Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File: GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier: vKNYFzQlu6BKiZDQIUEi12deo+gBrBd3800moAG8GBk=
Subject key identifier: 20:43:41:D0:DC:6F:52:BD:8E:7C:E7:3E:95:70:96:1D:21:9A:D7:7B
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial: 019A5DC3103C313E4E882513CCA9D4645531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number: 0912
Signing time: Fri 07 Nov 2025 10:00:56 +0000
Manifest this update: Fri 07 Nov 2025 10:00:56 +0000
Manifest next update: Sat 08 Nov 2025 10:00:56 +0000
Files and hashes: 1: 1MMOey2DFiHGwBuawoDAV5GTR0U.roa (hash: C6gJNXtwf6inO2jQLVsOQct8LTsyFQuwXSbNPT+y76g=)
2: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: HEulDwpvneuszo15sU6bAfY1MypKNuKuwSs7w4m9F6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:c3:10:3c:31:3e:4e:88:25:13:cc:a9:d4:64:55:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
Validity
Not Before: Nov 7 10:00:56 2025 GMT
Not After : Nov 8 10:00:56 2025 GMT
Subject: CN=204341d0dc6f52bd8e7ce73e9570961d219ad77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:a8:d2:d1:2f:a7:89:8e:b9:c4:bf:37:72:
d4:7e:c7:07:de:8a:7d:db:2b:24:bb:35:8c:fc:14:
3a:03:98:cf:33:61:90:3f:38:09:96:89:e7:1d:31:
a9:36:c2:e9:b1:c8:50:3f:eb:0d:f0:1a:6b:61:ed:
20:37:a1:0d:77:da:4b:a5:e2:ca:c3:6a:93:b8:a3:
30:b6:79:46:0c:e7:8a:2c:ba:79:55:f8:25:4f:32:
90:0d:26:7c:26:77:15:67:17:6c:80:c2:d0:ce:97:
59:b4:22:84:a4:74:5e:00:59:93:5d:58:58:8a:57:
54:b0:cb:66:a0:8d:9b:78:62:f8:36:19:7a:6a:46:
14:cb:5d:5c:92:f4:34:25:a8:e2:ce:ce:a4:3f:8d:
b3:11:41:b4:e3:62:fc:0e:03:6e:85:cc:a2:a8:bb:
a3:3d:bf:22:d8:92:7c:62:d3:9f:2f:85:cf:ba:46:
ff:d1:c0:1b:b9:99:d9:44:11:34:eb:28:5d:c2:50:
8c:38:4e:3a:1f:53:71:6e:59:6c:66:3b:9e:59:3e:
d7:7b:2c:d8:e7:39:29:ee:73:09:a5:b1:9d:ca:85:
5e:20:6c:bc:ef:48:e0:1a:a7:80:f7:e5:2a:69:c9:
c6:8f:09:64:86:e8:aa:5e:a8:6c:42:64:5b:01:32:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:43:41:D0:DC:6F:52:BD:8E:7C:E7:3E:95:70:96:1D:21:9A:D7:7B
X509v3 Authority Key Identifier:
keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1e:c2:34:d3:30:50:0a:50:eb:3a:4b:a9:3b:bb:ab:c3:02:
e3:34:55:1e:31:71:6b:7e:f3:3f:e1:e2:2a:8b:0d:ff:56:e3:
06:c7:21:94:d7:13:be:c5:37:ee:29:30:04:18:91:22:09:24:
db:77:14:ef:54:6e:12:6e:7e:2c:6c:1a:52:c9:83:81:32:9e:
52:0d:35:14:84:b2:e8:14:cc:94:57:85:d1:5a:e5:2d:f1:83:
58:dc:a1:76:37:9b:f3:a7:e2:70:59:25:5a:cd:c2:62:ab:1f:
0c:02:44:ad:d5:e4:c1:44:03:65:0c:ba:b3:2f:8a:8d:a4:04:
fd:9f:e6:03:0c:de:a3:d4:05:f2:e1:59:a7:ab:9a:f7:99:4a:
5e:52:40:cb:f3:bb:9b:e6:49:64:cb:25:d9:81:9c:63:8a:9e:
5d:f7:14:e3:86:42:ef:89:21:4a:d5:0c:fd:63:85:ff:cb:52:
49:37:6f:e9:9b:b5:1f:32:b0:3b:b3:06:ed:b6:16:84:0d:c3:
4a:99:26:4f:d9:49:fe:ed:be:52:04:44:42:34:55:b9:58:37:
60:96:4a:c0:25:2e:ea:ca:ed:9b:2d:1a:70:4b:98:f4:40:78:
f1:c7:00:8b:6b:12:f7:5e:2a:0a:62:94:96:cf:5f:f2:6b:9a:
54:38:87:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 13:00:39 2025 by rpki-client