Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
File: GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json)
Hash identifier: IyMH+yJ/8df03IU9YzFqYBIeT1Zi0+WNoB75K0ezE84=
Subject key identifier: C0:81:C3:CB:4D:E3:C9:30:EC:A2:7F:99:CA:1A:4D:F3:97:B3:C3:D3
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Certificate issuer: /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial: 019A4E4FE4F0FA416FB470CE7CDCAD2C0DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
Manifest number: 0ED2
Signing time: Tue 04 Nov 2025 10:00:49 +0000
Manifest this update: Tue 04 Nov 2025 10:00:49 +0000
Manifest next update: Wed 05 Nov 2025 10:00:49 +0000
Files and hashes: 1: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: 8skEtkDm94pqiR2tqhDyDYlwVVhnyiBiZ4ClcGAtPLM=)
2: UJ4olMWApP7MwaE2AnHAAWvvURE.roa (hash: j8yhG+CkxtZBOA9heOK1DNmQYHzy/3/vJayn7f/Unnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:e4:f0:fa:41:6f:b4:70:ce:7c:dc:ad:2c:0d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
Validity
Not Before: Nov 4 10:00:49 2025 GMT
Not After : Nov 5 10:00:49 2025 GMT
Subject: CN=c081c3cb4de3c930eca27f99ca1a4df397b3c3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:5c:05:56:3b:b7:f9:bb:9f:45:2d:03:8a:
26:c7:e5:bf:d6:55:55:74:92:a2:8a:ea:09:b8:2c:
2b:7e:80:25:66:24:5c:7b:70:e9:de:1c:d7:9b:52:
ff:91:75:74:e3:36:4b:c9:d6:91:23:62:4b:9c:ae:
7f:a8:28:09:37:fe:6a:56:bd:10:81:f7:30:95:f3:
aa:b9:80:a5:90:b0:ee:d8:6b:57:3f:eb:f9:78:d0:
f2:dd:85:d8:c4:70:23:78:d0:38:1a:d9:cc:6d:fe:
60:0d:02:1c:1b:ce:38:c5:d7:c4:44:72:81:a2:00:
58:11:e8:f6:6a:99:1d:97:60:de:43:36:99:6b:de:
c8:a0:19:11:65:fd:40:eb:11:cd:e3:01:36:dc:78:
15:ee:bf:22:d0:4d:e8:ca:14:81:41:4e:bc:16:b1:
58:c9:9b:4f:a0:82:05:ee:06:6e:9c:81:06:30:45:
f0:ef:60:f1:da:b6:ac:20:dd:0f:72:2b:cb:e0:7e:
7c:81:60:79:d3:f2:80:b0:7d:31:d7:52:da:40:51:
08:99:4c:63:31:69:8c:8d:0f:40:e4:3d:f3:3f:f8:
14:c2:b0:ec:5b:09:45:7e:86:ea:a8:ab:31:c7:cf:
f3:63:f5:3e:49:81:a8:a2:c6:ba:10:16:71:eb:23:
ee:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:81:C3:CB:4D:E3:C9:30:EC:A2:7F:99:CA:1A:4D:F3:97:B3:C3:D3
X509v3 Authority Key Identifier:
keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e9:b8:3f:47:bd:0d:1e:10:47:3c:1e:f1:ed:56:26:35:50:
69:1e:75:4a:8a:34:f4:78:a8:31:e3:2b:cb:14:e3:b0:e5:fe:
58:14:86:6b:1c:a6:01:6a:e7:ef:e5:e7:a9:de:bc:9f:69:33:
00:62:4d:2c:e6:a3:65:49:b8:b2:f1:cd:c2:33:f9:60:79:79:
fd:90:d0:af:fa:ac:69:d4:94:46:f7:e3:ea:83:89:77:83:8f:
81:eb:cb:46:7c:cd:56:c2:21:b5:df:1e:9a:de:a6:c9:74:71:
39:f4:fb:a2:fd:fd:90:bc:92:0e:97:c5:e0:61:84:56:49:4b:
0d:8c:97:1f:8f:48:ba:c9:82:50:a1:50:bc:6f:4c:3d:56:43:
86:5b:c4:3f:04:e6:7d:db:e9:e3:59:0f:bd:e6:3f:1b:d5:84:
95:37:7c:9b:ff:a7:cd:93:07:65:a7:3c:b7:90:ad:0a:ac:97:
4e:f6:4b:46:19:6a:ca:ed:66:88:51:78:59:4b:87:16:b0:01:
3d:a8:2e:09:b8:46:77:10:78:9d:5e:a3:ee:91:4e:d5:d8:89:
30:83:02:ea:c7:6d:48:1d:c9:9e:d7:fa:d0:71:a0:7b:eb:33:
0c:be:ef:53:f9:52:1c:f4:86:df:e1:6d:0d:6c:d2:5b:a1:17:
d5:4d:99:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:55 2025 by rpki-client