Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft
File: gwN5KJCtoro4fjmzFLdwNdX7MVs.mft (raw, json)
Hash identifier: maMDVetnjEC8YKOCNF0k7q9yGmmsjlwhUQY5vRfGW4Q=
Subject key identifier: DA:AC:8B:74:69:4D:8C:E9:FA:28:AB:C6:CA:AF:33:43:16:15:CC:24
Authority key identifier: 83:03:79:28:90:AD:A2:BA:38:7E:39:B3:14:B7:70:35:D5:FB:31:5B
Certificate issuer: /CN=8303792890ada2ba387e39b314b77035d5fb315b
Certificate serial: 019921B12735EB45F8A080E428F2EE120E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft
Manifest number: DA
Signing time: Sun 07 Sep 2025 01:01:21 +0000
Manifest this update: Sun 07 Sep 2025 01:01:21 +0000
Manifest next update: Mon 08 Sep 2025 01:01:21 +0000
Files and hashes: 1: 7o9ALcr1bL4UOBX6YJn0uD-9tF0.roa (hash: wGcA/CUa2AHlBIQ9Ur+ssm2xCQswNtocmJ6VYpXekNw=)
2: gwN5KJCtoro4fjmzFLdwNdX7MVs.crl (hash: g8OmNJrZYDnLHGocwwCOimBPGW4mRveMW1qeEv+VwYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:27:35:eb:45:f8:a0:80:e4:28:f2:ee:12:0e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8303792890ada2ba387e39b314b77035d5fb315b
Validity
Not Before: Sep 7 01:01:21 2025 GMT
Not After : Sep 8 01:01:21 2025 GMT
Subject: CN=daac8b74694d8ce9fa28abc6caaf33431615cc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:8b:13:cb:71:e1:ed:b3:24:dd:40:d7:16:
d0:57:7e:2b:79:55:ce:72:f0:56:ac:2e:42:96:aa:
3c:eb:ba:05:ab:a0:0a:30:c5:79:85:55:85:00:d4:
de:5b:25:65:02:b1:e1:b7:3a:ca:6a:37:fc:1d:9d:
ca:80:a1:6a:32:15:32:c5:f8:4f:25:99:85:65:01:
69:09:d6:49:8c:f4:ff:e0:7a:1f:41:de:4a:c2:cf:
d7:64:a2:39:f7:fd:1e:db:5c:1f:3b:95:36:fd:58:
12:4b:d6:3c:22:13:3e:9b:c3:65:36:39:91:13:0e:
d1:a6:a7:9c:91:e7:75:f1:fa:60:39:57:69:87:54:
53:3e:99:d0:b7:ab:40:42:3e:11:f0:f3:04:9c:ea:
f5:1b:74:33:cf:2f:dd:7e:ad:2c:e1:4e:cc:45:07:
f4:8b:e1:c9:fc:13:6d:ce:00:22:cc:99:90:23:0f:
3e:86:91:39:5b:21:c3:c8:64:27:25:a2:c3:7e:37:
65:da:7d:35:60:d1:c6:04:0b:81:fc:9e:f6:40:7c:
7e:6a:d6:b6:6e:17:ef:a9:4c:95:d8:8f:20:b2:81:
44:f3:d7:46:53:0a:fa:fa:09:3d:4e:76:78:06:c8:
08:07:1d:7b:b4:6d:17:4f:e3:ea:bd:82:a2:da:bb:
cc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AC:8B:74:69:4D:8C:E9:FA:28:AB:C6:CA:AF:33:43:16:15:CC:24
X509v3 Authority Key Identifier:
keyid:83:03:79:28:90:AD:A2:BA:38:7E:39:B3:14:B7:70:35:D5:FB:31:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1c:fe:c5:e0:dd:6f:e2:1e:49:ba:c5:66:24:ad:fc:62:7c:
77:9e:39:cb:bd:53:56:67:f7:43:03:55:dd:28:3b:d1:2a:e9:
b1:f1:c3:70:e4:db:33:59:ad:a2:5a:24:93:ac:d0:a2:38:4d:
2c:86:2d:02:80:c7:87:14:1d:68:b3:65:8d:15:b7:4d:e5:13:
5d:19:5e:77:55:15:f4:d5:e5:86:d9:3e:a3:e0:3b:0c:5c:04:
79:ed:71:d1:f0:66:8b:d8:ee:2d:a2:fc:67:8c:9c:7d:bb:71:
20:6f:00:04:4f:3f:60:f2:20:be:a3:be:8a:5d:d1:fb:61:1b:
59:52:2e:b3:df:8a:48:26:ab:53:3d:95:50:55:fc:e8:19:cc:
f6:39:96:cf:9b:b7:b7:3d:15:46:12:3a:62:dc:a1:79:1d:9f:
aa:99:68:d4:ea:da:49:b1:14:b6:82:2a:3a:51:5e:74:96:7e:
3c:60:ab:69:6d:0c:01:38:65:25:cc:51:a0:e9:1e:c0:7f:1b:
b5:3b:13:04:ab:7f:3f:b3:d6:c1:87:7d:83:1c:d4:78:87:5b:
2a:e0:6d:c3:f5:0c:1b:62:88:45:fb:d8:2c:77:63:b3:e4:37:
32:c3:6f:1d:01:a9:af:e7:d8:21:9a:84:3a:a2:c8:9f:71:01:
f1:30:9d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:39 2025 by rpki-client