Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
File: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json)
Hash identifier: YzWVnUbhGCBLcdmg0ZonWlmwfHZ5h3qGfBua3Wjybss=
Subject key identifier: BC:40:95:4B:93:CA:07:2C:2F:54:65:08:1B:1E:E4:F4:41:51:74:24
Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
Certificate issuer: /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Certificate serial: 019A1C19AA50ED36D21A31B7ED1A516F850C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
Manifest number: 0286
Signing time: Sat 25 Oct 2025 16:00:35 +0000
Manifest this update: Sat 25 Oct 2025 16:00:35 +0000
Manifest next update: Sun 26 Oct 2025 16:00:35 +0000
Files and hashes: 1: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: 8BvhboQ9TLUlLlBff1viQMY2BLI72DAqO6x1LM1A4Rw=)
2: HbzqPjxV2gzVXrBA-nWLmjfTDxo.roa (hash: cWFkMXXdUpsLxuuBafoKiMAojPQ1C+2JXUGxa/p9/qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:aa:50:ed:36:d2:1a:31:b7:ed:1a:51:6f:85:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Validity
Not Before: Oct 25 16:00:35 2025 GMT
Not After : Oct 26 16:00:35 2025 GMT
Subject: CN=bc40954b93ca072c2f5465081b1ee4f441517424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:56:cd:c5:51:73:8a:5d:c0:cc:2a:a1:76:07:
4d:4d:01:a3:b5:45:33:8a:5d:53:86:0d:51:77:d7:
bf:b7:22:de:11:9d:15:9b:3a:6a:a5:d7:94:ae:ec:
99:fc:e0:c5:ac:0a:f0:db:99:09:13:5d:fc:ef:44:
34:8f:38:6f:93:4c:36:ce:d5:3c:b6:91:60:6f:d9:
d1:2e:1a:a5:fc:51:57:9d:1e:5d:c1:c3:9a:93:f0:
4d:5b:3a:94:35:e6:05:7a:71:90:79:a2:1c:87:6a:
1e:ab:01:39:3b:e2:3a:bf:c6:29:b2:39:d0:02:d9:
f1:78:d9:03:87:64:cc:1b:1a:42:67:93:9a:18:58:
f6:79:90:c6:0f:fd:e8:95:a4:f4:ab:19:84:b5:a1:
e6:08:84:76:09:b6:cb:7c:7e:83:48:e1:ee:9c:19:
6f:e5:99:c0:23:e4:e9:1c:08:a7:6e:d9:49:a5:a7:
56:e5:ab:be:df:6e:4d:0f:72:98:83:bb:16:54:3a:
52:16:ae:73:e3:bc:45:95:d5:fe:f0:e3:61:02:12:
7d:79:01:03:36:21:0b:40:07:50:33:ba:17:7e:b7:
81:18:d5:8f:54:76:34:6b:b0:b8:99:2f:26:02:4d:
76:c4:0b:59:e5:f8:bb:b7:c5:87:66:d1:5e:82:4b:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:40:95:4B:93:CA:07:2C:2F:54:65:08:1B:1E:E4:F4:41:51:74:24
X509v3 Authority Key Identifier:
keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:23:1f:30:37:1d:d6:3a:89:2b:df:a4:0e:d9:2c:54:5b:f2:
3e:c6:e7:32:09:9d:a7:c1:ba:39:1f:5c:52:a1:b9:96:8b:39:
2d:c7:e3:c6:94:5e:88:2d:45:1f:94:5a:2d:a2:29:2e:91:7e:
37:a5:43:9f:13:49:54:03:fd:32:c4:68:8e:b1:cf:0c:8d:31:
01:c4:9c:e5:d2:cf:4c:fd:58:c6:80:8b:92:26:03:09:27:81:
78:bc:65:6a:08:27:93:16:e7:21:16:79:00:61:4a:44:13:a2:
6d:cf:39:3d:b8:98:95:8d:ae:5f:f6:d8:c8:b3:6c:57:27:86:
2b:d0:f4:12:f5:d4:43:66:44:7b:49:81:81:86:c2:52:3f:2b:
fd:5a:ef:6d:3e:08:7f:7e:a7:66:44:b4:2c:3e:e2:af:9b:9c:
09:95:3f:4c:a5:8a:d9:98:ec:f8:97:b8:a2:98:d6:5b:b3:9e:
d1:33:fd:03:c3:4c:49:a8:1f:ad:1e:6d:cf:af:a8:7c:0b:e0:
0c:96:9b:53:62:f6:26:f2:e6:2b:fd:c1:57:0e:53:64:d1:47:
09:f5:b1:68:04:a5:ec:ec:b1:fb:6c:fd:5b:16:b9:0a:63:7c:
bc:55:ee:c1:88:0a:0b:fb:17:33:cc:f8:d6:69:9b:92:a7:15:
45:3c:73:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:09:38 2025 by rpki-client