Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
File: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft (raw, json)
Hash identifier: Nx/lW9QbFK3//HrZ583rZcF5GZXRRGb3e9N4ZJGuzjg=
Subject key identifier: 8F:2C:12:03:92:53:F5:EC:54:B5:40:6A:9E:24:FD:27:A5:69:76:E0
Authority key identifier: 83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
Certificate issuer: /CN=83020637e89655e299d91843769254af07714994
Certificate serial: 019A71B7AF2F892971632FBC2C131CB19AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
Manifest number: 0B87
Signing time: Tue 11 Nov 2025 07:00:54 +0000
Manifest this update: Tue 11 Nov 2025 07:00:54 +0000
Manifest next update: Wed 12 Nov 2025 07:00:54 +0000
Files and hashes: 1: 1-R9Qf46XIEkfXqrQvwwzD2Tou7g.roa (hash: MQ5+3E8S339NrGygiORsr3A7NuJnR4bP2xWWIaK0oj4=)
2: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl (hash: waPoGlcpcU28myQ7pG8yjBsl6WQEI/zIu22FSC0+GfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:af:2f:89:29:71:63:2f:bc:2c:13:1c:b1:9a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83020637e89655e299d91843769254af07714994
Validity
Not Before: Nov 11 07:00:54 2025 GMT
Not After : Nov 12 07:00:54 2025 GMT
Subject: CN=8f2c12039253f5ec54b5406a9e24fd27a56976e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0f:79:f1:fa:c7:e1:87:4a:99:b1:c9:c8:a2:
3f:92:1f:c1:f1:ec:12:86:b1:6b:51:10:46:3c:4f:
28:7a:40:cb:2a:21:28:ea:f4:dc:7d:d6:b0:f1:c3:
ca:f2:dc:0e:73:70:33:b7:04:58:2b:2a:60:de:df:
6c:38:be:e8:52:d8:1a:c4:82:2a:2c:39:43:11:78:
8e:0e:08:cf:0a:3d:3e:b5:15:e4:4e:ea:97:7f:70:
ca:76:3d:86:22:66:a1:35:be:08:e2:f9:d0:69:dc:
32:52:5b:db:a4:8a:8a:ef:44:19:ed:46:be:7b:05:
79:15:8a:8c:8e:0a:cb:5e:f1:6b:d6:15:d2:66:17:
ed:84:57:9d:3a:32:8b:73:97:87:18:65:d9:f4:a2:
e6:31:80:9e:ad:19:0f:ad:bc:fd:e0:41:10:81:4b:
f9:7b:59:4a:cb:48:76:26:ea:04:65:fe:1d:4b:f3:
47:fe:bf:9a:0e:8c:c1:cb:79:04:e2:65:1c:80:4c:
e4:db:68:37:a7:37:04:6d:75:60:88:c6:9f:42:04:
6d:8b:97:3e:52:ea:3f:52:c1:0d:45:6d:e6:18:5d:
99:63:9d:02:02:0e:9c:ad:65:53:eb:4a:31:6c:79:
38:ff:33:56:36:31:c5:82:a2:01:4d:7e:7c:a4:d9:
f0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2C:12:03:92:53:F5:EC:54:B5:40:6A:9E:24:FD:27:A5:69:76:E0
X509v3 Authority Key Identifier:
keyid:83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7d:c0:3e:05:7a:42:ae:37:a9:e7:6f:62:ec:68:f9:ef:63:
b7:e1:a3:cf:9f:14:5d:9b:ec:a1:b7:30:bc:02:28:35:ca:2f:
36:85:9d:6b:80:30:d3:79:fc:20:75:c0:70:8f:67:da:e6:99:
0c:08:2f:5d:7a:0f:c4:63:98:52:e9:2c:b7:2a:66:88:86:41:
74:3d:59:ac:a2:2f:f1:ec:ee:71:dc:9c:26:4b:66:4f:3c:55:
52:6b:de:4b:bb:3e:09:f2:67:84:85:31:36:dd:47:07:1c:2e:
b3:1c:6a:96:03:f2:28:0a:b2:fd:0d:ad:33:1b:11:b3:15:30:
2e:9e:e4:93:10:e8:19:92:d3:d1:88:d8:f4:44:97:d8:79:29:
04:94:36:4c:7c:e2:6f:aa:7f:eb:3e:5a:46:83:d1:c4:66:ee:
05:ec:b7:11:a5:bd:b7:ac:63:62:5d:35:07:a8:f9:fb:1a:c9:
01:8d:6f:37:60:6b:16:b3:b7:6a:0a:29:23:3f:3b:84:ef:d6:
24:c3:8b:a4:f4:23:fb:b2:65:29:fd:6e:4a:04:a0:1d:2c:90:
1e:e0:7b:6b:c9:65:15:6f:5a:27:6a:da:3a:6e:5d:9f:98:b7:
98:ce:56:11:90:ed:9d:ca:23:1e:4d:1f:6d:7d:87:cc:6b:19:
e3:be:9c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:57 2025 by rpki-client