Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
File: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json)
Hash identifier: d898+Pmks/ifTgTkXIMJOlUDpKhJTLSENLfrAC67JDE=
Subject key identifier: 84:B7:24:73:E2:7B:1B:24:D2:28:27:0D:E6:28:79:0E:BA:00:96:1B
Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
Certificate issuer: /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Certificate serial: 019A541A6BD3E31589C2B37F8FA2B7FA57C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
Manifest number: 02A3
Signing time: Wed 05 Nov 2025 13:00:08 +0000
Manifest this update: Wed 05 Nov 2025 13:00:08 +0000
Manifest next update: Thu 06 Nov 2025 13:00:08 +0000
Files and hashes: 1: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: 7k5RGbeZ2SZYH/Ui8iQ6ubVTRYKoDNDwSxkBd7i6FqE=)
2: HbzqPjxV2gzVXrBA-nWLmjfTDxo.roa (hash: cWFkMXXdUpsLxuuBafoKiMAojPQ1C+2JXUGxa/p9/qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:6b:d3:e3:15:89:c2:b3:7f:8f:a2:b7:fa:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Validity
Not Before: Nov 5 13:00:08 2025 GMT
Not After : Nov 6 13:00:08 2025 GMT
Subject: CN=84b72473e27b1b24d228270de628790eba00961b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:5a:39:dc:cd:0e:8a:9c:ca:6c:9e:1f:97:
a9:70:3e:4c:34:da:70:cc:94:5c:32:ed:e0:ab:d8:
c2:07:a9:05:a7:09:14:67:62:a7:7f:ef:28:6c:82:
28:1e:ae:c5:da:25:27:d0:98:7d:27:68:b6:6c:de:
b9:b7:b7:9c:d8:12:df:1f:b1:76:6d:71:27:63:57:
e4:8d:35:32:ef:b9:89:36:94:e5:76:9d:e7:bc:02:
a3:58:8b:2e:82:e6:10:c6:e9:ba:1d:ec:e1:66:5b:
76:27:7d:bc:d7:ec:8b:dd:99:8f:e9:f2:72:65:de:
79:67:b6:05:fb:8b:ff:42:21:46:ca:c2:85:76:ad:
04:30:f4:65:b1:42:5a:7b:f0:f5:39:93:35:30:6a:
05:67:e4:2e:47:0d:ef:39:ca:ff:0f:b1:30:0a:d5:
ec:35:1f:14:31:f6:39:2b:50:0c:8b:81:7b:0c:ac:
59:d9:2a:44:f4:c2:29:4c:5c:f8:b1:eb:f7:b7:f7:
f8:56:8a:24:53:82:ac:a8:60:f0:a6:f3:f8:85:66:
df:cd:dd:9d:1c:b4:14:8b:dd:b1:6d:40:3e:84:ca:
6e:5e:00:bb:72:27:16:86:94:4b:b3:a7:c8:18:dd:
c3:b7:d3:09:a0:38:82:d2:f2:64:06:2c:54:42:22:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B7:24:73:E2:7B:1B:24:D2:28:27:0D:E6:28:79:0E:BA:00:96:1B
X509v3 Authority Key Identifier:
keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4f:6a:9a:30:4a:ea:07:85:4d:11:43:dd:5b:c7:a3:ec:64:
5c:bb:14:be:68:b0:50:58:e7:1a:72:e9:ef:8d:b9:8b:71:9b:
b5:99:58:51:2f:12:34:5a:3a:bd:93:bb:0c:11:f8:60:00:d4:
f2:4b:30:4c:fb:f9:00:90:4b:11:cc:75:08:f3:0c:68:a6:b5:
f7:0e:d2:1e:34:1f:95:5b:9a:1a:31:fc:93:4a:fc:cd:0c:d5:
e0:03:bf:bd:81:44:4b:1d:ec:29:e2:50:aa:2a:a5:50:46:5b:
71:28:c4:78:8f:af:aa:c9:cd:2c:4e:0d:7f:56:9e:57:43:e2:
0f:7a:d6:96:cf:f9:45:5a:73:06:84:b7:b4:97:85:d4:01:5e:
23:df:46:03:94:94:21:ef:52:1d:43:0b:90:e4:36:48:87:b8:
ad:a3:37:dc:09:08:b0:f6:12:0b:ad:66:1e:e8:68:d0:2e:87:
84:1e:07:57:8e:20:92:6a:1e:4f:81:7a:8c:43:9b:07:f4:28:
7a:8f:58:0b:c4:f4:58:63:3d:85:b5:f8:77:6c:5a:c1:0d:b4:
96:1d:b5:7e:e7:99:d7:c0:75:4c:5c:45:93:91:80:f6:dd:2e:
98:ee:f3:72:9e:5c:86:ab:6f:93:17:b0:53:42:4a:54:23:11:
68:25:40:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:40:56 2025 by rpki-client