
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
File: GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft (raw, json)
Hash identifier: B9GLu5qInM2PIcjHLyjYeh+QGrUaXkTkMw19B46VwGU=
Subject key identifier: 1D:F2:69:02:F2:73:FB:B5:5D:02:FA:B2:A2:F6:9A:06:BA:AC:6E:2A
Authority key identifier: 19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0
Certificate issuer: /CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
Certificate serial: 01987FE69F9E165160B393EB59BDC7E5DDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
Manifest number: 0244
Signing time: Wed 06 Aug 2025 15:01:17 +0000
Manifest this update: Wed 06 Aug 2025 15:01:17 +0000
Manifest next update: Thu 07 Aug 2025 15:01:17 +0000
Files and hashes: 1: GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl (hash: rSKrOsUKG6NJIjyVWxPaV4juEQNps4UgHhpvQjR2mQk=)
2: SFyTfsWyq2coBx8ydbZroSS50xQ.roa (hash: ZZpymtBw1D9nPwu2cf1P4YkyaGccufHXZlJkybCGFMw=)
3: TNkzBPyNieqNtFJ7OZ5WQ2BFAFM.roa (hash: yD3hqpWrk6f2s5tXbai7Hu4KRhgeNHLLkovFRVk/JKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:9f:9e:16:51:60:b3:93:eb:59:bd:c7:e5:dd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
Validity
Not Before: Aug 6 15:01:17 2025 GMT
Not After : Aug 7 15:01:17 2025 GMT
Subject: CN=1df26902f273fbb55d02fab2a2f69a06baac6e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:0e:bb:ce:b9:00:09:8c:4a:04:97:e0:31:
1f:ce:c2:cd:99:09:bf:3f:53:7a:ab:fc:06:31:4f:
01:30:14:cd:d1:98:7f:70:90:3e:80:98:a5:c5:70:
aa:04:b6:46:92:fa:c8:c2:51:1a:e5:b5:c7:0f:48:
99:16:f4:20:ee:9e:06:f5:75:a7:ab:36:2f:68:d2:
fb:5c:31:c2:3f:1c:3c:d5:23:f2:ea:66:20:88:a7:
53:0a:cc:f5:90:bf:ac:fe:5a:92:df:11:ef:25:7e:
da:10:9a:be:22:78:51:72:1a:90:21:67:bc:50:02:
33:02:76:f8:77:f3:85:71:53:55:67:d6:b3:c4:61:
fe:68:e9:1d:0e:a3:a0:ae:8c:29:70:1b:ba:56:fe:
99:bb:40:07:72:91:73:33:fb:d8:74:0b:43:62:d8:
07:ec:18:81:e3:d6:ba:b2:b4:43:85:7f:12:16:8d:
bf:35:43:a9:0c:f0:36:b4:0c:14:83:55:53:77:c2:
64:64:24:55:de:30:e1:30:86:8f:ba:68:ec:a1:dc:
46:18:3a:60:fc:ed:2b:ff:0f:4e:e0:be:6f:60:e6:
48:98:70:1f:75:30:f9:77:e5:e2:24:73:f7:ce:a7:
6b:dc:e0:89:c5:86:96:33:27:8d:b8:7b:a1:66:9e:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F2:69:02:F2:73:FB:B5:5D:02:FA:B2:A2:F6:9A:06:BA:AC:6E:2A
X509v3 Authority Key Identifier:
keyid:19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4a:80:0d:9e:bc:17:b9:01:b1:e1:e3:82:34:b8:51:e6:46:
23:b3:72:12:28:57:ab:4a:54:93:ff:b5:69:c3:ae:d6:78:2c:
f6:a9:a8:69:16:91:b1:ac:f7:63:e6:2a:54:05:91:7c:60:f6:
bc:a2:68:e8:24:1c:97:5e:e7:34:b0:6b:64:96:f5:99:0c:ec:
49:a5:54:fc:24:1f:b9:74:83:14:e9:2b:7f:03:82:6d:93:a1:
b7:b0:0b:9d:58:37:3d:2e:2c:5b:87:af:07:79:77:44:b3:5c:
6a:3b:b2:1a:23:7a:e1:29:a7:a2:2d:66:ef:56:a9:32:37:85:
60:51:dd:45:e2:94:b5:e7:3c:2d:ed:6b:91:3a:b3:44:34:02:
68:86:2c:30:e0:96:d1:12:97:1f:34:92:f6:31:fc:8c:f5:ca:
7c:b5:5a:57:03:41:db:14:e0:53:a1:9e:d4:d3:ab:d8:5e:85:
a5:ac:4d:09:39:c2:01:03:57:29:d9:8a:2c:c8:f5:7c:e6:59:
f5:15:ea:92:cb:43:16:11:fa:47:9e:78:5c:8e:5f:47:52:3b:
ac:47:9d:77:08:e0:65:89:d9:eb:64:7e:1e:84:b7:cf:fc:b3:
9d:30:11:d7:be:d0:0f:c9:6c:a4:08:33:80:74:1a:94:76:06:
fa:c3:33:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/5p+eFlFgs5PrWb3H5d3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjEwZDYzOGUyYTJmOTVhM2Q5MGU0Y2ZmOTk1OWE4NTlm
YWM0ZjAwHhcNMjUwODA2MTUwMTE3WhcNMjUwODA3MTUwMTE3WjAzMTEwLwYDVQQD
EygxZGYyNjkwMmYyNzNmYmI1NWQwMmZhYjJhMmY2OWEwNmJhYWM2ZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucMOu865AAmMSgSX4DEfzsLNmQm/
P1N6q/wGMU8BMBTN0Zh/cJA+gJilxXCqBLZGkvrIwlEa5bXHD0iZFvQg7p4G9XWn
qzYvaNL7XDHCPxw81SPy6mYgiKdTCsz1kL+s/lqS3xHvJX7aEJq+InhRchqQIWe8
UAIzAnb4d/OFcVNVZ9azxGH+aOkdDqOgrowpcBu6Vv6Zu0AHcpFzM/vYdAtDYtgH
7BiB49a6srRDhX8SFo2/NUOpDPA2tAwUg1VTd8JkZCRV3jDhMIaPumjsodxGGDpg
/O0r/w9O4L5vYOZImHAfdTD5d+XiJHP3zqdr3OCJxYaWMyeNuHuhZp6A/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3yaQLyc/u1XQL6sqL2mga6rG4qMB8GA1UdIwQY
MBaAFBlhDWOOKi+Vo9kOTP+ZWahZ+sTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dFTlk0NHFMNVdqMlE1TV81bFpxRm42eFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hZTE4YWEtN2MxNS00Nzc1LThmYzUt
NzcyZGNkM2FmNWY2LzEvR1dFTlk0NHFMNVdqMlE1TV81bFpxRm42eFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hZTE4YWEtN2MxNS00Nzc1LThmYzUtNzcyZGNkM2FmNWY2
LzEvR1dFTlk0NHFMNVdqMlE1TV81bFpxRm42eFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEqADZ68
F7kBseHjgjS4UeZGI7NyEihXq0pUk/+1acOu1ngs9qmoaRaRsaz3Y+YqVAWRfGD2
vKJo6CQcl17nNLBrZJb1mQzsSaVU/CQfuXSDFOkrfwOCbZOht7ALnVg3PS4sW4ev
B3l3RLNcajuyGiN64Smnoi1m71apMjeFYFHdReKUtec8Le1rkTqzRDQCaIYsMOCW
0RKXHzSS9jH8jPXKfLVaVwNB2xTgU6Ge1NOr2F6FpaxNCTnCAQNXKdmKLMj1fOZZ
9RXqkstDFhH6R554XI5fR1I7rEeddwjgZYnZ62R+HoS3z/yznTAR177QD8lspAgz
gHQalHYG+sMzNA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:16:17 2025 by rpki-client