Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: /u8zfRjgL8qcc8S8WNh3Uce1wl1QR1/VPyWbBtM8Ot4=
Subject key identifier: EA:85:C1:50:41:F3:E8:84:25:3A:47:AB:E4:B5:8D:12:61:42:7F:22
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 019A71B8EF1D0F58283D92838B719643C7D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:16 +0000
Manifest this update: Tue 11 Nov 2025 07:02:16 +0000
Manifest next update: Wed 12 Nov 2025 07:02:16 +0000
Files and hashes: 1: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: 99PUUdyilx/ehfE5OcBVZKw4BWiAXp1VGpbu6CaMVOQ=)
2: smR56PkXYVe9TX2HDTFHOdEfzmA.roa (hash: Sy1g3FvvZhbNKF9SZtRpU0M+VhDMdQVYf1yY8kTyMT0=)
3: z45Pl2HIpMthc8mWmMny5O7sL4E.roa (hash: Fh6l02AaD6oxps7qwBCXlSR7cWfTt60ybgfv5Z0qI7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ef:1d:0f:58:28:3d:92:83:8b:71:96:43:c7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Nov 11 07:02:16 2025 GMT
Not After : Nov 12 07:02:16 2025 GMT
Subject: CN=ea85c15041f3e884253a47abe4b58d1261427f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b3:17:ef:16:74:f4:96:f8:02:2b:0d:96:28:
37:99:33:7f:bb:f8:73:70:22:0c:33:ce:f9:6c:fd:
74:45:f8:51:7a:16:03:d5:8b:39:3e:5d:c4:05:c5:
66:bc:41:61:79:01:00:ca:f4:b3:e9:13:cf:03:7c:
1e:a3:e7:a7:ff:36:f6:6f:12:2a:2f:93:17:71:a9:
21:d6:a5:7c:4c:3d:92:bb:48:0c:91:a6:aa:1d:3e:
27:d5:08:04:4d:fe:d0:3b:5b:73:5e:55:81:bd:5e:
da:b6:b9:23:5b:ff:30:0d:1e:88:14:48:9e:26:c2:
91:16:3a:93:c4:5b:8d:00:d3:42:31:5b:37:ad:4c:
ba:c3:13:fe:58:4c:d7:1a:94:fc:f3:f8:e9:86:8c:
9a:50:af:8e:c2:d7:99:7c:6d:13:cb:51:bb:61:21:
02:09:4a:93:83:96:1d:3e:9c:95:1f:54:01:cb:ba:
42:46:78:34:e9:66:26:87:8d:d2:7a:96:0b:06:29:
49:28:be:5f:70:93:12:73:a3:ec:73:3c:38:b1:ab:
f2:4d:63:31:16:c2:3f:08:0c:2e:a5:00:a7:be:f2:
84:ad:8e:e1:5d:4a:ea:14:03:e5:ba:f3:70:30:e5:
48:2c:27:e8:06:36:96:d1:2c:8d:6f:d4:79:c8:5e:
93:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:85:C1:50:41:F3:E8:84:25:3A:47:AB:E4:B5:8D:12:61:42:7F:22
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:46:41:da:7e:03:c5:c0:84:cd:b1:1c:0e:e2:2f:40:e9:6c:
6d:96:3a:b0:b2:3e:e0:46:eb:b5:ba:41:c3:4d:8f:e2:27:54:
b9:0e:23:76:fd:d8:51:56:7f:3b:a0:f3:7e:22:af:12:7a:fe:
3e:5d:85:bc:b4:7e:18:0a:90:ec:52:2c:ad:f4:1c:f6:23:52:
52:92:1b:c3:19:39:18:68:e1:62:ef:95:15:a2:62:f4:55:0d:
20:43:d5:5c:7a:f1:0c:ac:84:7a:c3:ac:1f:e6:e8:b3:b4:8f:
6c:7a:a1:27:17:37:e5:16:a9:30:d8:5a:d3:13:b3:b3:8e:30:
55:0d:cd:d3:e3:0d:61:13:f9:42:28:50:f3:7b:56:75:f7:68:
48:47:79:42:63:eb:96:0e:21:d4:f3:66:2f:ed:77:23:88:31:
45:d3:04:a5:31:b7:ba:6e:a1:7d:d7:c6:d3:ec:6e:bf:fb:3e:
2b:17:c9:b9:d9:15:e2:7f:a2:8a:c2:cb:06:f3:8e:d0:05:7d:
0a:a0:13:8b:6d:68:f4:e5:4f:36:0d:62:0b:e3:73:9b:aa:79:
2b:b5:13:42:20:64:36:74:67:5e:3f:52:7a:69:cc:4e:a5:6c:
21:0f:d6:a2:ed:71:1e:cc:1a:83:18:8e:25:df:cb:4a:98:3d:
75:13:8e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:13 2025 by rpki-client