Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
File: GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft (raw, json)
Hash identifier: oVgeTHnzftFjnP81pzxfdRW2Jn4LzLBw3uxPdTY1LsU=
Subject key identifier: 97:39:0F:9E:DD:C9:8E:08:28:54:2B:ED:45:CA:66:92:22:8D:ED:D1
Authority key identifier: 19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0
Certificate issuer: /CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
Certificate serial: 0199C456E78BAD3B6DE731FCA900DD3EC6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
Manifest number: 02EC
Signing time: Wed 08 Oct 2025 15:00:53 +0000
Manifest this update: Wed 08 Oct 2025 15:00:53 +0000
Manifest next update: Thu 09 Oct 2025 15:00:53 +0000
Files and hashes: 1: GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl (hash: VHHxXx1dEVNJiPFDQwxDKuoRN9gZbnq8KRktfvvsI8A=)
2: SFyTfsWyq2coBx8ydbZroSS50xQ.roa (hash: ZZpymtBw1D9nPwu2cf1P4YkyaGccufHXZlJkybCGFMw=)
3: TNkzBPyNieqNtFJ7OZ5WQ2BFAFM.roa (hash: yD3hqpWrk6f2s5tXbai7Hu4KRhgeNHLLkovFRVk/JKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:56:e7:8b:ad:3b:6d:e7:31:fc:a9:00:dd:3e:c6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
Validity
Not Before: Oct 8 15:00:53 2025 GMT
Not After : Oct 9 15:00:53 2025 GMT
Subject: CN=97390f9eddc98e0828542bed45ca6692228dedd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:d2:cc:68:4a:48:f5:06:0b:22:33:de:a8:
2f:c2:c1:76:44:c1:a2:38:0b:14:b3:41:c4:e7:6a:
41:b6:f8:a1:de:fa:4d:23:e5:5c:76:20:99:27:fb:
70:73:2c:cf:5e:38:12:a8:d3:cb:c1:09:6c:63:1d:
66:bb:a2:7d:ad:49:27:bb:ed:0a:2c:11:a6:a6:95:
25:34:62:22:b3:8f:19:7f:d2:70:24:f2:a5:cd:3a:
18:d9:d4:9a:18:14:4a:06:5f:e6:e3:31:a6:27:2b:
82:f3:9a:d9:b8:36:33:e7:e9:e0:e8:8c:8b:db:b2:
e1:35:a8:02:53:14:02:6f:4d:21:e0:3f:ee:00:c0:
9a:e8:ef:e6:75:4a:72:42:ee:cb:e5:11:9b:9f:1e:
95:5d:2e:58:34:eb:98:b2:cf:37:ea:14:a0:20:04:
ca:0f:84:0d:eb:05:a1:ae:5c:a7:db:27:15:0f:74:
3f:61:47:69:5c:15:eb:91:9d:09:6b:cd:87:c0:ce:
71:c6:33:34:41:30:e9:b3:7c:e2:cd:f8:7d:db:e2:
87:23:aa:c1:84:76:7d:42:26:e6:c8:26:cc:7d:71:
a7:a1:16:4d:9a:77:de:c0:43:eb:12:a7:db:2e:30:
ab:26:a7:0a:9e:fb:c0:8a:99:17:bb:aa:27:b1:1e:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:39:0F:9E:DD:C9:8E:08:28:54:2B:ED:45:CA:66:92:22:8D:ED:D1
X509v3 Authority Key Identifier:
keyid:19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:95:7f:5f:e1:b2:16:bd:b3:0e:cf:70:f5:73:51:04:ad:60:
e6:5a:84:3d:0e:ec:0c:2e:5c:3c:f1:9f:9c:1e:59:69:68:8e:
6b:52:f2:a4:50:1c:bb:08:42:38:6c:7e:79:5f:44:d4:01:62:
00:16:eb:6e:53:eb:24:54:01:49:cb:34:19:24:61:df:f2:1d:
ae:72:66:f9:8b:3b:32:fd:db:cd:e7:2b:ff:83:b8:2d:32:39:
58:b4:47:35:2f:44:9b:2c:0b:7e:dd:21:4e:b1:8a:b7:e9:ee:
bd:a3:a6:f4:46:31:ca:57:69:58:b6:19:a2:55:d7:7d:d8:87:
63:dd:97:16:e7:5a:12:71:55:2a:5d:47:b3:0a:85:cf:72:e1:
47:a7:5e:df:1b:a6:0b:b8:21:86:b1:78:f1:84:98:d8:86:fa:
47:40:29:f0:83:1c:5e:0d:a9:a5:b1:d8:8f:1d:20:a2:31:57:
99:4d:51:4d:e4:76:4d:6a:14:2e:df:1b:91:48:a7:aa:15:79:
68:7c:b2:91:fa:9d:e4:28:65:25:9e:1a:25:96:bd:6c:16:76:
a9:cd:53:3e:89:51:0d:24:41:63:d0:8a:f6:f4:62:85:8a:07:
75:6b:90:18:35:57:2c:c5:ca:0e:41:f7:34:97:5d:39:97:33:
fe:1c:12:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnEVueLrTtt5zH8qQDdPsbrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjEwZDYzOGUyYTJmOTVhM2Q5MGU0Y2ZmOTk1OWE4NTlm
YWM0ZjAwHhcNMjUxMDA4MTUwMDUzWhcNMjUxMDA5MTUwMDUzWjAzMTEwLwYDVQQD
Eyg5NzM5MGY5ZWRkYzk4ZTA4Mjg1NDJiZWQ0NWNhNjY5MjIyOGRlZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwvSzGhKSPUGCyIz3qgvwsF2RMGi
OAsUs0HE52pBtvih3vpNI+VcdiCZJ/twcyzPXjgSqNPLwQlsYx1mu6J9rUknu+0K
LBGmppUlNGIis48Zf9JwJPKlzToY2dSaGBRKBl/m4zGmJyuC85rZuDYz5+ng6IyL
27LhNagCUxQCb00h4D/uAMCa6O/mdUpyQu7L5RGbnx6VXS5YNOuYss836hSgIATK
D4QN6wWhrlyn2ycVD3Q/YUdpXBXrkZ0Ja82HwM5xxjM0QTDps3zizfh92+KHI6rB
hHZ9QibmyCbMfXGnoRZNmnfewEPrEqfbLjCrJqcKnvvAipkXu6onsR4dSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJc5D57dyY4IKFQr7UXKZpIije3RMB8GA1UdIwQY
MBaAFBlhDWOOKi+Vo9kOTP+ZWahZ+sTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dFTlk0NHFMNVdqMlE1TV81bFpxRm42eFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hZTE4YWEtN2MxNS00Nzc1LThmYzUt
NzcyZGNkM2FmNWY2LzEvR1dFTlk0NHFMNVdqMlE1TV81bFpxRm42eFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hZTE4YWEtN2MxNS00Nzc1LThmYzUtNzcyZGNkM2FmNWY2
LzEvR1dFTlk0NHFMNVdqMlE1TV81bFpxRm42eFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5V/X+Gy
Fr2zDs9w9XNRBK1g5lqEPQ7sDC5cPPGfnB5ZaWiOa1LypFAcuwhCOGx+eV9E1AFi
ABbrblPrJFQBScs0GSRh3/IdrnJm+Ys7Mv3bzecr/4O4LTI5WLRHNS9EmywLft0h
TrGKt+nuvaOm9EYxyldpWLYZolXXfdiHY92XFudaEnFVKl1HswqFz3LhR6de3xum
C7ghhrF48YSY2Ib6R0Ap8IMcXg2ppbHYjx0gojFXmU1RTeR2TWoULt8bkUinqhV5
aHyykfqd5ChlJZ4aJZa9bBZ2qc1TPolRDSRBY9CK9vRihYoHdWuQGDVXLMXKDkH3
NJddOZcz/hwSzg==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:25:10 2025 by rpki-client