Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: NKzTWbyo+Yq44U+JzXEMHeSejqsWo7aIprRgYsHcaMM=
Subject key identifier: F8:5C:FE:84:32:C3:F4:85:55:79:C1:A9:98:7A:2B:F2:F3:BF:B4:A5
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 0198D54E408BFA43EA49591289DA53D21013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 0347
Signing time: Sat 23 Aug 2025 05:02:12 +0000
Manifest this update: Sat 23 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 05:02:12 +0000
Files and hashes: 1: E6h98msuHIDDEo3EuNbedKUfRUE.roa (hash: LlRZmkIkDMo4tzcCd8AIz4o5Zg0OyytYjPKbff5wXqs=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: 3qfDKkxXSspse38kShR0Un48X2wLQVff4mYcBjS5OmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:40:8b:fa:43:ea:49:59:12:89:da:53:d2:10:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: Aug 23 05:02:12 2025 GMT
Not After : Aug 24 05:02:12 2025 GMT
Subject: CN=f85cfe8432c3f4855579c1a9987a2bf2f3bfb4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:41:7a:24:25:0d:03:7c:dd:ce:26:ec:c9:49:
10:f6:af:3f:99:1b:06:9c:29:7b:da:cc:64:3d:02:
ff:8b:1e:89:fc:e5:09:1c:be:d2:bf:94:c9:26:63:
99:5b:ff:ce:24:0e:ed:20:16:1b:ce:74:bf:ca:c3:
51:a0:8f:8b:86:ca:8a:2a:54:3f:e3:8c:46:6f:32:
a6:78:9f:29:ad:54:4e:84:58:cb:14:cd:98:be:a4:
61:62:9c:5e:82:a4:24:71:ce:f6:94:f4:59:d6:3b:
ae:d9:e4:79:a3:cf:d5:ab:eb:54:ea:95:42:b8:55:
e0:37:8c:25:48:c8:3c:e0:5d:66:8e:9f:98:37:9d:
b2:6e:e7:3d:de:b8:af:28:3b:18:74:b1:22:c2:df:
78:c6:4d:47:95:ea:b3:a9:d6:43:1d:8f:f2:0d:47:
11:ed:d8:65:b6:1f:51:e1:5f:03:97:95:1d:a8:55:
d0:e2:e9:96:71:d1:76:4d:65:97:f2:30:04:18:60:
b8:28:35:cd:96:e3:6a:ce:6b:81:da:fa:bf:d9:b3:
aa:19:db:bd:df:95:85:ea:c8:a8:23:f1:73:c8:c7:
93:0c:50:f6:84:40:cc:2c:10:ee:a5:f0:2e:70:40:
a8:77:76:fc:a1:b3:f7:63:9c:cc:38:10:33:97:94:
29:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5C:FE:84:32:C3:F4:85:55:79:C1:A9:98:7A:2B:F2:F3:BF:B4:A5
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e1:23:d7:33:3c:81:32:ca:70:0f:f2:8f:a1:3d:64:02:87:
90:46:c6:96:4a:47:be:92:4c:2b:7e:24:bc:cc:8b:c0:fb:db:
ef:84:2a:6c:af:5a:63:9a:ac:a0:51:a8:97:68:55:a4:db:c2:
63:57:b5:51:e6:1f:f7:c8:c6:6e:a4:f5:e5:9b:48:91:da:cd:
b2:a0:8f:85:fe:98:a3:c9:7a:e3:59:cd:24:1c:8d:66:96:a2:
04:29:9e:83:bb:17:58:69:75:92:ed:86:0f:2d:bc:c2:f6:8f:
56:7a:b7:ee:32:83:47:50:60:a6:73:ae:b2:8e:56:f9:23:a6:
6b:24:12:04:ed:c1:f0:89:43:7a:ee:a8:32:a4:b6:d7:91:b7:
ba:0f:43:c7:e1:c4:de:f8:ff:9c:4b:5f:e5:c2:19:7c:84:3a:
7f:10:5e:cd:cf:d7:19:ac:7f:a8:42:d7:c5:12:2b:a9:7f:9c:
e6:a2:51:6c:e3:04:8d:06:f9:e5:90:aa:d7:6e:cd:3d:2e:d2:
1d:95:99:c0:5a:2a:a1:fd:62:48:36:d5:91:98:59:82:f8:b1:
e6:f2:9c:d2:23:17:12:85:bb:bb:6d:e1:06:51:a0:c6:14:ab:
20:87:ce:95:9e:7b:d8:b8:48:b6:b0:ea:54:fc:15:34:fa:f0:
63:57:93:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:14 2025 by rpki-client