Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
File: Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft (raw, json)
Hash identifier: KSjeEJ4wnufz2u4m5S0S3XKv3cVeOJaTei/EV9uhAp8=
Subject key identifier: 5F:4B:96:18:C1:3A:C6:0A:8B:97:A2:3A:90:C0:9A:CD:ED:80:11:1D
Authority key identifier: 1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
Certificate issuer: /CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Certificate serial: 019A5150C020A0146F04D59D3E8B24B2B37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
Manifest number: 16E7
Signing time: Wed 05 Nov 2025 00:00:37 +0000
Manifest this update: Wed 05 Nov 2025 00:00:37 +0000
Manifest next update: Thu 06 Nov 2025 00:00:37 +0000
Files and hashes: 1: Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl (hash: t+8NEfawyaSwi8dqMlYGRrQeZ3HlmM+rwCjEKQH6q68=)
2: aF_43DT8_FuRSeutyPS1ou0Qd_Y.roa (hash: RrbF82KQXt3VwJUd+EvcBbcTN6Aiglh/wvfzSoG8RZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:c0:20:a0:14:6f:04:d5:9d:3e:8b:24:b2:b3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Validity
Not Before: Nov 5 00:00:37 2025 GMT
Not After : Nov 6 00:00:37 2025 GMT
Subject: CN=5f4b9618c13ac60a8b97a23a90c09acded80111d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:60:5e:7a:d5:bc:86:54:67:da:0f:88:dd:
80:96:cf:a4:56:25:cd:32:97:e8:21:c9:fc:24:20:
85:ec:85:d1:6e:30:01:df:d1:72:78:92:69:9e:6a:
6b:02:44:d4:6e:b7:22:d8:95:27:9c:34:d0:6f:1b:
36:d8:17:a3:5e:3d:66:3b:32:fd:cb:dc:0a:5c:94:
69:2e:c6:19:f0:76:76:d5:33:aa:04:2e:79:09:61:
14:1b:84:64:39:ca:18:a8:db:88:48:f3:3d:4f:56:
9a:77:73:7a:01:4b:34:8c:eb:98:a7:be:51:a3:0e:
e3:fe:cc:7c:20:e2:0f:f6:fd:48:1e:d9:dc:ee:43:
db:0b:9a:3f:51:84:86:34:c7:0a:da:1a:fb:08:d3:
b0:4d:49:f3:f2:75:8e:2e:07:5f:e3:0c:49:11:a8:
6b:a0:74:66:19:5c:12:36:d4:79:56:42:84:bd:e8:
d2:93:1f:71:cb:a8:c6:0a:05:67:98:cf:f2:9e:c2:
a0:32:85:e6:fd:75:9c:40:5c:e0:1c:57:ba:69:b6:
9d:58:5f:9c:60:37:07:71:2a:bb:f3:c8:10:9b:89:
31:c3:27:57:36:c4:11:b6:3f:82:dc:fc:fd:c7:21:
e8:7a:5b:15:57:6e:14:59:b8:78:52:02:54:e5:0b:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4B:96:18:C1:3A:C6:0A:8B:97:A2:3A:90:C0:9A:CD:ED:80:11:1D
X509v3 Authority Key Identifier:
keyid:1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f0:ab:4c:de:c2:e0:b9:f3:7b:ee:61:92:e4:b1:13:7b:45:
38:09:0b:4e:55:17:89:39:c6:73:3f:f2:03:9e:0a:ac:f7:02:
6f:8c:98:96:07:58:59:9d:f6:f3:22:95:e6:5a:50:a7:f8:1e:
13:b6:77:d0:7f:d6:15:d4:25:6a:f4:35:d8:be:cf:a8:8c:b7:
54:04:67:31:18:f9:26:6c:b7:ac:6b:18:8a:cf:a3:4c:60:af:
7b:60:8a:62:7c:ec:bb:a4:4d:8b:02:82:ea:cb:85:fe:f8:96:
a9:43:96:86:18:07:a7:93:d4:df:a8:f2:17:cd:94:43:47:02:
39:1c:39:ba:44:7d:ab:03:a1:1a:52:84:81:a0:51:ca:80:66:
dc:8b:b4:29:94:01:0c:27:98:c2:ec:02:37:53:e2:5f:61:75:
5a:0b:76:78:e4:16:42:e6:c6:29:f0:5e:d7:a9:d9:8f:0f:69:
95:2a:3d:93:47:a7:86:34:6e:29:36:cc:51:d7:e9:f4:da:ab:
aa:11:aa:98:56:bd:76:4e:aa:75:22:cf:a1:ac:c1:bc:b3:1c:
4e:dc:56:e1:14:77:4a:58:e1:9a:64:19:c8:aa:33:e9:3d:07:
8d:b9:93:b8:67:c3:84:da:e2:55:ef:27:a8:35:d5:2e:22:22:
07:4f:8e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:51:25 2025 by rpki-client