Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
File: GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft (raw, json)
Hash identifier: hhlUR7e3nkCfKU3psONxbBZ6i8NqTUIw9tJ+1LMegRc=
Subject key identifier: 10:BE:96:21:0E:A2:02:3B:17:64:E4:8B:93:22:0D:C8:B1:E4:F7:C5
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Certificate issuer: /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial: 019A72CA6D9E08F86CB483100AB20CBDF737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
Manifest number: 1296
Signing time: Tue 11 Nov 2025 12:01:00 +0000
Manifest this update: Tue 11 Nov 2025 12:01:00 +0000
Manifest next update: Wed 12 Nov 2025 12:01:00 +0000
Files and hashes: 1: GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl (hash: GyPfjTOmq98Y1wqG2WiNMLzpiayStvgfOkms6U9AXWY=)
2: uIeYeZznF-O1grN0M5g3SmcN33U.roa (hash: y5O+zvgRhkPeGKTBn9Qn4EVE0s2vlCMineSuEirJq9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:6d:9e:08:f8:6c:b4:83:10:0a:b2:0c:bd:f7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
Validity
Not Before: Nov 11 12:01:00 2025 GMT
Not After : Nov 12 12:01:00 2025 GMT
Subject: CN=10be96210ea2023b1764e48b93220dc8b1e4f7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:36:5d:91:3d:c9:51:85:25:1b:24:bb:6e:
5a:85:7e:7a:b0:82:70:7f:95:3a:f9:ae:44:c4:4a:
00:f9:a1:10:4b:48:23:bc:ae:32:26:d9:65:dc:bb:
3b:bf:bc:f4:5b:cf:6c:a7:fa:67:7b:17:53:fe:03:
30:a6:76:d4:d9:67:cd:50:47:8e:aa:c3:67:ca:ce:
18:99:93:de:e4:6d:6b:f5:bf:65:5b:3c:47:b7:20:
90:fb:c3:3a:19:7f:79:96:dc:94:5f:5a:3f:46:76:
a2:5f:2f:e2:e3:a4:d4:1d:b0:7b:2b:98:6f:a4:fa:
b0:fc:06:0a:25:37:f1:ab:ac:e9:06:5b:32:3a:97:
18:e8:64:42:df:58:58:fe:ae:14:68:b8:7b:96:60:
69:93:d3:8d:35:92:ec:6a:65:dc:5d:8f:8d:67:b7:
cf:b2:c1:eb:79:56:b4:26:a2:3e:52:44:d2:11:1c:
73:c9:33:9c:d2:62:ca:fa:c0:0e:08:84:a1:c2:15:
9c:88:bd:7e:be:0d:3a:5d:88:10:6d:16:5f:e6:05:
0b:93:91:b0:32:3c:d0:63:67:2a:8a:6b:d3:c7:0a:
ef:84:cd:63:c9:3c:5e:6e:59:66:97:23:e6:76:b5:
bc:37:09:b4:2c:b9:4a:07:20:57:9e:df:8f:e5:4d:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BE:96:21:0E:A2:02:3B:17:64:E4:8B:93:22:0D:C8:B1:E4:F7:C5
X509v3 Authority Key Identifier:
keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ea:fe:cd:a1:69:80:d7:29:b1:d6:1b:62:cf:06:73:09:ea:
d3:c1:72:27:c3:16:bd:25:1d:4d:37:8f:65:ee:89:8f:24:e0:
bd:90:5c:d0:ca:39:a1:e6:33:08:a0:a2:c4:b3:d1:3e:43:69:
d2:07:11:2c:9a:4f:44:d1:d8:c3:e8:c2:92:34:2c:5e:c5:b9:
75:38:10:e6:91:9d:75:f1:6b:62:ef:06:54:94:58:ec:51:d5:
0a:57:86:28:f1:1d:8d:65:4d:88:72:ec:6e:d6:76:0a:b3:65:
57:de:90:e1:29:1a:ba:6e:5b:02:79:2a:76:ff:73:e2:f3:29:
84:75:43:bf:47:2b:c5:eb:f7:fc:79:eb:de:44:a1:e6:fa:c8:
82:7d:cd:a6:e6:92:30:cf:83:3e:55:9f:ca:9a:db:e8:87:86:
2f:14:e0:1f:3a:49:4f:ee:db:5c:71:8a:6f:4d:ee:bd:68:fb:
bd:ed:55:a7:c5:c3:47:50:79:0c:cf:bd:17:f6:64:ab:e7:97:
74:66:c2:46:a2:5d:8e:a2:11:a8:1b:94:f6:37:4c:8e:7c:d2:
a8:71:ed:b8:3e:ef:11:a0:9c:9f:f3:e5:96:1b:da:22:69:0b:
2d:99:21:f1:e9:9d:2e:f7:a8:3e:59:9a:4c:bf:4c:19:a7:21:
3b:e5:44:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:11:27 2025 by rpki-client