Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
File: GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft (raw, json)
Hash identifier: gQeMFnMO37SzNrqtmU1bvKwNMrcrd0geZhBbDXmKVik=
Subject key identifier: A2:E0:79:8C:3A:87:1B:CF:9C:A4:9A:F7:46:DE:C4:63:60:8A:AA:62
Authority key identifier: 19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0
Certificate issuer: /CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
Certificate serial: 01984DAFCDCAC8084B06F96473D1BB6E40B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
Manifest number: 022A
Signing time: Sun 27 Jul 2025 21:00:23 +0000
Manifest this update: Sun 27 Jul 2025 21:00:23 +0000
Manifest next update: Mon 28 Jul 2025 21:00:23 +0000
Files and hashes: 1: GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl (hash: ukZLfmgBTbpvfnuLyzleZMmGAuoV76Ka1YVLCg9I5Ms=)
2: SFyTfsWyq2coBx8ydbZroSS50xQ.roa (hash: ZZpymtBw1D9nPwu2cf1P4YkyaGccufHXZlJkybCGFMw=)
3: TNkzBPyNieqNtFJ7OZ5WQ2BFAFM.roa (hash: yD3hqpWrk6f2s5tXbai7Hu4KRhgeNHLLkovFRVk/JKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:af:cd:ca:c8:08:4b:06:f9:64:73:d1:bb:6e:40:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
Validity
Not Before: Jul 27 21:00:23 2025 GMT
Not After : Jul 28 21:00:23 2025 GMT
Subject: CN=a2e0798c3a871bcf9ca49af746dec463608aaa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:04:83:00:00:36:a7:4f:3e:bc:ee:df:fc:
db:66:0a:d3:9d:15:a1:58:a3:d2:f5:ea:72:a9:c5:
73:ee:6a:e8:77:6a:2c:87:01:1c:57:9b:1b:20:e7:
33:fb:ae:3a:9d:61:74:c7:c8:06:8f:f0:e8:cf:37:
a5:96:6f:ff:07:30:36:08:9d:a5:e5:d2:e7:b5:37:
9c:3f:c6:ec:23:8f:36:d8:2f:32:66:1a:f9:99:4e:
78:2d:7e:bf:42:61:ee:7d:3b:be:a3:b9:dd:ba:84:
98:41:17:61:25:cc:6a:79:c8:06:b0:bf:76:6e:d9:
06:10:da:ea:95:a5:4a:15:e8:0c:d7:3a:ef:d6:04:
48:96:6a:15:47:46:36:a8:dc:72:ef:57:9a:f7:fc:
6b:e8:4a:0e:02:31:62:93:56:cc:47:c2:3c:4a:63:
fb:15:63:95:a6:74:fc:20:a9:6c:42:17:6b:03:2e:
29:1f:6d:ff:34:1d:5a:e8:4b:63:25:0a:ef:e1:e3:
05:a2:27:03:da:58:e1:6c:35:a6:61:c2:19:f4:bb:
99:66:39:a9:36:02:c7:89:e2:37:04:47:cd:4b:59:
12:fb:3d:3c:ff:39:0b:84:b5:6e:7c:b6:85:a1:09:
02:a9:49:08:86:4e:44:0e:87:e9:86:0e:8e:87:32:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E0:79:8C:3A:87:1B:CF:9C:A4:9A:F7:46:DE:C4:63:60:8A:AA:62
X509v3 Authority Key Identifier:
keyid:19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:20:1f:d8:a6:b6:d5:6e:49:e0:c7:3d:d8:89:2d:10:8b:c3:
63:72:c9:ff:d2:83:bc:6a:85:b8:13:67:35:02:20:d5:bd:c4:
a7:e4:ae:9d:96:10:a1:3b:c4:c6:fc:62:4f:75:4a:92:0b:f4:
90:3b:70:7f:9e:8a:de:ec:d7:ca:8a:c4:54:c9:a4:bb:1d:c1:
a4:ca:ec:2a:e2:a4:05:e7:f1:82:2c:0a:86:8f:4b:9d:34:33:
55:17:a4:c8:c7:2b:de:56:0f:b1:fe:ee:8b:4f:81:57:10:a0:
b5:5d:d6:0d:9c:48:c1:8e:20:ff:78:8c:2d:14:b0:be:d3:6f:
8d:63:e8:6c:52:7e:69:59:f2:4e:6f:cd:3c:5c:e3:87:ee:5c:
1d:82:61:86:b6:c0:0d:c2:0e:60:ca:bc:8c:21:b0:43:d0:45:
f8:d5:79:71:cb:35:13:82:10:c5:31:48:6d:df:2b:f2:e9:c6:
2b:b3:7b:7c:4b:ef:25:21:8a:e7:89:cd:5e:ab:0e:73:7a:77:
4a:4b:55:9e:e5:db:17:8d:3b:0d:34:c9:8e:02:52:49:f5:8b:
e4:0f:c9:22:2a:f5:d3:28:cf:16:1b:70:13:69:c2:a3:01:4e:
60:95:ec:9c:b9:cc:10:a5:b4:f5:68:9b:79:ee:ac:e3:92:48:
0a:b9:ea:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:57:02 2025 by rpki-client