Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
File: gwelIkrm2akuR-ZW3YAbEP-5Bys.mft (raw, json)
Hash identifier: h/bS9EHR2NxaZhTSIdvkhSp0XeFbpETGyRPswKGp+M0=
Subject key identifier: 60:7C:D7:2D:F9:D5:C3:49:C5:56:E9:37:AD:72:9E:13:5D:BE:B6:DB
Authority key identifier: 83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
Certificate issuer: /CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Certificate serial: 019893A47C23AC0FD62853826BC69234273F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
Manifest number: 0325
Signing time: Sun 10 Aug 2025 11:01:27 +0000
Manifest this update: Sun 10 Aug 2025 11:01:27 +0000
Manifest next update: Mon 11 Aug 2025 11:01:27 +0000
Files and hashes: 1: E6h98msuHIDDEo3EuNbedKUfRUE.roa (hash: LlRZmkIkDMo4tzcCd8AIz4o5Zg0OyytYjPKbff5wXqs=)
2: gwelIkrm2akuR-ZW3YAbEP-5Bys.crl (hash: HNy004h+3Ts9NACwdKN9Z8CtlfeAksL79em/t4w9Fak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:7c:23:ac:0f:d6:28:53:82:6b:c6:92:34:27:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8307a5224ae6d9a92e47e656dd801b10ffb9072b
Validity
Not Before: Aug 10 11:01:27 2025 GMT
Not After : Aug 11 11:01:27 2025 GMT
Subject: CN=607cd72df9d5c349c556e937ad729e135dbeb6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:1f:d0:75:20:3a:df:91:8d:ef:5d:ae:2b:
1e:21:1d:99:e9:ce:7e:72:2e:3d:33:d4:32:8b:52:
15:79:24:78:08:0c:6e:b6:13:67:63:28:3a:fd:61:
e5:71:22:06:26:b0:bb:9a:03:87:96:0f:72:89:55:
18:9a:7c:ef:e2:a8:be:38:b3:fe:d8:8a:9a:5b:b5:
35:f5:f4:1f:61:73:1a:52:b5:b4:66:7d:86:3e:23:
32:28:d4:68:b4:3c:58:8d:bd:89:5d:98:bc:25:f8:
d0:64:23:77:68:af:a1:3d:03:d1:c3:8f:b9:01:52:
fb:55:21:66:37:ab:75:f1:a5:76:81:b2:83:62:a3:
f8:07:87:c3:31:ca:43:c7:fa:82:f1:e3:7b:d8:80:
d3:60:08:82:bf:5c:b7:2f:67:56:2c:7f:2c:fc:3a:
6f:00:20:78:d1:9f:1a:ae:ff:5b:98:ba:3b:a6:2b:
2f:77:a3:80:3f:14:90:cd:92:91:9b:92:72:c2:e7:
49:69:76:24:88:32:98:05:1e:e1:b8:0b:84:3c:26:
b6:45:54:b9:ae:b8:b1:29:ee:37:8d:39:d4:69:95:
cc:f9:4f:00:53:3a:31:89:09:df:92:f5:bf:4e:64:
58:96:49:42:50:37:22:f4:6b:97:ff:9b:a0:04:5a:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7C:D7:2D:F9:D5:C3:49:C5:56:E9:37:AD:72:9E:13:5D:BE:B6:DB
X509v3 Authority Key Identifier:
keyid:83:07:A5:22:4A:E6:D9:A9:2E:47:E6:56:DD:80:1B:10:FF:B9:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwelIkrm2akuR-ZW3YAbEP-5Bys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a3d9a6-34b7-4f38-a9a5-8bfacae464f9/1/gwelIkrm2akuR-ZW3YAbEP-5Bys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:51:5b:27:d6:a2:8d:c4:27:67:c3:10:e0:82:26:35:88:0c:
f9:f5:be:0a:b3:68:0b:26:94:70:65:0e:66:37:80:7a:2c:0a:
f4:93:73:4d:ae:df:a5:06:10:a5:de:1f:e2:85:41:dd:ad:35:
9b:3b:29:6e:4e:8c:d0:c9:76:67:21:46:c8:f1:df:d2:ac:57:
31:32:4d:d4:6a:66:11:ba:bd:19:d6:d5:f4:e1:15:cd:d7:02:
c3:b9:93:eb:b6:c1:3f:47:a7:9b:5a:e2:7c:1d:70:4b:a5:92:
b4:f1:88:e9:ae:9a:96:bc:86:87:e1:64:24:18:a3:3c:4b:91:
77:ff:da:c0:a4:3d:c9:c4:a8:69:a8:21:bc:1f:a5:2f:70:dd:
bf:d3:19:6b:6f:ef:1f:17:c9:75:68:06:46:b6:7f:b8:8e:e4:
93:b6:b4:ca:56:b1:ee:e2:47:44:12:f1:bc:a3:80:01:e6:1b:
5f:2c:27:b2:c8:2f:54:16:dd:89:ff:7b:f4:da:fc:10:19:8f:
f0:0b:e5:61:eb:11:01:0d:e7:34:96:1f:a4:50:99:8a:78:b8:
eb:5f:88:8b:95:8c:a1:63:29:6a:12:73:77:04:62:ed:0f:56:
c5:39:b3:ec:2c:2a:a6:d6:cc:f5:79:fe:77:52:f7:3c:33:6c:
11:c6:e6:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTpHwjrA/WKFOCa8aSNCc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDdhNTIyNGFlNmQ5YTkyZTQ3ZTY1NmRkODAxYjEwZmZi
OTA3MmIwHhcNMjUwODEwMTEwMTI3WhcNMjUwODExMTEwMTI3WjAzMTEwLwYDVQQD
Eyg2MDdjZDcyZGY5ZDVjMzQ5YzU1NmU5MzdhZDcyOWUxMzVkYmViNmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QIf0HUgOt+Rje9driseIR2Z6c5+
ci49M9Qyi1IVeSR4CAxuthNnYyg6/WHlcSIGJrC7mgOHlg9yiVUYmnzv4qi+OLP+
2IqaW7U19fQfYXMaUrW0Zn2GPiMyKNRotDxYjb2JXZi8JfjQZCN3aK+hPQPRw4+5
AVL7VSFmN6t18aV2gbKDYqP4B4fDMcpDx/qC8eN72IDTYAiCv1y3L2dWLH8s/Dpv
ACB40Z8arv9bmLo7pisvd6OAPxSQzZKRm5JywudJaXYkiDKYBR7huAuEPCa2RVS5
rrixKe43jTnUaZXM+U8AUzoxiQnfkvW/TmRYlklCUDci9GuX/5ugBFrrXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGB81y351cNJxVbpN61ynhNdvrbbMB8GA1UdIwQY
MBaAFIMHpSJK5tmpLkfmVt2AGxD/uQcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hM2Q5YTYtMzRiNy00ZjM4LWE5YTUt
OGJmYWNhZTQ2NGY5LzEvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hM2Q5YTYtMzRiNy00ZjM4LWE5YTUtOGJmYWNhZTQ2NGY5
LzEvZ3dlbElrcm0yYWt1Ui1aVzNZQWJFUC01QnlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1FbJ9ai
jcQnZ8MQ4IImNYgM+fW+CrNoCyaUcGUOZjeAeiwK9JNzTa7fpQYQpd4f4oVB3a01
mzspbk6M0Ml2ZyFGyPHf0qxXMTJN1GpmEbq9GdbV9OEVzdcCw7mT67bBP0enm1ri
fB1wS6WStPGI6a6alryGh+FkJBijPEuRd//awKQ9ycSoaaghvB+lL3Ddv9MZa2/v
HxfJdWgGRrZ/uI7kk7a0ylax7uJHRBLxvKOAAeYbXywnssgvVBbdif979Nr8EBmP
8AvlYesRAQ3nNJYfpFCZini461+Ii5WMoWMpahJzdwRi7Q9WxTmz7CwqptbM9Xn+
d1L3PDNsEcbmvw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:31 2025 by rpki-client