Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
File: GUKBeimILUM78buOvFmy_yVugD8.mft (raw, json)
Hash identifier: KVwEMfDvOWXRX7Ok+EouRJaZqr7btb0J/80snaS/zaI=
Subject key identifier: B9:B5:C6:F1:8C:A0:78:6A:E4:9F:00:33:24:D8:12:95:90:01:2B:E8
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Certificate issuer: /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial: 01975C80F65E377392C7508A7E0499BDAEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
Manifest number: 0ABE
Signing time: Wed 11 Jun 2025 01:00:44 +0000
Manifest this update: Wed 11 Jun 2025 01:00:44 +0000
Manifest next update: Thu 12 Jun 2025 01:00:44 +0000
Files and hashes: 1: GUKBeimILUM78buOvFmy_yVugD8.crl (hash: ypFEgD7vkaEis/9aO7WZj1jHa3OdSLMsiiivpVh0H5E=)
2: GcHslNVvtLMqacjR3pPEHzo6qdY.roa (hash: 2lxXQx2L70uMfwd/jJMu4ZB84tprJ69cJOFL2QzMBdQ=)
3: Jbshh5-Y5wAYjNhv_trKB-ylliE.roa (hash: 5xQE2hOATpkYgRTE2YQwm3+KGl3F12kDMLW5EC6YqT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:80:f6:5e:37:73:92:c7:50:8a:7e:04:99:bd:ae:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Validity
Not Before: Jun 11 01:00:44 2025 GMT
Not After : Jun 12 01:00:44 2025 GMT
Subject: CN=b9b5c6f18ca0786ae49f003324d8129590012be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:99:09:4a:92:36:d9:dd:18:60:39:20:0c:
e8:7f:cc:94:2c:17:a1:5f:06:f7:e2:a5:ae:00:95:
34:c7:d7:44:f9:54:1d:d5:55:dd:6e:16:46:f5:f9:
36:1c:0e:01:d2:75:eb:53:f3:65:13:de:3a:39:c7:
69:3e:85:df:3b:39:d3:cf:20:17:65:72:b5:0d:b5:
ff:d1:c9:94:b7:9d:a3:7e:12:66:00:41:c3:c4:7e:
92:93:1a:0d:d0:0b:6f:12:4c:2b:a6:45:4e:7f:3a:
b1:12:c2:ce:35:0b:27:44:19:76:9b:91:b3:e3:75:
40:97:93:cc:79:1e:fe:17:f6:6e:6b:ba:62:84:9e:
ee:b9:94:61:36:cd:8f:97:4a:8f:05:5e:3f:06:0e:
3f:b4:ca:53:70:67:f9:54:99:d5:49:32:52:3e:25:
01:39:38:41:48:49:63:e3:fb:0d:9c:db:d3:39:43:
12:3a:04:37:ec:f3:5b:3e:37:63:91:80:a8:3c:05:
a6:13:5f:2e:49:e2:d7:f6:ce:26:fb:7e:aa:7e:0f:
9b:55:2b:58:cd:43:eb:52:b2:f9:12:17:11:ba:a6:
fe:7a:56:3d:0c:b7:08:de:f0:1f:f6:06:28:db:ed:
f6:5c:65:80:5a:d7:90:c9:3d:c9:a0:53:f3:0c:b9:
b1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B5:C6:F1:8C:A0:78:6A:E4:9F:00:33:24:D8:12:95:90:01:2B:E8
X509v3 Authority Key Identifier:
keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:20:cd:ed:80:05:c3:ff:5e:46:89:4b:90:64:c4:75:59:8d:
57:54:34:31:59:6f:de:06:0c:4b:b7:7a:16:d6:7e:cc:28:37:
c4:30:e2:48:21:62:db:62:76:d0:da:3d:d6:78:85:88:06:bd:
ba:f6:11:51:e1:80:a6:1a:85:6e:40:5f:e7:cb:5b:7f:92:f1:
34:2a:4a:85:4d:b2:18:f0:da:48:e3:ee:9d:21:41:28:a5:ad:
ce:b0:64:96:07:72:8c:95:77:b0:ec:64:ae:48:04:a5:51:a4:
d7:c9:55:66:a3:99:b9:0a:73:d2:ba:22:c7:a5:2d:e7:65:d8:
7a:cd:a9:fc:9c:21:22:60:70:60:7e:9a:ad:11:f4:b1:1a:ca:
f1:06:51:c9:46:85:df:80:6a:b0:76:44:9d:e5:38:13:57:e7:
1c:3e:68:c3:9a:65:49:f1:f3:17:32:1e:c8:3d:f6:6d:c8:54:
92:2a:2d:ef:86:76:e5:0d:8a:4d:e2:0f:d2:66:7f:d8:a9:be:
5e:c4:c4:89:29:a0:dd:00:02:66:18:70:63:cb:86:24:59:2c:
7a:2b:5e:13:16:07:f9:42:c1:72:af:57:02:c9:73:3b:07:2b:
05:13:d6:e8:7c:47:1c:ca:ce:e0:24:70:bf:d0:53:da:d8:39:
2a:15:13:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:31:40 2025 by rpki-client