Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
File: GUKBeimILUM78buOvFmy_yVugD8.mft (raw, json)
Hash identifier: uJR2wqPIjby9L05uUUE5NkLYZsMpLRjVNjd2h9iAstw=
Subject key identifier: E9:3A:15:5F:01:F4:5B:6F:4D:93:9A:6D:85:4B:A7:64:20:20:C7:2F
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Certificate issuer: /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial: 019A251CC5B439AEC1514FE7C12DE50AE6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
Manifest number: 0C2F
Signing time: Mon 27 Oct 2025 10:00:33 +0000
Manifest this update: Mon 27 Oct 2025 10:00:33 +0000
Manifest next update: Tue 28 Oct 2025 10:00:33 +0000
Files and hashes: 1: GUKBeimILUM78buOvFmy_yVugD8.crl (hash: R7db1yfizDkQAXnI0WnzhOqzrexSMbISOLnb0oOLAog=)
2: GcHslNVvtLMqacjR3pPEHzo6qdY.roa (hash: 2lxXQx2L70uMfwd/jJMu4ZB84tprJ69cJOFL2QzMBdQ=)
3: Jbshh5-Y5wAYjNhv_trKB-ylliE.roa (hash: 5xQE2hOATpkYgRTE2YQwm3+KGl3F12kDMLW5EC6YqT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:c5:b4:39:ae:c1:51:4f:e7:c1:2d:e5:0a:e6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Validity
Not Before: Oct 27 10:00:33 2025 GMT
Not After : Oct 28 10:00:33 2025 GMT
Subject: CN=e93a155f01f45b6f4d939a6d854ba7642020c72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6a:43:59:67:e3:22:48:46:37:33:f9:e9:30:
c8:e6:f9:26:83:b2:eb:ce:46:cf:45:91:a9:a1:5a:
31:c0:2d:b6:ce:0a:94:dc:4d:46:e6:96:a5:cb:73:
09:df:fe:29:f3:c3:b0:8a:19:26:c1:23:f1:d7:6a:
5d:99:ec:b9:60:c3:48:3b:8b:86:74:d1:26:07:31:
b4:1b:fc:a8:c9:d8:76:d5:ab:af:02:69:4c:6a:4b:
b9:62:42:97:01:d8:11:cb:fe:8b:0b:b8:dc:97:1c:
56:c7:15:40:c7:5a:56:10:13:66:bf:f8:f5:1c:c8:
96:c5:97:59:f0:65:00:df:48:78:b1:90:9e:0a:ec:
61:bd:4f:5e:d6:13:39:16:4a:99:df:f5:03:5c:85:
55:62:bd:be:78:4b:62:ff:e4:62:4c:b5:46:77:47:
df:94:68:66:e2:96:b4:af:25:ba:be:2b:90:57:78:
60:ce:e2:63:4d:9b:e3:f1:48:e2:46:8e:24:a8:a8:
c3:a7:e9:e5:73:76:59:bd:21:13:c3:9d:9f:7f:41:
96:a5:a7:d8:77:1e:17:37:33:51:8a:27:d8:d7:bc:
36:97:a0:f4:23:5c:17:05:86:a2:5e:e8:81:a1:11:
87:f5:6c:15:f0:3f:b6:4d:76:89:46:37:60:48:6e:
5f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3A:15:5F:01:F4:5B:6F:4D:93:9A:6D:85:4B:A7:64:20:20:C7:2F
X509v3 Authority Key Identifier:
keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:9f:e5:0b:fe:74:8b:20:87:37:9e:1e:c8:c6:dd:0d:0d:ae:
d7:55:3c:75:58:c4:9f:bf:a2:98:0a:bb:19:01:fa:8e:b9:3d:
a9:45:bc:b0:a6:23:b8:01:79:3b:6f:54:cc:30:80:8b:72:98:
99:4f:b8:52:d1:d4:e9:2d:19:b9:2e:3a:c5:b7:06:8c:43:28:
22:ee:68:ba:4e:55:ea:3a:a2:13:01:78:72:cb:1e:48:87:25:
1a:a5:5a:7d:b8:06:80:10:0c:72:c9:30:73:03:59:3a:f3:a5:
06:15:70:5b:c0:ee:e1:57:95:29:5a:0f:69:7c:00:3b:47:7a:
9e:1a:79:0a:f5:07:14:37:c5:20:ec:be:59:0b:5f:db:7a:ce:
e7:2a:d7:43:60:0e:bf:2b:23:33:05:a6:50:08:2d:12:de:c3:
71:af:19:8b:ca:99:db:fa:13:44:61:e3:9e:91:59:b0:ed:fc:
b1:29:bc:a7:e2:6c:9d:df:ac:51:c5:65:05:ec:b0:72:f1:3d:
ba:94:cf:2e:fc:03:6a:82:70:c7:70:46:4b:32:09:1c:e7:08:
b0:bd:bd:19:58:75:31:5a:94:23:ea:4c:a3:a2:50:09:6d:ee:
b0:b1:88:d3:71:1a:91:af:82:f8:78:02:7e:ad:fe:09:0f:83:
b4:57:b2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:09:13 2025 by rpki-client