Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: NPRJC8mep5DJ+4vVsADDEJB/j6Dz+PzFaxHGkpg12yc=
Subject key identifier: 64:EE:F6:C7:7E:58:C5:F0:E2:3B:80:FB:F8:5D:67:9E:CE:67:A8:57
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 01988168D5AEBD9589419386BEFA8773B5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 22:03:07 +0000
Manifest this update: Wed 06 Aug 2025 22:03:07 +0000
Manifest next update: Thu 07 Aug 2025 22:03:07 +0000
Files and hashes: 1: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: iNDVMaFvniNd3XzONMC0PD9QXzeWPCaHQ8mb9GGOI2s=)
2: smR56PkXYVe9TX2HDTFHOdEfzmA.roa (hash: Sy1g3FvvZhbNKF9SZtRpU0M+VhDMdQVYf1yY8kTyMT0=)
3: z45Pl2HIpMthc8mWmMny5O7sL4E.roa (hash: Fh6l02AaD6oxps7qwBCXlSR7cWfTt60ybgfv5Z0qI7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:d5:ae:bd:95:89:41:93:86:be:fa:87:73:b5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Aug 6 22:03:07 2025 GMT
Not After : Aug 7 22:03:07 2025 GMT
Subject: CN=64eef6c77e58c5f0e23b80fbf85d679ece67a857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6b:e2:46:4e:23:96:6f:33:20:cf:8c:87:23:
20:25:b5:75:39:99:4f:c3:2b:71:92:d1:51:bf:2d:
c4:6d:a2:de:72:06:cb:09:4e:09:76:86:94:e5:e9:
83:9a:90:c5:1e:3b:31:a2:ba:ab:e6:54:d6:df:cd:
67:ba:38:e9:d8:ad:47:a8:1a:02:0a:8d:24:76:1b:
7f:59:dd:7e:23:3f:e9:0c:7c:ce:d6:c0:ab:83:cf:
12:32:a2:20:b9:98:70:bd:df:9d:d5:2f:be:89:c6:
f9:31:07:ad:e1:c4:1a:4f:cd:d2:9e:84:a5:c8:bb:
83:f3:31:a6:13:84:40:b8:50:e2:52:04:ed:19:57:
1a:9d:11:a9:3f:f0:c3:b0:81:2d:0f:f1:68:eb:a5:
8c:4a:7d:9d:5c:14:e6:bc:e9:65:37:d6:b7:24:30:
a8:43:3e:75:b0:02:d9:f1:66:7f:2d:41:cc:e3:6a:
5d:02:ce:ac:9a:14:d8:4d:79:e6:61:d8:a3:a3:ce:
fe:a4:2d:5d:3d:6e:4c:8d:f1:07:df:7d:8f:12:50:
77:73:0d:82:75:72:e7:59:00:66:31:ab:bc:1c:c0:
05:f7:c8:62:ce:32:8a:fb:95:2a:53:fc:84:9b:fb:
6c:1b:0e:0a:7e:98:ed:6d:cd:81:5e:e7:fd:20:7d:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EE:F6:C7:7E:58:C5:F0:E2:3B:80:FB:F8:5D:67:9E:CE:67:A8:57
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f0:c8:bd:93:56:49:b3:43:34:c3:0a:5e:96:4d:22:e7:e5:
d2:5b:0d:ae:87:18:0f:bb:21:c0:df:57:5f:b3:42:84:87:4f:
f1:be:26:cb:2a:de:d5:31:8b:9c:2e:5b:9a:8e:e9:fd:ee:d9:
42:b2:f8:59:2e:1b:30:95:e2:a2:3f:78:6a:c1:95:cb:a5:e7:
71:cf:33:fd:49:bc:27:5b:02:4f:5d:94:9d:48:87:eb:c4:c0:
32:0c:60:a2:0d:01:f4:f7:bf:3b:0d:92:e0:9f:f4:db:3b:08:
0c:d1:e9:70:33:ca:83:29:d2:0f:36:9e:7c:1f:f2:3c:de:49:
9f:fe:74:f9:36:a1:1a:d4:fd:88:a1:6b:f4:fb:6a:fa:08:49:
ac:72:b1:73:77:95:84:d0:be:96:c5:b8:9b:72:06:e2:0a:ad:
d2:44:30:b5:e3:97:a4:58:dd:36:c7:c3:ac:47:04:28:52:76:
d6:c2:80:0b:48:56:85:5d:ed:61:33:13:ba:4a:7f:65:d4:0e:
5a:b9:27:2c:ad:cc:a5:c7:0b:0d:4d:a1:c8:41:74:6b:c9:a1:
ab:5a:d0:d7:3c:52:49:3c:be:c6:29:78:ae:18:dd:eb:40:92:
39:1d:36:1a:ac:04:ca:ce:f6:f5:32:94:a0:12:30:8c:ac:32:
59:17:d6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:40:23 2025 by rpki-client