Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
File: GWRkVJwHkby2YRd_l67c851Uw5U.mft (raw, json)
Hash identifier: 63gUe8BWEMHCwXjRyLYlfh0x31MRiRWtHRPPwmQ0kZQ=
Subject key identifier: 20:43:29:65:99:D6:F6:A6:CE:88:39:FE:E3:09:56:9D:DF:64:88:83
Authority key identifier: 19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
Certificate issuer: /CN=196464549c0791bcb661177f97aedcf39d54c395
Certificate serial: 019882B037EB3DBD3163152E4924272E032B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
Manifest number: 161A
Signing time: Thu 07 Aug 2025 04:00:43 +0000
Manifest this update: Thu 07 Aug 2025 04:00:43 +0000
Manifest next update: Fri 08 Aug 2025 04:00:43 +0000
Files and hashes: 1: GWRkVJwHkby2YRd_l67c851Uw5U.crl (hash: Ht5xBeAfZ7i+vUz+/yRMSY6F+gS+nXk30ffAsQSRsao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:37:eb:3d:bd:31:63:15:2e:49:24:27:2e:03:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196464549c0791bcb661177f97aedcf39d54c395
Validity
Not Before: Aug 7 04:00:43 2025 GMT
Not After : Aug 8 04:00:43 2025 GMT
Subject: CN=2043296599d6f6a6ce8839fee309569ddf648883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e9:c2:42:db:7e:7b:c0:e3:af:f7:23:9f:42:
87:8e:dd:41:94:3a:92:b0:fc:55:d6:46:2c:d7:98:
19:46:73:f6:d6:93:0a:44:82:55:c8:46:fc:4d:aa:
dd:f6:44:f6:93:a7:a6:79:9b:1d:d5:23:19:d8:ef:
a6:25:8e:e5:5d:3d:7d:25:76:5d:d2:c9:0f:e7:68:
49:23:6c:5b:8c:9a:93:7a:c3:2a:d6:79:50:2f:b1:
14:43:96:40:6b:4f:a6:d7:49:b3:ad:6c:cf:6c:5d:
34:be:6e:76:5a:de:43:92:ba:bf:8a:da:86:b1:ca:
01:7c:52:77:8c:1f:24:e4:e0:07:83:cd:0d:30:f0:
51:a1:f0:74:5f:78:04:82:5d:91:92:ab:56:d8:5a:
2a:42:d1:2f:40:24:6a:1c:0c:d2:83:43:75:cd:69:
a2:90:77:ff:1b:30:a1:66:12:d2:4f:e7:d6:72:2e:
52:b1:51:5f:6e:e4:cc:fb:92:24:61:ce:9a:d9:d2:
df:16:63:f9:54:11:5e:fb:3e:d6:41:4d:70:ba:01:
50:ba:2c:9b:e3:ad:b0:2e:18:d6:64:18:b9:43:ee:
f5:dd:78:08:8d:9b:32:22:60:6e:be:b2:18:54:fe:
d1:60:d1:e9:15:18:4e:21:f2:fa:da:5e:a2:32:ca:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:43:29:65:99:D6:F6:A6:CE:88:39:FE:E3:09:56:9D:DF:64:88:83
X509v3 Authority Key Identifier:
keyid:19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:02:36:be:7e:f1:f6:54:4b:00:3c:cc:86:b3:cb:ae:f2:19:
52:de:11:89:ef:26:32:ef:84:a0:5b:68:ff:dc:d0:c2:ba:84:
2f:67:92:24:2e:b2:bf:70:74:2d:f0:78:64:31:22:7c:93:f0:
c8:bc:28:63:fc:51:45:1e:be:47:e1:b0:13:7b:c1:39:1f:33:
de:dd:7e:a4:d3:83:0d:1a:0b:71:80:78:2b:65:5b:d3:ec:69:
f9:90:2e:6c:b3:ac:6f:6b:32:78:87:e6:7c:d3:e2:bb:dd:ad:
14:de:b5:08:c6:a9:fd:4a:fe:89:7e:90:d5:19:aa:6d:90:dc:
8d:b7:7c:11:3e:76:b8:4a:77:a6:5b:b6:60:75:67:b4:8a:c7:
80:b8:af:5d:0c:a2:f0:bd:58:58:78:b9:e6:c4:91:91:47:e5:
ac:72:cf:93:31:fd:b4:22:0e:81:48:3d:e9:19:5e:43:07:62:
14:b7:97:9e:d1:e7:16:06:ca:4e:75:dd:42:df:94:08:ce:49:
87:9d:74:fb:96:20:80:20:b7:9c:b6:08:d2:23:ef:28:4e:57:
1b:19:0b:4b:62:ca:9e:9f:50:04:c9:12:91:54:aa:17:79:06:
e0:aa:a3:b3:d1:9f:7f:16:d7:65:9f:5c:51:c2:fb:18:91:5d:
58:2d:dc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:58:23 2025 by rpki-client