Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft
File: gwN5KJCtoro4fjmzFLdwNdX7MVs.mft (raw, json)
Hash identifier: D4ls/0xyUgObBO3HIhaIg/41W+kENXhRt8044f34yQs=
Subject key identifier: AF:5C:75:6E:85:CA:EE:8B:A6:52:89:28:DE:C5:CA:3C:C4:56:F3:36
Authority key identifier: 83:03:79:28:90:AD:A2:BA:38:7E:39:B3:14:B7:70:35:D5:FB:31:5B
Certificate issuer: /CN=8303792890ada2ba387e39b314b77035d5fb315b
Certificate serial: 019A71B7AC0F187189346F4022468E2E9B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft
Manifest number: 0188
Signing time: Tue 11 Nov 2025 07:00:53 +0000
Manifest this update: Tue 11 Nov 2025 07:00:53 +0000
Manifest next update: Wed 12 Nov 2025 07:00:53 +0000
Files and hashes: 1: 7o9ALcr1bL4UOBX6YJn0uD-9tF0.roa (hash: wGcA/CUa2AHlBIQ9Ur+ssm2xCQswNtocmJ6VYpXekNw=)
2: gwN5KJCtoro4fjmzFLdwNdX7MVs.crl (hash: bO3rU12PXPY2j7P7VpP+uldQcMbYNYaD2G9KUiwOxNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ac:0f:18:71:89:34:6f:40:22:46:8e:2e:9b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8303792890ada2ba387e39b314b77035d5fb315b
Validity
Not Before: Nov 11 07:00:53 2025 GMT
Not After : Nov 12 07:00:53 2025 GMT
Subject: CN=af5c756e85caee8ba6528928dec5ca3cc456f336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:22:46:5e:15:3a:8c:00:f3:15:c4:f0:d5:
13:cb:5d:42:e2:74:ed:f3:cd:7d:cc:bd:5c:85:2f:
b9:06:18:0a:12:cd:d3:ba:79:97:78:e8:56:f2:e7:
a2:b3:9b:1c:22:c7:0f:0d:25:f7:df:31:da:0d:ea:
81:0e:4c:39:f7:cf:7a:fc:19:f6:01:d8:43:c0:28:
af:49:bd:07:61:c9:7f:e7:47:64:e0:ce:27:2b:40:
54:5d:b1:14:a0:a7:ba:36:69:ef:0e:59:8b:13:4e:
53:3b:b8:00:77:ea:81:b8:ce:28:e5:a6:ef:3b:13:
e0:35:35:0c:a3:ab:2b:7e:cc:43:fd:dd:4d:a4:98:
f6:04:57:87:9c:b0:c7:62:eb:8f:52:1c:dc:ee:28:
a7:e5:e8:c6:47:d0:36:f9:09:12:64:c0:1c:a1:80:
d4:fe:48:26:31:b1:45:e9:3f:7e:02:2e:06:4d:f1:
30:6f:4a:6b:dd:92:95:de:a1:cf:d1:2e:cb:4c:d4:
c7:b1:33:d1:73:42:1f:1e:65:e6:9c:ce:9d:ef:c2:
72:92:01:7d:aa:70:2a:63:27:a8:27:21:6d:a0:a0:
53:47:cc:5f:03:26:75:67:09:58:c4:21:ac:b3:aa:
c2:53:73:ae:37:13:74:43:07:9f:fe:ee:65:40:57:
48:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5C:75:6E:85:CA:EE:8B:A6:52:89:28:DE:C5:CA:3C:C4:56:F3:36
X509v3 Authority Key Identifier:
keyid:83:03:79:28:90:AD:A2:BA:38:7E:39:B3:14:B7:70:35:D5:FB:31:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:74:90:71:cb:89:08:ef:dc:7a:3f:ac:22:6c:b6:bc:39:8e:
f7:cd:25:f9:d2:a8:41:9a:64:e1:1c:9e:97:2f:bf:6e:e6:b6:
8f:c8:b5:a0:f8:c0:36:90:9c:02:78:94:c8:18:a9:32:d0:c2:
91:90:24:7c:ab:ed:58:c5:7a:cd:04:9f:ce:7a:05:66:8e:e4:
3e:98:5d:75:ef:e8:67:3e:b8:ed:5f:dd:ba:c2:5b:46:25:1e:
33:87:39:0c:df:72:b5:65:81:a0:54:fa:e9:31:27:3e:54:ae:
88:ad:f0:06:16:2a:84:85:45:ed:96:87:e7:bc:ee:44:fd:52:
1d:19:18:fd:0e:b4:ff:6b:50:00:3b:1b:3e:01:04:38:f1:18:
62:f9:d7:bf:28:da:3b:96:f9:e2:e7:5e:0f:81:85:ae:96:68:
5e:48:18:1c:13:c8:f5:4f:8a:c4:21:9b:d1:86:9a:49:33:cd:
36:d1:56:92:24:76:f1:a3:ed:b7:59:81:c6:32:49:3a:29:dd:
5d:ae:99:3a:13:56:61:7a:e2:09:a7:4a:a5:46:7d:d2:fc:d2:
68:d2:a6:48:91:a5:30:6f:0f:73:69:70:93:24:37:f5:0d:43:
5e:ff:9a:a6:32:c8:cb:40:1f:a9:95:1f:a0:45:7d:af:49:28:
13:5a:36:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:23 2025 by rpki-client