Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
File: GUoR_la49HpaFBUDK3f_n7CC4D8.mft (raw, json)
Hash identifier: 5Kx6hrAOJ51TreD1ARKYHyeYfSg1LKZi7LcQYgvlLLQ=
Subject key identifier: 04:04:BB:46:60:F0:C4:63:DD:06:1F:E8:57:BD:0B:DB:24:62:A1:A5
Authority key identifier: 19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F
Certificate issuer: /CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
Certificate serial: 019A71B8A1E17C6BAB45EC8236E241557E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
Manifest number: 11DD
Signing time: Tue 11 Nov 2025 07:01:56 +0000
Manifest this update: Tue 11 Nov 2025 07:01:56 +0000
Manifest next update: Wed 12 Nov 2025 07:01:56 +0000
Files and hashes: 1: GUoR_la49HpaFBUDK3f_n7CC4D8.crl (hash: 25pMnwtciRoDg8Gv22NyYY6QqbV1WghkgiWo1CWXA0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a1:e1:7c:6b:ab:45:ec:82:36:e2:41:55:7e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
Validity
Not Before: Nov 11 07:01:56 2025 GMT
Not After : Nov 12 07:01:56 2025 GMT
Subject: CN=0404bb4660f0c463dd061fe857bd0bdb2462a1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:3a:be:25:16:da:6d:42:23:5c:1f:da:a3:
d9:b9:50:d3:6d:39:d3:61:ad:07:e3:a6:64:fe:56:
ed:71:13:17:38:25:65:c2:5b:65:0e:dd:dc:14:fe:
a1:af:5f:a8:98:5f:92:4e:f5:1e:79:76:74:b7:cd:
14:88:30:71:3f:3c:d1:0d:ef:2b:1a:5e:9b:25:20:
ec:54:7a:80:c1:33:55:98:17:ee:92:c8:cd:47:3e:
25:b8:cd:b8:37:56:11:23:a1:94:51:c6:e1:ba:a7:
ea:bb:00:39:83:70:86:fc:8a:88:98:6b:5a:56:03:
40:51:25:3d:23:1c:50:c5:dc:16:44:53:c5:0b:55:
25:26:f9:5c:51:5e:1c:50:d0:75:dd:90:02:a9:f9:
3d:59:61:ad:41:fc:a8:28:a6:ef:bc:7c:b1:52:87:
ba:c4:a0:06:fd:5d:5d:a6:65:f9:d8:a8:06:3c:67:
8b:f7:7d:b8:8b:49:03:b6:69:42:aa:63:93:fd:df:
6e:91:8e:81:43:c3:03:23:f9:76:08:ab:69:ed:68:
ca:16:ec:79:41:46:f9:40:81:ed:2a:64:4f:b8:4f:
b2:00:c9:8d:26:7a:5d:af:33:03:76:58:2f:27:75:
49:1b:e4:94:60:87:79:82:2c:ca:8a:37:4a:cc:29:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:04:BB:46:60:F0:C4:63:DD:06:1F:E8:57:BD:0B:DB:24:62:A1:A5
X509v3 Authority Key Identifier:
keyid:19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ba:56:f6:ef:50:ea:74:42:b0:69:2f:cf:29:bd:c7:4b:d0:
a4:b7:4c:45:25:03:68:3a:c7:4b:14:20:c6:b3:16:d7:8c:f0:
7e:ef:54:e4:da:3a:31:8f:2f:8e:e0:f3:c6:37:85:ef:cf:45:
78:5a:e3:81:6e:87:15:0f:3f:fb:e1:6d:93:70:5f:68:5f:ed:
15:4f:95:bc:b8:76:fd:80:a1:de:1f:1a:55:b8:e1:c0:c8:23:
74:42:56:3b:2a:a4:53:10:a5:34:92:b9:d4:e3:07:82:08:11:
16:48:4d:a6:9d:4d:5f:48:bd:71:03:d8:dc:ec:85:d6:95:3c:
a4:d7:3a:b0:df:9c:19:2a:52:7a:6d:05:7a:f1:99:ea:5d:c4:
97:e0:56:a4:95:4b:0a:d2:ac:68:be:a6:3c:c9:5f:89:fd:d5:
53:da:52:03:61:6b:d9:4b:3d:1f:79:88:e5:7d:3e:98:b2:28:
a8:4c:dc:ba:33:a8:51:46:bf:99:bf:73:a6:18:36:a9:f2:6a:
a4:8f:27:9b:77:8a:15:3a:a0:5b:d0:61:37:ad:9e:e2:64:fc:
81:cb:0c:cb:6a:8b:7b:b2:87:c4:1a:d9:c6:6b:9b:d9:38:4b:
00:2d:41:f9:5b:27:dc:9d:b3:03:4e:4b:40:10:7c:59:b7:22:
51:dd:8b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:18 2025 by rpki-client