
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
File: GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft (raw, json)
Hash identifier: xKRK0UMeUVoeOKGzFe02WLt0DD2UX9Oyg+sFFtjvo2M=
Subject key identifier: 26:BD:F7:27:D2:F6:B5:AC:44:9F:57:0E:F4:AF:7E:AB:01:61:1F:0B
Authority key identifier: 19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0
Certificate issuer: /CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
Certificate serial: 019A533F9AE8844181CF05EE3A927D869747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
Manifest number: 0336
Signing time: Wed 05 Nov 2025 09:01:08 +0000
Manifest this update: Wed 05 Nov 2025 09:01:08 +0000
Manifest next update: Thu 06 Nov 2025 09:01:08 +0000
Files and hashes: 1: GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl (hash: TEENLUdXaEU6sw8jjADQkMBL9CXCAJblCPk349SZ/cY=)
2: SFyTfsWyq2coBx8ydbZroSS50xQ.roa (hash: ZZpymtBw1D9nPwu2cf1P4YkyaGccufHXZlJkybCGFMw=)
3: TNkzBPyNieqNtFJ7OZ5WQ2BFAFM.roa (hash: yD3hqpWrk6f2s5tXbai7Hu4KRhgeNHLLkovFRVk/JKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:9a:e8:84:41:81:cf:05:ee:3a:92:7d:86:97:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19610d638e2a2f95a3d90e4cff9959a859fac4f0
Validity
Not Before: Nov 5 09:01:08 2025 GMT
Not After : Nov 6 09:01:08 2025 GMT
Subject: CN=26bdf727d2f6b5ac449f570ef4af7eab01611f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:c4:78:86:ca:59:49:20:49:95:60:f3:c7:
9b:ef:6d:6f:bc:32:9f:ed:28:e0:c0:4f:2d:4a:ad:
72:64:90:32:9f:53:26:f3:42:b6:3c:c2:24:1b:d6:
ea:de:f4:ec:e3:d1:54:f0:34:63:a7:9b:68:79:86:
55:b7:f4:7b:fc:51:af:57:3d:3f:ad:65:ee:ff:ad:
5f:30:0f:48:9f:6e:d7:a7:f9:94:d5:07:5c:8b:66:
12:c9:97:60:ef:e9:6c:60:10:48:f1:1c:8a:d7:20:
81:b9:6f:c9:6e:e3:de:a5:8d:5e:31:23:c4:e3:4f:
1d:35:0b:4d:e8:11:27:82:eb:4c:8e:ad:24:3a:fe:
29:6f:f5:7b:6d:20:af:a2:7e:c2:72:b0:b8:97:d9:
c2:0f:9d:36:43:2f:f0:84:6d:ac:71:8e:71:cc:f6:
b9:fa:0c:fb:ce:a9:d4:8b:e7:c9:2b:bb:32:64:81:
a1:c8:7e:5b:b1:86:b3:ab:09:e7:5a:7a:59:43:71:
69:08:1b:b3:fd:6d:32:2d:ce:c0:50:96:62:dd:90:
f4:ea:f9:82:6b:33:a6:c7:6c:31:ac:4f:5d:01:9c:
4c:6c:b9:ee:49:a6:58:da:b8:82:98:2a:11:52:c1:
f8:05:65:bb:b5:d0:95:3e:4f:c6:1a:71:38:70:b6:
88:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BD:F7:27:D2:F6:B5:AC:44:9F:57:0E:F4:AF:7E:AB:01:61:1F:0B
X509v3 Authority Key Identifier:
keyid:19:61:0D:63:8E:2A:2F:95:A3:D9:0E:4C:FF:99:59:A8:59:FA:C4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWENY44qL5Wj2Q5M_5lZqFn6xPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ae18aa-7c15-4775-8fc5-772dcd3af5f6/1/GWENY44qL5Wj2Q5M_5lZqFn6xPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e3:86:bd:02:6b:d0:e3:30:f4:6e:0a:1a:05:8b:33:b1:7a:
21:8b:32:17:07:65:7c:ef:86:83:5e:a2:7b:59:39:1e:df:f2:
f4:6b:77:2f:d1:8e:ba:be:11:8d:e8:73:e7:88:43:f9:45:a7:
47:c0:9a:eb:00:33:3d:19:80:7f:9d:1d:85:67:92:47:f4:0e:
ae:04:3d:3e:bc:93:32:ed:33:d4:4b:67:af:38:a4:a6:33:52:
d8:33:12:33:e1:e1:3e:9d:cb:ab:02:5a:85:89:06:75:6c:3e:
5c:69:81:56:f5:36:d2:25:70:32:70:df:04:16:48:fa:b4:1c:
f4:3a:29:16:47:4f:76:80:01:d9:c1:c2:0f:65:69:5b:22:48:
60:48:43:0f:f4:55:90:7a:96:c0:fc:25:07:c8:2f:27:59:25:
d2:de:da:df:f6:30:5b:39:d9:71:be:29:38:af:d5:b4:03:66:
ed:48:d3:5f:48:e1:03:ba:42:3c:9b:c5:70:1d:ed:68:24:a9:
25:a6:cb:ea:fa:68:43:17:ca:9a:d1:4e:e6:a8:a3:55:36:45:
3f:c1:70:8c:c6:7e:f8:10:90:49:43:ee:fb:9c:18:20:ad:53:
32:14:6b:e4:b8:2d:65:93:2a:03:ff:fa:ae:62:10:e9:2b:51:
99:47:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:16:37 2025 by rpki-client