Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
File: GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json)
Hash identifier: 1oVajn+rkrcwIHn+DrhWbEHuys4wzoCRsWgZxHJTMBo=
Subject key identifier: CA:29:A8:B3:05:52:04:35:A0:59:E2:A2:D6:85:A6:EE:A0:8B:FF:FB
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Certificate issuer: /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial: 019A23D37F919084D0512B45737A26F3E05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
Manifest number: 0EBC
Signing time: Mon 27 Oct 2025 04:00:54 +0000
Manifest this update: Mon 27 Oct 2025 04:00:54 +0000
Manifest next update: Tue 28 Oct 2025 04:00:54 +0000
Files and hashes: 1: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: 2J9J1fGB+GMsK9gpzquHhQ9lTFlENyo96OVT3BHgluM=)
2: UJ4olMWApP7MwaE2AnHAAWvvURE.roa (hash: j8yhG+CkxtZBOA9heOK1DNmQYHzy/3/vJayn7f/Unnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:7f:91:90:84:d0:51:2b:45:73:7a:26:f3:e0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
Validity
Not Before: Oct 27 04:00:54 2025 GMT
Not After : Oct 28 04:00:54 2025 GMT
Subject: CN=ca29a8b305520435a059e2a2d685a6eea08bfffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:b3:cb:e2:64:75:36:6d:a4:16:bc:02:67:
6c:05:01:18:b6:f5:f1:44:a6:4f:fa:50:0d:ef:1f:
db:6e:e8:a2:27:11:7e:78:13:20:63:2c:fb:34:2f:
e6:9c:33:de:e9:ca:39:b4:a7:80:69:bb:0d:39:18:
f8:c6:19:6e:46:ab:9e:df:30:07:67:8b:21:4c:53:
a4:3c:57:99:c7:35:c0:01:e2:e0:d4:46:d5:76:93:
37:cd:73:40:4a:02:4b:98:48:69:c3:2c:02:34:6b:
c2:6d:7f:84:d6:0e:08:14:f5:62:33:03:eb:43:87:
dc:39:f0:55:91:d6:e1:5c:dd:cd:96:4e:a3:b4:a5:
e2:ff:66:cb:4a:0d:44:ac:f0:65:15:cb:21:b3:24:
e2:a5:e6:d8:8a:ed:8b:12:3f:3c:9e:08:51:2e:45:
7f:6b:d9:69:c7:c7:20:2c:9c:c5:37:13:fc:9e:79:
37:25:02:6e:e4:81:70:11:84:de:31:09:66:14:2a:
30:a4:88:2a:bf:ac:f3:e3:5a:be:e0:17:c5:35:91:
39:8d:21:55:9a:2d:fe:48:e0:84:fd:24:8d:8d:21:
be:37:76:45:38:45:bd:b7:6e:64:ab:d7:67:af:c9:
70:72:c0:54:b7:90:08:9e:41:32:6e:83:a4:c4:2f:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:29:A8:B3:05:52:04:35:A0:59:E2:A2:D6:85:A6:EE:A0:8B:FF:FB
X509v3 Authority Key Identifier:
keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9a:33:82:c1:9b:dc:30:87:5e:3e:6c:89:fd:2e:3a:c1:47:
3b:07:3a:25:a9:02:f8:72:fe:87:f4:6a:6b:de:ed:2e:0c:9e:
b9:36:f8:a1:90:a3:ef:c8:78:38:ed:0c:85:d9:19:70:76:af:
fb:69:52:00:a9:8a:3b:d6:15:c0:cf:03:89:af:da:60:f0:22:
f4:3d:85:a2:d4:37:b4:5b:09:c5:3a:cd:ac:cc:08:c3:5f:6f:
02:46:b9:71:1f:b9:0f:1d:ad:1e:21:95:a0:a1:3e:fd:96:91:
37:df:a8:de:55:30:42:aa:ab:cf:4d:57:1a:1b:a4:c7:fe:f9:
6b:0f:b3:cf:f9:55:4a:21:22:61:39:b8:71:8e:40:4d:ea:0e:
fb:db:87:66:7f:cf:8f:56:7e:85:f2:d5:90:68:14:51:9b:81:
94:d9:07:a6:ee:77:6c:60:58:e4:b4:0c:ce:08:00:70:4f:19:
bd:f5:33:26:d7:7d:c9:06:46:5d:f8:e0:bb:f4:ba:a7:52:a8:
a6:3e:6a:76:b3:b6:84:a4:de:2e:d8:d5:19:26:90:7d:77:0c:
ad:d7:e4:3c:ea:3e:71:33:b5:2c:d0:1d:3e:1e:ef:e4:79:5b:
70:47:63:18:14:20:85:93:5a:03:0c:e3:48:a9:30:ad:33:37:
02:16:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:04:31 2025 by rpki-client