Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
File: Gw4VwVrnA6iXkEavXezEky7cf24.mft (raw, json)
Hash identifier: pDaWTZo+Jtt38sIwXhdxiRNNvCjBdzud2MfyeKjatFo=
Subject key identifier: B9:A0:05:6C:90:C7:2E:D6:8C:A4:F0:A9:F1:C4:D5:7B:6B:32:57:24
Authority key identifier: 1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
Certificate issuer: /CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Certificate serial: 0199FDD908C34989657577C3577B68C820C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
Manifest number: 0825
Signing time: Sun 19 Oct 2025 19:01:23 +0000
Manifest this update: Sun 19 Oct 2025 19:01:23 +0000
Manifest next update: Mon 20 Oct 2025 19:01:23 +0000
Files and hashes: 1: Gw4VwVrnA6iXkEavXezEky7cf24.crl (hash: 523mIyJexAw0e6RN50FsJn8ZmZGk1dNdVdZPSFY+33o=)
2: WB9kjcUG_eK70F_25abwXmjO6D0.roa (hash: jo9Io4lvr31QdGnhzj2S5UeQzPHc2sTqLWFX7n7f+po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:08:c3:49:89:65:75:77:c3:57:7b:68:c8:20:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Validity
Not Before: Oct 19 19:01:23 2025 GMT
Not After : Oct 20 19:01:23 2025 GMT
Subject: CN=b9a0056c90c72ed68ca4f0a9f1c4d57b6b325724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:44:7a:47:13:ab:dc:4e:dd:46:4c:44:6c:
84:36:ed:28:4b:5b:42:c1:8d:2d:97:a9:ae:c6:d3:
5f:e6:c0:a1:08:ab:d5:ae:41:d7:29:91:dd:08:ae:
0c:c2:2e:e2:bd:dd:2f:7e:84:07:b7:5b:4e:d4:10:
88:2f:9f:0d:25:b1:c4:1b:36:8b:03:bd:09:0c:58:
7d:8f:d4:44:58:f4:49:bc:f7:5e:c5:a1:9c:bc:ab:
1e:8c:28:58:0c:18:fc:8f:07:b2:0c:3c:cf:0a:76:
b2:40:bc:e8:fc:5c:17:c6:27:a4:80:6b:b8:1c:88:
11:c7:b0:e6:18:8c:21:6c:90:a0:63:93:6b:cb:c4:
e5:01:79:22:8d:33:11:1a:ac:5a:15:c7:f2:29:11:
f6:55:b4:07:4b:11:5a:e8:d0:e5:36:6e:46:37:79:
87:97:88:45:ff:59:5b:a6:4e:73:89:0e:81:8c:bc:
8a:23:9f:9b:c0:4a:5a:29:72:eb:65:6c:81:bb:ce:
b6:01:10:ca:71:6a:f2:3a:d9:1b:84:9e:d8:22:8f:
99:3e:6a:86:1d:2c:e2:76:cc:6b:0d:ba:e0:2a:16:
62:e7:b7:31:0a:f2:d8:92:37:02:67:e8:56:c8:1d:
3d:1c:6f:0e:89:0a:df:f0:72:af:7f:ff:e1:16:76:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A0:05:6C:90:C7:2E:D6:8C:A4:F0:A9:F1:C4:D5:7B:6B:32:57:24
X509v3 Authority Key Identifier:
keyid:1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:54:a7:86:7b:f2:52:e8:96:e4:e4:b4:5f:d4:19:4a:2a:ae:
76:bc:d7:a0:9f:4a:be:ca:5d:2b:c4:e5:db:ed:07:f3:11:bd:
cb:0e:77:7d:7a:89:54:00:6a:01:d7:89:0d:61:fc:2c:20:91:
78:15:a7:9b:1b:0d:0c:a9:fa:c6:74:c5:69:c1:c5:8b:e2:1a:
71:23:58:d8:3f:88:0f:ad:da:76:e8:06:58:11:e9:e7:a8:61:
99:9e:06:77:d1:27:ee:52:a9:de:06:d5:fb:23:1d:09:39:02:
ff:cc:ce:88:66:ca:e6:55:8a:99:70:ba:ef:8e:08:12:57:fd:
b5:4f:af:3e:53:73:3c:b7:61:50:1a:21:ca:0a:46:b9:f0:e5:
84:71:17:52:a9:56:3c:f7:6a:b3:e4:14:a9:0e:70:30:0a:5a:
cf:a9:cf:a2:0d:8b:f3:e6:e5:b0:9e:16:ec:68:f3:28:64:d0:
66:ba:30:53:fd:40:91:e9:2a:a1:af:88:c3:97:1a:a4:5a:cd:
53:b3:d4:d5:c3:db:4a:a8:60:de:08:7c:62:d8:bf:9c:29:21:
86:2a:74:20:99:86:79:51:11:a8:d8:68:70:5d:29:a2:84:3b:
53:0f:50:1a:37:45:3e:01:7d:04:17:da:68:2d:f3:35:55:3d:
17:30:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:53:58 2025 by rpki-client