Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
File: gwn4FzfW8X58GtWISa_3HFAGTwQ.mft (raw, json)
Hash identifier: xShNXLLDFukglYnxyDdJfoS3z5pVP043eaUpivh2/78=
Subject key identifier: 9A:70:41:86:5E:6B:F5:CD:DD:4A:A2:B8:90:EE:43:D6:C3:AA:7A:DB
Authority key identifier: 83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
Certificate issuer: /CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Certificate serial: 019A71B8F51F8F067C4C123FD37F95A42D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
Manifest number: 1506
Signing time: Tue 11 Nov 2025 07:02:18 +0000
Manifest this update: Tue 11 Nov 2025 07:02:18 +0000
Manifest next update: Wed 12 Nov 2025 07:02:18 +0000
Files and hashes: 1: C29j8BjW64hUTo90rvT2p7vncMk.roa (hash: z1gCCbWIlJIwgYs0Ud8cLUPoe3m6/PGlyP6Xd1WDnws=)
2: gwn4FzfW8X58GtWISa_3HFAGTwQ.crl (hash: 3djaVfXe4q9uerKZn/VVznVFNMYrbEpQejxety6lBDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f5:1f:8f:06:7c:4c:12:3f:d3:7f:95:a4:2d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Validity
Not Before: Nov 11 07:02:18 2025 GMT
Not After : Nov 12 07:02:18 2025 GMT
Subject: CN=9a7041865e6bf5cddd4aa2b890ee43d6c3aa7adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:69:dd:3e:7c:80:e0:10:30:19:f2:c2:f0:
51:cd:31:6e:df:5b:ea:2f:87:be:73:0b:9c:d6:09:
83:e3:49:f1:4b:a7:01:9d:9d:01:75:c8:86:8b:5e:
12:66:c1:1b:16:76:93:28:a6:55:42:e4:9f:57:7c:
11:31:0f:ce:07:d9:14:4f:63:4d:82:89:b0:76:8c:
54:15:e6:72:87:28:b9:b8:aa:c5:5b:08:36:bf:80:
cb:39:1a:f9:cc:f2:0a:06:e7:13:75:6f:2b:43:f1:
34:dd:af:18:d0:ec:c8:e6:f2:85:98:e7:a3:e6:fb:
1d:ce:9a:f1:24:c8:c7:3e:7e:85:e3:f9:4a:ca:f4:
95:3a:d2:4d:37:2b:23:42:3b:94:a7:6f:22:6d:4c:
9e:bf:86:ae:af:c4:25:97:50:d8:6d:fb:2d:fb:f3:
1a:36:cd:59:dd:31:c6:14:da:db:8b:02:3e:e0:53:
00:78:3e:f4:df:10:2e:d4:23:85:29:d4:86:4a:e7:
49:37:fb:44:cd:15:01:99:74:a5:7f:9f:0e:25:98:
b9:06:ef:35:85:36:b7:8a:8e:3d:67:43:75:13:86:
cc:18:0c:47:57:b8:5c:5f:05:da:ac:d0:c6:65:dc:
14:f8:ea:6d:3d:e3:ed:2c:a0:2d:e5:25:ac:87:69:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:70:41:86:5E:6B:F5:CD:DD:4A:A2:B8:90:EE:43:D6:C3:AA:7A:DB
X509v3 Authority Key Identifier:
keyid:83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b6:b8:a5:26:a7:3f:68:19:97:63:c5:1d:67:2a:4f:7b:79:
a0:eb:3c:48:86:9f:d8:50:9e:38:f1:f4:1b:00:4d:fb:7e:1e:
f3:85:8f:9f:0d:be:a7:5d:b1:89:95:44:14:d9:50:2c:10:aa:
0e:3f:a8:9f:6b:17:69:f4:3e:eb:55:30:85:49:82:7a:9e:3e:
5d:7b:0c:e5:7f:9e:3f:ff:8e:b0:33:9f:33:12:e4:42:2d:ad:
05:56:d2:2d:a1:08:85:3e:ee:81:9f:3e:d8:c0:f0:12:f1:26:
2c:5e:35:3d:bf:87:4f:7b:36:ca:c2:e1:ce:d2:2a:bf:56:a1:
c6:5e:23:21:97:90:46:f8:18:bb:40:47:12:b7:f3:e7:0d:36:
c9:ff:fc:94:4c:b1:97:ad:4b:9b:9d:da:a4:fe:de:d1:df:7f:
7b:55:07:91:7f:d9:26:59:b4:3e:9f:f5:4a:f1:6b:cc:7c:3d:
59:03:f4:9a:be:38:64:f3:2b:9c:8e:7e:75:8d:22:e7:0c:8c:
b7:fc:f7:22:9f:99:38:38:7d:ca:59:ea:fa:d4:e7:1b:1d:f0:
a1:a0:6d:e3:9f:73:f5:54:53:32:bf:18:09:5a:7e:80:36:fd:
3a:ea:78:19:c0:67:8f:81:5d:e3:7f:66:b5:2f:68:3d:33:02:
31:be:9b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:44:19 2025 by rpki-client