMTIyWhcNMjUxMDIwMjIwMTIyWjAzMTEwLwYDVQQD
Eyg1N2RlMDcxMGU0NDlmNjAyYTFmMWNmN2JhNGRiMDk1MzUwZDY3Nzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RSzXi16yI3VnsSX4r7iqb9pWf21
Ls3y+y2YMx4oJ3RQPMEMkB8KKuj9XxV8KAZw98efVovPOoKjXEyD+sYFygPzLGBV
ObO9/FHvu9J2rQhvLIbsxcyY4YoENLCcPTNlcfMTkpUBKFcG92Dkf5JU7wPzBVQc
8B2T2Gm2dKo8ncmTcoxRAQUGpR2FGaVXm2SZAW9hisxdABlI1CW8ioTkjf9uqRwq
Jn59Y4vcSlOmxWQ4atdcZzWdv35L3Qe/Tvgh1D5QMsmG/qbsr3fXkoyBVOgoUw2u
Ush/O/6NBQLVGyUhjoKvCnHcF9ZENTj2pKpLPcArM1s8tjHuOHBncFZ+SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfeBxDkSfYCofHPe6TbCVNQ1nd0MB8GA1UdIwQY
MBaAFIMHpSJK5tmpLkfmVt2AGxD/uQcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hM2Q5YTYtMzRiNy00ZjM4LWE5YTUt
OGJmYWNhZTQ2NGY5LzEvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hM2Q5YTYtMzRiNy00ZjM4LWE5YTUtOGJmYWNhZTQ2NGY5
LzEvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoyOyZWkA
3FhKsPxW1e5A+3nn+wocYh7aBjy/k0l3/Z25s1T8XnjcIEh1dy/Sw4/SPRc9ABEy
zxTaf/cMPBW4OdHk6HMCOJWw5+jLZeYoeQiaUV9H+mwmXBj1OP5ihPp1ZZJ+O20/
YyjyGH7pSdGtyf+Q7E6zNc3leaT0Qg26qo/2Oto1dbOmR6ytUHUuu36clXnetMr5
4g1IA10pKxy7CBd03filYwKLdevJaVQ2/VHyF7DhmrCHEW1nZRVGJL+0FJ93jPrC
rUNoFih5HP3FImdxACc88NK1aqEmBHFwWfFNHiI05/C4rjCYcN8JHx2z9Lv+1RwA
zPVSw570yNpY0A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:41:53 2025 by rpki-client