Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: Reu4nLeqYjr6YUij+HchdPzxNCdoaA/JVCenDPPupus=
Subject key identifier: D7:2C:15:FA:F1:93:3A:1C:D5:AC:1C:99:4D:B8:CA:77:24:04:D3:3C
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 01974B563355C87E9994E7EC46519BD6EF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 027B
Signing time: Sat 07 Jun 2025 17:00:29 +0000
Manifest this update: Sat 07 Jun 2025 17:00:29 +0000
Manifest next update: Sun 08 Jun 2025 17:00:29 +0000
Files and hashes: 1: E6h98msuHIDDEo3EuNbedKUfRUE.roa (hash: LlRZmkIkDMo4tzcCd8AIz4o5Zg0OyytYjPKbff5wXqs=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: RL/Xoun6jHyD/BWG1KudQ3vDSHkIgc5h9n1tTNV3wXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:33:55:c8:7e:99:94:e7:ec:46:51:9b:d6:ef:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: Jun 7 17:00:29 2025 GMT
Not After : Jun 8 17:00:29 2025 GMT
Subject: CN=d72c15faf1933a1cd5ac1c994db8ca772404d33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:b1:fc:b9:52:f2:47:92:62:b7:9b:b4:07:
cd:21:71:38:e6:64:77:87:d6:74:39:85:a0:f6:10:
37:f1:4c:08:00:81:00:53:de:09:54:84:39:b6:82:
34:46:50:ea:51:70:48:ad:e0:89:0b:5c:70:2b:8a:
7e:e4:f9:c6:a2:cb:e7:4a:2c:24:bf:d2:b2:4d:3b:
5d:71:24:ce:06:92:e7:ce:43:69:9f:26:4e:40:da:
bc:6d:59:6e:a1:32:89:a4:5a:48:3d:52:71:71:9e:
f3:a1:d6:e9:7f:27:30:da:20:33:48:0c:6b:20:a6:
e7:45:68:40:5b:02:55:f6:d4:e8:22:f1:2a:d8:74:
d4:4e:d7:e5:fb:6e:5e:e7:af:9e:22:07:0f:42:ab:
4b:a8:f4:c7:78:ce:5d:70:fc:c0:d5:ba:71:84:c8:
1b:5e:1a:29:35:52:df:6a:dc:6d:96:2d:e9:6c:a4:
ca:c7:a2:be:ef:72:08:2d:a4:8c:a4:8e:cf:e3:ce:
36:d3:ed:a7:e3:c1:09:96:99:ee:26:23:b8:78:02:
a4:f8:0e:8d:ff:21:52:93:9d:77:8c:e0:9f:da:62:
7b:ce:70:c5:a3:97:a1:5e:33:73:ab:bd:fa:bb:ab:
2d:03:91:8b:74:f5:5c:93:2b:92:08:83:aa:68:4b:
da:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:15:FA:F1:93:3A:1C:D5:AC:1C:99:4D:B8:CA:77:24:04:D3:3C
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cc:9e:33:dd:48:ae:ff:92:cd:b7:7b:c2:0f:82:e0:d0:9c:
67:99:7b:22:af:c7:22:88:91:f0:be:cb:3a:e7:56:1f:ad:f0:
69:e3:88:92:60:90:62:a5:2e:58:12:8c:e8:9a:0f:74:62:a2:
60:fb:eb:ba:e9:9e:18:63:c3:16:c9:ca:dc:5e:14:2b:37:6f:
ad:32:52:42:9d:51:d7:e6:88:fb:51:7b:ef:1b:b0:18:a1:26:
7f:87:0e:c2:47:6e:3a:1c:83:3b:8d:59:6a:71:0b:01:22:09:
aa:ba:f2:4c:14:b4:e8:07:ea:27:04:c4:45:d7:58:62:76:44:
0e:eb:c5:a4:3c:86:73:56:63:65:a8:17:8c:3a:e8:2b:06:af:
66:04:4a:e7:2d:73:35:80:b8:b5:c1:82:5a:9f:c1:b9:87:1b:
22:5d:f0:13:74:7f:56:7d:97:bd:93:73:55:ee:d9:20:f7:ce:
3f:fa:1c:a8:fa:bc:a1:36:ff:18:45:50:4a:b4:11:67:32:a5:
c0:e9:cb:f8:98:f5:4c:e8:8b:46:05:4e:f3:f4:a4:9b:c9:f2:
79:fb:ae:79:32:50:78:0e:8a:b4:64:ef:3d:21:37:a8:b3:fc:
ab:5f:83:12:ad:a1:6b:55:8c:51:b3:e6:cc:c1:11:56:fa:17:
26:6c:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:07:58 2025 by rpki-client