Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
File: gwn4FzfW8X58GtWISa_3HFAGTwQ.mft (raw, json)
Hash identifier: cz0Djh8a4pil/wEYo1Pn8Vv1zJdKb1NiyxROcd8Lwdw=
Subject key identifier: 2E:F3:DC:62:4C:3C:A6:81:0C:4F:A1:3D:C1:8F:05:C4:40:A3:59:A1
Authority key identifier: 83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
Certificate issuer: /CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Certificate serial: 01975045D4C0A76A3ACE6C417A2CBC5BC29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
Manifest number: 1367
Signing time: Sun 08 Jun 2025 16:00:43 +0000
Manifest this update: Sun 08 Jun 2025 16:00:43 +0000
Manifest next update: Mon 09 Jun 2025 16:00:43 +0000
Files and hashes: 1: C29j8BjW64hUTo90rvT2p7vncMk.roa (hash: z1gCCbWIlJIwgYs0Ud8cLUPoe3m6/PGlyP6Xd1WDnws=)
2: gwn4FzfW8X58GtWISa_3HFAGTwQ.crl (hash: 8l9KI98Wcne/pW6xH68J8iHtGniHthzKxcel4kmEQFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:d4:c0:a7:6a:3a:ce:6c:41:7a:2c:bc:5b:c2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Validity
Not Before: Jun 8 16:00:43 2025 GMT
Not After : Jun 9 16:00:43 2025 GMT
Subject: CN=2ef3dc624c3ca6810c4fa13dc18f05c440a359a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:22:5a:95:fa:49:57:13:79:0a:ba:26:18:
79:63:70:5d:49:3b:86:22:67:5f:56:b0:21:c5:2e:
be:ca:90:76:67:12:9c:c2:9d:a5:3a:2f:ad:93:a2:
1f:ec:9b:52:64:69:ff:20:43:7f:77:1f:cd:be:a3:
aa:c1:9a:bd:aa:7e:a0:4e:65:6c:43:62:f9:00:90:
01:df:b7:30:e8:98:8c:a8:15:79:05:ee:7e:62:3e:
2d:29:e8:05:e6:d0:9b:f0:c0:b5:05:6d:0d:8e:7f:
c7:5c:6a:8c:da:f6:8d:7b:1a:21:23:69:cf:8b:f8:
68:74:3d:c5:a1:60:4d:84:91:ef:d3:1b:fb:21:a1:
22:94:ad:6b:b8:10:82:85:66:c6:04:69:bb:fb:89:
29:c5:a8:11:28:51:d3:4c:e9:c5:17:92:74:44:e2:
66:b5:a5:2a:ab:28:3c:07:6a:f4:81:29:f4:8d:c0:
75:0b:93:cf:d0:df:c1:2f:fb:86:f5:63:b7:aa:82:
14:75:ab:1f:ba:1d:ea:b0:69:58:2f:fb:c0:54:49:
b6:22:0d:00:10:75:56:60:7b:1f:b7:bd:85:21:92:
59:8f:13:6f:8b:54:9c:81:81:00:3a:92:0d:1b:8b:
72:5f:3b:9c:54:92:da:1c:ef:2f:63:fc:78:10:42:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F3:DC:62:4C:3C:A6:81:0C:4F:A1:3D:C1:8F:05:C4:40:A3:59:A1
X509v3 Authority Key Identifier:
keyid:83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6d:b8:0b:67:1a:37:e3:15:ee:eb:14:49:44:9b:80:87:a3:
58:95:78:7d:67:f1:46:55:81:7b:05:c8:08:fb:0f:ec:ee:c3:
8b:fe:54:64:5d:38:60:1a:63:7e:2a:ac:6c:4f:4b:50:34:41:
7c:4f:d0:73:64:07:23:83:19:39:5b:74:16:44:2d:51:89:da:
51:74:e7:79:33:f5:a3:d8:18:3f:71:b1:3b:b2:08:71:fd:ae:
44:b0:cb:7a:f4:95:71:a3:f6:7b:25:be:36:99:3e:4c:3d:5c:
57:ae:20:99:1d:f1:6d:cb:57:1e:e8:a9:f2:27:fa:d6:41:71:
ad:09:10:df:5c:24:01:c8:e8:30:68:47:aa:c1:9c:4c:dd:d6:
3f:53:43:d2:59:e3:5b:51:76:70:9a:16:7c:ff:cd:b5:62:f5:
1d:62:1d:24:12:ac:b6:39:0c:89:92:23:1c:ef:c8:0b:bb:75:
aa:7b:37:57:1f:4f:48:2c:b3:67:5e:b4:9a:ce:c5:ef:93:41:
32:27:22:92:46:21:7f:ad:88:3f:81:dc:0f:98:69:73:09:82:
98:e6:7b:7b:77:35:f9:f3:50:31:45:ad:92:37:12:2a:c2:86:
b4:e9:ca:fe:10:23:0f:37:10:fb:46:ee:87:af:91:e3:e7:7b:
f1:eb:6a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:45:53 2025 by rpki-client