Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: lOxxM0cLV6y0f5CfO286LXSMgc3AtHLOHyVxVmi2NNc=
Subject key identifier: E3:02:1E:29:79:0F:3C:7D:93:AF:DD:D1:0F:D3:D6:B4:45:0E:1D:DD
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 019923A07260EF109A8A717918EC0B27AF2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:02:21 +0000
Manifest this update: Sun 07 Sep 2025 10:02:21 +0000
Manifest next update: Mon 08 Sep 2025 10:02:21 +0000
Files and hashes: 1: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: 82l4YwzcqbwB1/y9jOKCst614RE4doJvEN7oXWa8Wfc=)
2: smR56PkXYVe9TX2HDTFHOdEfzmA.roa (hash: Sy1g3FvvZhbNKF9SZtRpU0M+VhDMdQVYf1yY8kTyMT0=)
3: z45Pl2HIpMthc8mWmMny5O7sL4E.roa (hash: Fh6l02AaD6oxps7qwBCXlSR7cWfTt60ybgfv5Z0qI7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:72:60:ef:10:9a:8a:71:79:18:ec:0b:27:af:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Sep 7 10:02:21 2025 GMT
Not After : Sep 8 10:02:21 2025 GMT
Subject: CN=e3021e29790f3c7d93afddd10fd3d6b4450e1ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5e:d8:bd:6b:a6:8b:03:47:99:fb:ad:bc:54:
6e:81:66:e2:62:36:de:aa:26:7e:82:17:52:08:f6:
a2:1f:bf:14:87:f4:99:b8:57:7c:ff:bc:53:87:52:
18:3e:7f:18:3b:0a:83:88:a0:86:1c:65:64:ec:55:
73:d7:db:3d:d1:8e:e9:57:54:63:39:f0:c3:da:dc:
b9:bb:d8:cf:5c:3e:a0:f2:c9:36:12:2e:bf:36:d2:
91:e1:dc:c0:f4:d6:87:59:a4:d3:6f:67:06:d8:a1:
0c:05:b7:17:00:66:2f:ce:7b:b4:fa:3a:be:69:38:
27:03:d8:99:4c:1c:3d:9e:88:0f:ac:e7:5c:de:be:
6d:da:fc:16:fb:99:71:9e:f7:e9:e4:ab:a1:b6:12:
e5:d2:7c:7f:13:1b:0f:b9:48:f9:ec:c1:97:ee:da:
52:20:ca:d4:57:66:f8:6f:2a:ae:44:d7:36:5d:3c:
1e:02:6e:74:83:db:6e:2d:44:6b:8d:e6:e8:27:8f:
de:6b:7e:35:ba:08:2e:ed:87:63:e3:60:4d:1c:31:
e7:7b:b3:d7:0b:e8:a7:eb:7d:3c:d8:1e:b9:bb:62:
11:25:2d:af:b8:1b:66:ff:87:2a:2e:bd:ce:24:ab:
06:3b:4a:13:87:62:06:76:b4:1e:1c:be:c8:db:eb:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:02:1E:29:79:0F:3C:7D:93:AF:DD:D1:0F:D3:D6:B4:45:0E:1D:DD
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8e:fb:cc:0f:9e:77:be:37:76:57:bc:1d:30:c8:4b:68:25:
93:34:ef:fe:04:ad:8c:b4:75:01:47:12:54:78:df:6a:de:8b:
fe:d2:69:bc:bc:35:28:83:c4:7a:29:78:2b:d6:09:1b:89:3b:
08:76:27:da:10:62:9d:66:19:b6:66:bb:84:5d:d2:8d:0f:f4:
81:25:40:12:06:31:d0:b3:e9:f4:77:6b:57:85:be:57:69:d2:
37:0f:fa:8b:d1:bc:91:02:0c:5a:17:77:08:d7:08:8f:5e:83:
59:d3:3d:5d:4a:ba:78:c9:a3:d8:fa:64:5b:2f:e2:6a:62:ca:
1d:1b:d7:7c:19:e2:99:0d:1a:71:07:5f:3f:bc:12:d2:d8:26:
ff:70:72:f9:a9:32:26:ba:04:4b:fa:00:43:ac:b0:7f:06:02:
76:67:1f:4b:96:9c:91:a0:77:e4:6b:41:24:3d:84:da:9c:4e:
01:77:29:94:42:bb:9c:71:4d:90:94:77:93:3f:81:d3:0e:f8:
3a:d8:80:7e:ad:f5:87:33:fd:76:34:9c:20:3c:18:9f:b1:67:
e1:ca:7d:d9:35:08:61:a4:e6:a8:46:98:62:e8:2c:48:01:db:
77:69:ea:17:08:b3:2d:e2:46:95:a9:66:b6:ae:5e:c0:e3:06:
15:e9:2c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:00 2025 by rpki-client