Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
File: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft (raw, json)
Hash identifier: JDQPVO1bB0VZKYqx+1QV64b6NIFQUXKebfwAQKh4ud8=
Subject key identifier: 83:62:5D:08:B1:19:8E:49:7A:A8:A2:EB:5B:A9:F1:AD:24:56:75:42
Authority key identifier: 83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
Certificate issuer: /CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Certificate serial: 01985C47EFE317D2BCA2B8CDF596988837DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
Manifest number: 1609
Signing time: Wed 30 Jul 2025 17:01:15 +0000
Manifest this update: Wed 30 Jul 2025 17:01:15 +0000
Manifest next update: Thu 31 Jul 2025 17:01:15 +0000
Files and hashes: 1: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl (hash: sN9+5woG3QL0E1TRj67CvchHXjHDFO37GS4CdGnIY7o=)
2: rqs2jYsXIEmeZSer38OOcJGK7EU.roa (hash: m+TNUwZvlDUtkC5/TwdymkZwjEw131NWG7VhMWfXmRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 15:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:47:ef:e3:17:d2:bc:a2:b8:cd:f5:96:98:88:37:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Validity
Not Before: Jul 30 17:01:15 2025 GMT
Not After : Jul 31 17:01:15 2025 GMT
Subject: CN=83625d08b1198e497aa8a2eb5ba9f1ad24567542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:97:61:c6:f0:ce:f7:5e:11:bb:4d:f3:6a:6a:
91:02:79:2e:eb:a7:53:77:f7:78:66:90:9d:33:0a:
cb:ad:c1:03:c8:07:28:8c:2a:6b:be:17:ac:5e:6b:
99:af:b0:82:9d:97:84:39:60:4b:09:2b:3f:36:4f:
6c:84:6d:f9:4b:e9:fc:90:39:7d:cb:61:40:56:f9:
e0:b9:dd:b4:51:9a:22:06:6c:92:1d:dc:aa:f1:dd:
ee:da:53:e0:d3:98:60:c4:ff:74:61:1e:58:b6:e4:
03:16:5d:fa:94:b9:78:4d:ef:d2:a0:2e:17:7f:3b:
bf:85:02:92:af:21:81:72:fe:8d:bb:c7:d8:50:ea:
ff:2f:31:dd:3f:52:83:b5:00:a3:51:b3:96:b5:03:
40:0c:bb:41:6b:9a:54:20:93:ff:3c:c8:bf:ff:ee:
96:10:fa:1a:0f:78:48:ce:fa:c8:70:e9:b0:6b:e8:
a8:84:3b:7c:99:ff:c0:60:58:7b:a4:82:e9:07:1d:
96:86:19:e1:c1:66:fe:8f:45:07:0c:b6:bf:0f:5d:
d1:7d:0f:aa:a5:ae:7e:c3:bc:0d:17:f3:5e:75:88:
15:58:51:f0:23:c7:f7:79:e0:12:b5:21:0d:3e:25:
16:53:89:e9:1e:b9:ef:3d:6e:3c:b1:4b:77:e1:e8:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:62:5D:08:B1:19:8E:49:7A:A8:A2:EB:5B:A9:F1:AD:24:56:75:42
X509v3 Authority Key Identifier:
keyid:83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:da:2a:9b:a6:46:c6:3f:60:80:31:2f:fb:5f:82:d6:68:3b:
5d:6b:b5:3f:6a:e3:ea:c6:c6:55:37:3e:96:86:56:2f:00:57:
9d:9d:93:51:ef:be:aa:20:4f:5a:c5:d6:00:36:bf:4a:94:b1:
20:89:71:4d:04:d3:f3:07:d9:0f:72:00:31:0a:f6:be:24:73:
47:37:3d:4d:ca:da:0c:00:e0:e5:0f:73:79:c0:c2:96:f7:3a:
94:04:35:5c:04:0f:9e:aa:2e:36:46:ea:09:14:09:74:6d:a5:
f2:34:ad:47:c0:e0:bb:f7:75:40:2d:1e:72:5e:99:92:bf:ba:
6b:f1:32:99:6f:90:ca:04:90:28:c1:72:bd:99:67:f0:fb:41:
b9:7a:47:d7:8d:63:79:50:9d:ee:50:a1:77:0b:36:9a:15:ed:
b1:a2:e0:a6:0e:8c:3e:fc:c8:39:04:01:fc:d1:99:12:7d:30:
00:f6:13:e1:3b:5f:da:0b:4a:f7:49:f5:66:b1:86:e5:93:22:
c6:b0:f0:c3:af:89:81:fc:c3:a1:73:11:19:68:5d:4d:60:e5:
20:4c:83:05:01:3e:33:4c:1e:a1:a9:c6:33:d6:95:c4:65:d8:
45:ef:f5:b1:f2:27:a5:4f:5a:a5:53:16:0d:ee:1a:a9:c0:d3:
82:37:98:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 22:10:06 2025 by rpki-client