Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
File: GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft (raw, json)
Hash identifier: 5ouEYq0gC+QrLs3RoeGJGAaOqMudDT396IPiXcTeERQ=
Subject key identifier: 2A:49:C5:52:53:AB:5D:68:95:85:94:50:77:E4:B1:28:DC:0A:9D:02
Authority key identifier: 19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0
Certificate issuer: /CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
Certificate serial: 0197B70EA901DB8C1F00BF5DB8CE94CB7F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
Manifest number: 01DC
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl (hash: jkOlJC7dMmg9lgLYHhM8qNa5HD1FFcixQIw8DysyQEQ=)
2: SFyTfsWyq2coBx8ydbZroSS50xQ.roa (hash: ZZpymtBw1D9nPwu2cf1P4YkyaGccufHXZlJkybCGFMw=)
3: TNkzBPyNieqNtFJ7OZ5WQ2BFAFM.roa (hash: yD3hqpWrk6f2s5tXbai7Hu4KRhgeNHLLkovFRVk/JKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a9:01:db:8c:1f:00:bf:5d:b8:ce:94:cb:7f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=2a49c55253ab5d689585945077e4b128dc0a9d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:53:3c:85:eb:d0:af:73:a1:ea:18:7f:f5:7c:
48:b3:84:da:b1:e0:51:07:c2:32:44:15:60:58:2a:
6a:6e:65:14:fa:55:d2:6b:4e:81:5e:0b:bb:c5:9e:
b9:03:37:ef:8a:ac:70:2f:e7:63:d0:4a:8f:2c:52:
4c:63:24:42:34:55:84:86:1e:68:80:4f:20:d1:f3:
b1:f1:83:4a:df:67:e3:6c:b1:1d:10:4c:bf:7e:27:
48:11:88:e4:04:09:db:de:46:a5:a3:9b:be:bf:a4:
15:9b:0c:ff:5d:86:7f:51:a9:f4:33:ee:98:a7:ae:
8a:70:26:72:a9:44:20:08:5c:68:56:6e:71:d7:ea:
1a:19:70:9c:40:24:51:e9:d2:00:22:95:26:04:50:
9e:68:f6:47:c8:b4:8a:34:f3:06:d0:ae:ac:62:7e:
7e:94:5a:70:ae:6c:45:86:23:ef:58:c7:6b:41:7b:
25:63:cb:e7:f6:11:99:b9:91:32:22:1f:6d:b8:cd:
ed:3e:cd:ab:48:01:ab:f4:33:0b:bc:f0:31:a1:5c:
b5:db:e9:95:5e:c0:70:65:0d:88:b0:fb:97:91:b0:
ca:c0:20:da:ed:55:90:7d:46:2a:ab:24:fb:8d:ec:
3a:26:ef:57:d1:56:0a:6d:38:96:c4:33:45:84:d8:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:49:C5:52:53:AB:5D:68:95:85:94:50:77:E4:B1:28:DC:0A:9D:02
X509v3 Authority Key Identifier:
keyid:19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:89:b5:c9:65:13:49:01:cb:e8:99:99:db:02:28:97:33:e2:
1f:13:e5:61:b5:ee:be:a5:f8:fb:bf:99:d7:72:ef:d5:18:73:
e5:8e:92:c9:05:52:e3:32:91:62:40:25:97:ff:05:8d:f9:88:
55:de:4d:f9:32:f1:1f:f3:64:f7:f7:3f:e5:cc:7f:2c:17:57:
88:0a:bc:5f:b2:91:3a:1d:1f:4b:6e:29:fe:29:b5:28:5a:1c:
4f:55:fa:53:ac:96:7e:a2:e3:51:be:69:a5:94:fd:1c:7b:44:
ba:82:ae:fe:a9:eb:ed:7e:f7:1d:c1:00:5f:76:49:4e:40:96:
dd:49:c6:84:0d:1c:6f:8d:10:16:58:a8:85:b3:5b:43:7e:d1:
e8:52:69:a6:09:93:9e:c4:56:a6:83:96:b2:23:4d:48:97:b4:
a5:df:9c:a1:43:4b:60:19:48:e2:fd:b8:4b:e3:04:f2:c4:73:
ca:e9:18:52:b6:0b:2f:d8:7f:86:72:50:eb:44:dd:c5:55:e3:
8e:e9:54:cd:77:47:d5:3f:93:30:99:23:89:b1:68:8a:34:3c:
e9:0d:9a:1c:2b:27:e6:93:bf:1c:b1:69:a1:2f:64:1f:cf:62:
c1:6e:db:c7:db:96:41:86:8f:e6:61:a0:5f:e9:de:21:14:23:
a2:25:b3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:20 2025 by rpki-client