Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
File: gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json)
Hash identifier: 4HXXVbooRjq2wKDj56kr3KMhS90uuv4v/apAQTIuaAc=
Subject key identifier: 33:93:B1:8E:FC:82:B1:B4:39:99:7D:41:20:9B:47:61:32:45:4A:3A
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 019963C7710C85FB9B6D218209394C79DF2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
Manifest number: 0F2A
Signing time: Fri 19 Sep 2025 21:00:38 +0000
Manifest this update: Fri 19 Sep 2025 21:00:38 +0000
Manifest next update: Sat 20 Sep 2025 21:00:38 +0000
Files and hashes: 1: 1-xAAXQxUbK7GDdH6uCkdwm9GcKQ.roa (hash: 4wGfnneRjqqcoqI8J1mtTnFBuWzrhvTfIpD3nl/XM2s=)
2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: r322SAcTkgbFv1ElWwiFQpbDcbwx46ROqUHO10GJC2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:c7:71:0c:85:fb:9b:6d:21:82:09:39:4c:79:df:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: Sep 19 21:00:38 2025 GMT
Not After : Sep 20 21:00:38 2025 GMT
Subject: CN=3393b18efc82b1b439997d41209b476132454a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:f1:89:55:fa:76:f4:bb:1a:df:68:a7:89:
87:84:7f:90:3f:43:5d:76:ea:dc:a0:84:3a:84:e7:
b5:85:77:94:5e:dc:48:62:0d:82:5a:d4:6b:40:c8:
56:67:46:66:87:10:b3:67:bd:c5:75:17:cf:9d:fe:
6e:fa:73:46:5b:25:a2:30:f2:3b:24:52:72:7e:3f:
14:e3:f0:97:1e:21:1f:81:38:6e:51:a9:97:ab:b8:
e2:98:5b:1c:a6:e0:8d:d3:da:f2:db:72:09:2f:f6:
01:88:eb:1e:29:a7:12:72:78:b4:5d:df:a7:f7:fe:
fc:0e:00:29:98:83:f0:93:ff:b5:79:33:2e:b0:0a:
7f:4c:59:1d:26:ba:21:6d:17:05:86:ec:55:7d:30:
84:ef:60:da:cc:4b:09:0d:a5:67:07:62:7e:d8:0d:
d3:b4:93:28:8c:91:04:6a:eb:6d:27:81:ba:37:b5:
64:35:da:81:49:fe:4e:a4:97:33:fd:06:21:a0:d2:
50:10:f7:a4:31:5e:2c:2d:0d:9e:57:70:82:12:6e:
22:95:53:7e:d1:7e:ea:db:86:9f:97:9b:44:f7:72:
0d:0c:b6:bb:79:0b:b1:f8:41:67:ba:96:05:dd:03:
d8:94:ca:40:01:38:1b:51:3c:d2:85:28:41:22:ce:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:93:B1:8E:FC:82:B1:B4:39:99:7D:41:20:9B:47:61:32:45:4A:3A
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1a:8b:d3:27:1c:20:40:03:6b:12:41:a2:c8:77:71:f2:32:
da:62:5e:a3:87:c7:7e:88:20:4f:8d:92:f3:08:bf:c3:46:75:
f8:90:0c:ce:d9:ab:8e:6b:51:89:45:a2:4e:bd:ee:a2:d5:2c:
ef:49:28:b9:b9:4e:d7:6f:96:3d:d7:02:9f:87:5e:2d:39:56:
18:5f:cf:10:75:6c:55:44:bf:f4:c4:79:c9:f4:74:6e:4b:c9:
be:43:6d:4d:fa:65:ca:f6:ee:35:b8:5e:ee:7d:f1:05:13:c2:
0d:84:71:2f:97:48:30:f6:8a:62:66:21:ff:21:40:f7:4c:39:
73:db:58:a5:dc:42:76:ba:59:a1:0a:d5:be:33:fa:4a:c6:99:
3f:16:d2:49:f1:19:51:35:8a:16:23:6e:6c:e5:a4:cf:80:e7:
f5:dd:94:2b:06:2a:67:9e:27:ed:f1:1d:64:96:c0:2f:f1:6a:
9c:f3:cb:85:eb:9a:38:50:af:e7:9d:12:48:c6:56:0e:22:37:
81:1c:a5:b0:6d:97:76:b0:87:e5:6d:86:f4:10:38:f5:31:c8:
42:2d:07:5c:8d:52:c4:6d:27:a9:b0:e9:42:d7:8f:4c:61:f0:
fb:f3:d3:bb:3b:8d:a7:55:89:3c:8e:78:61:a8:f8:d3:26:a8:
5b:f6:e7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 05:36:27 2025 by rpki-client