Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
File: GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft (raw, json)
Hash identifier: ecp8Gw7vgsA4TSVEQATrKsyoX3B05OnwdBORBWN/eD8=
Subject key identifier: 45:07:14:FE:15:D4:CB:BF:13:2D:0D:DB:70:CB:18:D5:4E:E5:13:E5
Authority key identifier: 19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0
Certificate issuer: /CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
Certificate serial: 0198D4E02671F2813CB9738976742793583F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
Manifest number: 0270
Signing time: Sat 23 Aug 2025 03:01:56 +0000
Manifest this update: Sat 23 Aug 2025 03:01:56 +0000
Manifest next update: Sun 24 Aug 2025 03:01:56 +0000
Files and hashes: 1: GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl (hash: h/lUoiF/Ljvv0oF57qfJYrBchiqtv6eU9FTgpx32P+w=)
2: SFyTfsWyq2coBx8ydbZroSS50xQ.roa (hash: ZZpymtBw1D9nPwu2cf1P4YkyaGccufHXZlJkybCGFMw=)
3: TNkzBPyNieqNtFJ7OZ5WQ2BFAFM.roa (hash: yD3hqpWrk6f2s5tXbai7Hu4KRhgeNHLLkovFRVk/JKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:26:71:f2:81:3c:b9:73:89:76:74:27:93:58:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
Validity
Not Before: Aug 23 03:01:56 2025 GMT
Not After : Aug 24 03:01:56 2025 GMT
Subject: CN=450714fe15d4cbbf132d0ddb70cb18d54ee513e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:ed:b8:f0:5c:5d:97:82:ca:b2:86:4c:5a:
44:8f:da:5c:c1:69:b8:ac:68:38:17:d4:ee:0f:2b:
b1:d7:02:ea:8a:e4:8b:50:5e:93:01:b6:69:bf:a4:
16:66:46:5e:b7:66:cf:dc:55:9b:eb:f8:82:b9:89:
80:4d:84:36:94:ad:77:4c:e9:06:a0:3a:4d:9d:14:
95:0b:a6:7a:d6:2d:de:c5:54:c5:fc:9a:54:3a:fd:
12:06:ea:99:d6:32:63:08:e3:b4:fe:5d:b9:e9:46:
21:60:14:20:9d:76:25:77:19:6b:a0:42:3c:f1:10:
d0:f5:5b:8d:b0:7d:f8:03:2a:6b:1c:ca:c4:a3:fc:
14:05:cb:0f:59:ba:65:c3:4e:cf:fe:30:6a:1b:dc:
b9:9c:8d:e8:3b:02:2a:11:74:4f:f4:96:25:36:6b:
f0:8a:91:97:e3:07:34:ca:85:63:33:e2:80:74:f8:
b4:48:00:75:f1:c1:e9:28:12:34:92:e0:16:55:63:
20:1b:3b:93:91:fc:49:b8:74:ff:18:d3:e9:9b:a2:
e8:3b:db:46:a1:19:92:e5:f0:1c:38:cd:96:f3:96:
3e:81:40:a9:28:bd:c3:09:bd:c1:a1:60:ba:85:ad:
79:36:2b:65:a2:9a:41:53:fd:91:bc:c5:94:36:07:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:07:14:FE:15:D4:CB:BF:13:2D:0D:DB:70:CB:18:D5:4E:E5:13:E5
X509v3 Authority Key Identifier:
keyid:19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:dc:80:8a:f4:b6:8d:35:80:37:46:dd:a3:82:9c:65:b8:1a:
ac:4c:42:9d:e4:6e:e2:1f:85:45:4c:f8:f5:5d:4e:78:9d:d9:
4a:d4:ce:5d:f0:51:19:85:b7:e7:11:22:d3:58:a5:ad:50:66:
57:94:f9:14:fe:ff:2f:5f:97:6f:85:67:ab:94:d1:2f:37:52:
cc:7a:96:ea:ec:f6:23:92:8b:9b:be:b6:a8:3d:81:51:10:e6:
ce:a7:1f:30:f0:89:72:e8:c9:f0:ea:5e:55:69:07:54:dd:06:
b1:02:44:44:0a:b8:5f:2e:10:9b:e1:2d:f5:bb:36:58:dd:d1:
a7:fa:4f:a7:b9:b6:f9:92:e7:d1:4d:70:77:17:3d:3c:2a:3c:
e2:07:68:b8:06:cc:0b:2c:bf:89:4e:17:6b:f4:a6:29:2a:ed:
71:fe:21:77:39:3b:eb:9a:b5:21:3f:78:3e:54:d2:a9:df:91:
c7:cf:e9:a8:7e:a2:a8:7f:97:e8:fc:10:e3:62:58:ee:5f:4f:
07:06:37:1c:a2:3f:0e:12:27:36:4d:8c:f2:12:45:85:65:49:
58:54:48:a9:c6:08:6b:11:61:d4:fd:34:85:24:32:25:10:35:
52:f8:08:68:ca:22:70:dc:f2:ee:48:8a:16:45:1f:6a:ad:c2:
58:5c:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:40 2025 by rpki-client