Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File: GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier: sB2O08pd13WsaYBMtGI3ZxIVzsFE161GIRbzIQxFXJw=
Subject key identifier: 0A:EC:46:D7:31:94:1F:FD:99:A4:43:3A:73:7C:7A:C2:70:FB:DA:9E
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial: 019A183CB57D94D1C7D1EB90C75BD6A9E03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number: 08EE
Signing time: Fri 24 Oct 2025 22:00:22 +0000
Manifest this update: Fri 24 Oct 2025 22:00:22 +0000
Manifest next update: Sat 25 Oct 2025 22:00:22 +0000
Files and hashes: 1: 1MMOey2DFiHGwBuawoDAV5GTR0U.roa (hash: C6gJNXtwf6inO2jQLVsOQct8LTsyFQuwXSbNPT+y76g=)
2: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: 9AlvzuG1CRP0XmcPvXB1V3TOj8cq/xAhqgkyVzo+LpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:3c:b5:7d:94:d1:c7:d1:eb:90:c7:5b:d6:a9:e0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
Validity
Not Before: Oct 24 22:00:22 2025 GMT
Not After : Oct 25 22:00:22 2025 GMT
Subject: CN=0aec46d731941ffd99a4433a737c7ac270fbda9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:a2:2d:03:b9:4c:e3:50:e6:04:4c:ca:0a:
e5:35:75:f1:1d:3d:78:7b:7c:4f:f8:f5:40:2f:da:
c3:18:a2:de:08:ca:45:aa:1e:28:42:7e:a5:7b:e2:
f6:b9:4c:df:c4:06:06:91:46:6f:4f:b7:5d:bc:ed:
3c:91:16:99:a4:b3:ab:c1:c1:a0:c6:98:58:69:ca:
5e:1f:e3:d4:2b:2a:67:18:37:0e:4b:ad:6d:b3:2a:
d9:3c:1b:26:f7:f0:8b:4b:cf:1d:3a:a7:ac:d1:90:
11:13:7c:81:63:c4:1d:c3:4f:62:c5:49:7a:5c:8e:
3d:d9:ed:b2:36:6a:26:23:6a:a6:58:d2:10:1e:0e:
76:ef:9b:80:eb:c0:b3:a9:70:7f:01:3e:21:2a:3e:
65:42:82:d7:77:ca:53:53:3f:69:0f:ad:bd:53:2b:
d1:c2:3e:35:68:d7:8d:dc:d6:3a:3e:15:ef:18:ae:
4a:ff:64:e1:64:c2:2d:85:e8:4a:54:b0:0b:42:03:
be:89:d7:c2:82:c1:f1:42:66:92:6f:91:36:08:5e:
00:ac:bd:e5:66:3c:3e:b5:1b:db:9d:19:4c:2b:a9:
e0:8d:99:b3:f5:a3:34:1d:99:02:cb:90:9c:64:82:
6c:c3:ef:41:ba:15:ca:bc:66:73:dc:6b:d2:de:bb:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EC:46:D7:31:94:1F:FD:99:A4:43:3A:73:7C:7A:C2:70:FB:DA:9E
X509v3 Authority Key Identifier:
keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:10:58:62:42:13:6a:41:50:19:a2:69:00:9b:45:a7:2b:2d:
cb:7d:03:68:14:85:d2:6e:02:8a:2b:6c:f5:62:56:b5:90:f7:
e7:2c:93:e9:6f:63:cc:7f:3f:bb:bf:2c:ed:56:70:f1:6d:bc:
41:6b:21:5c:a8:c5:6e:fb:60:08:87:d4:9c:7b:db:b3:2d:bb:
dd:21:04:b2:b7:b1:5b:e5:ec:e1:e4:9c:02:5a:72:fc:e6:fd:
82:58:9f:4a:5f:c1:3a:ae:10:81:b6:79:73:ad:94:fd:c0:c3:
c6:df:0f:9c:d5:00:12:83:85:ea:fa:6e:36:41:31:46:fa:5c:
92:00:78:8f:00:ca:a0:2e:85:23:e7:ce:78:3d:25:27:47:43:
69:31:2c:d4:89:c6:02:a0:66:c0:1f:6d:49:48:a4:5f:a7:45:
18:2d:18:8e:9a:81:b9:1d:c1:96:69:33:96:c2:cb:d7:19:59:
69:ea:1d:04:8e:7a:76:86:bf:01:fc:92:19:3e:c0:19:37:be:
da:2f:dc:7e:3b:e6:a5:62:e0:db:57:cb:f8:9b:2d:5c:53:11:
4a:51:0e:f7:b8:30:0b:0b:09:d7:39:f4:8d:ae:7b:0e:c6:57:
88:f7:c0:54:49:3e:34:cf:e7:89:8c:35:05:e0:b4:cf:8b:01:
14:08:77:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoYPLV9lNHH0euQx1vWqeA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDk4NDEyYzk4NGI4OWJlMzgwMTFhNzJhM2M0NzE5NzVm
YzQ3YTIwHhcNMjUxMDI0MjIwMDIyWhcNMjUxMDI1MjIwMDIyWjAzMTEwLwYDVQQD
EygwYWVjNDZkNzMxOTQxZmZkOTlhNDQzM2E3MzdjN2FjMjcwZmJkYTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr6iLQO5TONQ5gRMygrlNXXxHT14
e3xP+PVAL9rDGKLeCMpFqh4oQn6le+L2uUzfxAYGkUZvT7ddvO08kRaZpLOrwcGg
xphYacpeH+PUKypnGDcOS61tsyrZPBsm9/CLS88dOqes0ZARE3yBY8Qdw09ixUl6
XI492e2yNmomI2qmWNIQHg5275uA68CzqXB/AT4hKj5lQoLXd8pTUz9pD629UyvR
wj41aNeN3NY6PhXvGK5K/2ThZMIthehKVLALQgO+idfCgsHxQmaSb5E2CF4ArL3l
Zjw+tRvbnRlMK6ngjZmz9aM0HZkCy5CcZIJsw+9BuhXKvGZz3GvS3rsT5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArsRtcxlB/9maRDOnN8esJw+9qeMB8GA1UdIwQY
MBaAFBsJhBLJhLib44ARpyo8Rxl1/EeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYt
NzBkMTMzMDZjZDFjLzEvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYtNzBkMTMzMDZjZDFj
LzEvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxBYYkIT
akFQGaJpAJtFpysty30DaBSF0m4Ciits9WJWtZD35yyT6W9jzH8/u78s7VZw8W28
QWshXKjFbvtgCIfUnHvbsy273SEEsrexW+Xs4eScAlpy/Ob9glifSl/BOq4QgbZ5
c62U/cDDxt8PnNUAEoOF6vpuNkExRvpckgB4jwDKoC6FI+fOeD0lJ0dDaTEs1InG
AqBmwB9tSUikX6dFGC0YjpqBuR3BlmkzlsLL1xlZaeodBI56doa/AfySGT7AGTe+
2i/cfjvmpWLg21fL+JstXFMRSlEO97gwCwsJ1zn0ja57DsZXiPfAVEk+NM/niYw1
BeC0z4sBFAh3Og==
-----END CERTIFICATE-----
Generated at Sat Oct 25 00:45:11 2025 by rpki-client