Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: lz1MVcOXJdZotdsCLA5dDTi2+YDw0vcagp+S/Lpel8k=
Subject key identifier: 89:A0:09:C1:A9:D9:43:64:59:04:2B:C9:55:6F:C7:DD:31:06:0D:87
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 019A725CB6884766ED42AD1A78172C8248B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 041D
Signing time: Tue 11 Nov 2025 10:01:09 +0000
Manifest this update: Tue 11 Nov 2025 10:01:09 +0000
Manifest next update: Wed 12 Nov 2025 10:01:09 +0000
Files and hashes: 1: E6h98msuHIDDEo3EuNbedKUfRUE.roa (hash: LlRZmkIkDMo4tzcCd8AIz4o5Zg0OyytYjPKbff5wXqs=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: Omh1kShjfFwC7ogq5gBo6dFf2AKFYFSDaMBmMm2U9q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b6:88:47:66:ed:42:ad:1a:78:17:2c:82:48:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: Nov 11 10:01:09 2025 GMT
Not After : Nov 12 10:01:09 2025 GMT
Subject: CN=89a009c1a9d9436459042bc9556fc7dd31060d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:91:24:99:b0:08:bd:07:48:64:f6:6c:4e:
cc:97:e5:f8:1e:c1:7c:06:54:c8:16:15:81:c2:df:
e4:04:c2:55:28:34:64:27:f4:51:eb:9a:7d:d0:a7:
a0:c2:1e:92:a3:4a:79:af:89:25:c6:7f:bb:1b:43:
5e:7d:0f:10:58:8b:27:b8:e8:ff:96:5b:4f:21:f5:
be:9b:ed:34:8b:99:71:e7:21:e6:0e:92:96:b6:b4:
21:ba:ab:7e:26:dc:df:ff:04:39:95:16:d8:52:66:
11:4b:8c:a1:c3:d9:c0:b2:60:17:0c:c8:15:e0:73:
0f:a0:4d:94:56:54:22:97:98:73:c9:50:64:1d:51:
f4:0c:53:1e:32:7c:0c:fd:6d:fe:73:b4:80:d9:bd:
75:67:cd:b0:87:6e:d1:ff:d1:c8:59:28:15:a0:42:
67:39:e6:c4:1f:63:45:f6:62:44:e4:6f:ed:c2:1f:
80:9e:d3:2b:f9:03:05:ee:76:ca:5e:7e:54:76:0b:
e8:41:e5:b8:31:e9:8a:2b:24:81:19:4f:57:f8:01:
55:cb:dd:1e:00:a0:bb:39:ca:0d:95:e3:ff:89:ec:
e2:c8:05:69:ae:6d:e9:b7:ed:70:b1:e5:04:9e:6f:
c5:36:64:8a:85:2c:d2:de:f3:e3:14:94:e9:76:c9:
a3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A0:09:C1:A9:D9:43:64:59:04:2B:C9:55:6F:C7:DD:31:06:0D:87
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d3:15:4d:1a:41:93:95:a6:50:ab:2d:62:a8:9c:dc:f0:8b:
71:94:c6:4d:17:6e:1c:f8:b8:92:47:71:c3:87:7c:67:9f:eb:
79:02:e0:a1:09:52:62:35:13:f6:f8:7e:64:f8:cb:aa:8b:15:
a0:67:7a:1a:98:b3:ac:25:bd:53:53:10:37:0f:07:59:a5:8a:
bf:2b:ed:75:6a:19:74:8c:6d:c5:f4:47:2b:32:e9:e0:83:5d:
df:97:8f:27:5a:d7:90:a4:92:0d:c2:64:e2:62:d4:ff:6b:db:
de:e3:ae:e8:34:f8:bb:3d:d0:58:96:ed:60:3b:bd:1a:93:ca:
5b:88:a1:a0:bb:66:10:da:a3:d0:69:ad:5e:d9:11:b4:59:8d:
a9:c3:a4:33:25:e9:1c:bb:83:d4:5f:2b:26:85:df:a0:5d:06:
3c:0a:f5:54:f3:81:2d:8f:1e:2e:b6:86:f1:94:e5:c8:39:69:
dc:22:f5:bb:6d:49:20:d9:30:19:c2:1d:45:0c:e5:40:85:f7:
af:0e:bf:9a:4a:5f:0d:e6:2f:64:c3:42:02:38:58:7b:58:bb:
b9:e3:e2:b9:4e:a7:48:3b:33:ce:77:1a:c4:b8:2f:8e:70:16:
69:e7:d7:b3:4d:12:74:eb:bd:2a:10:16:fc:99:fb:42:30:63:
2f:68:ac:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:46 2025 by rpki-client