Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
File: Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft (raw, json)
Hash identifier: K11Jl0iT4Pq6gYJcqp3BJwZZEbnZXp8WdQNxl3Cw4uw=
Subject key identifier: A8:2B:1F:F3:80:A2:A9:FD:7D:99:73:30:CC:50:9E:14:9F:B3:4C:82
Authority key identifier: 1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
Certificate issuer: /CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Certificate serial: 019A72259CEC5D0106EB4CFD28CDA5CCD573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
Manifest number: 16F8
Signing time: Tue 11 Nov 2025 09:00:58 +0000
Manifest this update: Tue 11 Nov 2025 09:00:58 +0000
Manifest next update: Wed 12 Nov 2025 09:00:58 +0000
Files and hashes: 1: Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl (hash: 6FJywfLLYgtab51Hqg9SW1Bw5ogGV7bl6m+JkB4SCWc=)
2: aF_43DT8_FuRSeutyPS1ou0Qd_Y.roa (hash: RrbF82KQXt3VwJUd+EvcBbcTN6Aiglh/wvfzSoG8RZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9c:ec:5d:01:06:eb:4c:fd:28:cd:a5:cc:d5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Validity
Not Before: Nov 11 09:00:58 2025 GMT
Not After : Nov 12 09:00:58 2025 GMT
Subject: CN=a82b1ff380a2a9fd7d997330cc509e149fb34c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:47:ff:1f:40:37:1f:f8:5b:b9:1f:c4:35:
86:76:a1:dd:d9:84:e1:6a:32:29:e9:44:d2:9b:82:
28:14:02:f3:8c:fa:3c:17:c1:11:69:b4:01:d8:99:
d0:10:a3:ca:fe:43:27:84:2e:0b:98:e9:45:7b:87:
6d:6c:7b:65:b0:a8:a0:b9:e2:95:af:60:9d:6c:ae:
34:13:ca:a0:7e:b1:4f:ed:a3:d1:1f:dc:e9:e1:f6:
62:db:4b:3f:95:c9:80:4c:59:23:7b:20:b2:d0:06:
7b:51:20:fb:c4:a3:f4:ca:9b:02:fe:71:da:3d:58:
5b:5d:e8:2c:ec:ab:3e:d6:36:2a:7c:f9:31:24:04:
37:fb:e0:af:d3:69:f0:73:b2:8c:ad:42:08:1e:d4:
d8:41:7c:9f:6f:b1:ea:2e:d4:d2:30:9b:6e:fa:8b:
d3:dd:fb:cb:ae:42:a0:b4:f2:fc:e9:62:3e:bd:65:
b3:ad:3f:3f:58:51:3f:58:21:3f:48:9f:47:ec:14:
79:19:6a:76:a2:7d:ac:bd:10:ff:a8:cd:3e:47:29:
72:42:4f:f8:f8:33:34:9e:da:b5:d8:14:72:28:dd:
8f:97:55:c9:34:09:0c:48:ee:26:f6:05:11:dd:c6:
1a:75:b3:bd:0a:f6:77:5b:17:81:af:51:c1:c1:b4:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2B:1F:F3:80:A2:A9:FD:7D:99:73:30:CC:50:9E:14:9F:B3:4C:82
X509v3 Authority Key Identifier:
keyid:1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e7:de:27:51:53:91:37:2f:c1:ec:b6:af:94:27:4d:b6:a8:
55:01:c7:23:e9:d5:0e:68:05:7e:ed:3d:1b:69:86:02:5f:e1:
3a:00:3f:b8:85:50:b8:6d:f5:46:d4:7b:49:f0:c7:87:f3:80:
d4:55:63:f9:d7:bf:fb:71:19:63:dc:08:91:c9:db:cc:e2:1f:
f5:96:49:b4:3e:79:1e:31:37:d8:24:07:75:29:3e:02:d3:fa:
f8:09:33:f0:84:48:67:a8:f0:01:98:b2:a9:be:a9:c5:7f:3b:
e5:fe:da:9a:f8:8d:bc:09:d6:2a:50:80:2c:e8:6d:b2:15:07:
32:a3:e4:89:d0:7d:d8:ca:64:75:94:8f:dc:be:55:f4:3a:48:
0a:54:45:98:e3:28:8a:d9:79:50:ef:9a:34:aa:62:36:b4:c8:
41:3e:b8:9c:90:f2:fc:58:b7:ce:a7:0b:1c:93:76:ca:78:23:
14:e7:25:c1:b9:65:7b:80:74:63:24:8f:a0:0f:52:69:24:e4:
9a:35:36:62:ea:28:a5:1d:8f:2e:1c:29:05:6c:cf:16:38:48:
ac:fc:e0:b1:cb:a5:35:0f:ee:65:96:58:d4:00:61:13:80:96:
26:5c:b8:a5:6f:aa:92:f6:cc:40:65:e6:af:f4:d8:12:2f:74:
4a:24:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:49 2025 by rpki-client