Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
File: GUwuZp9lV99OPUmk8mW1QReS_6A.mft (raw, json)
Hash identifier: Fw3z6gg2VWzlQeKScMjyXDttDROLCtXPIZ+OIpio4NY=
Subject key identifier: 97:38:41:81:D2:5A:E4:AD:2D:BF:75:F5:7D:8A:F0:00:CF:B6:2C:B7
Authority key identifier: 19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
Certificate issuer: /CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Certificate serial: 0199221EA70F447EC353B5638C5F5F30ED0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
Manifest number: 0DCF
Signing time: Sun 07 Sep 2025 03:00:58 +0000
Manifest this update: Sun 07 Sep 2025 03:00:58 +0000
Manifest next update: Mon 08 Sep 2025 03:00:58 +0000
Files and hashes: 1: GUwuZp9lV99OPUmk8mW1QReS_6A.crl (hash: x27SVzqH0ciCjbsCO0XU5x0OsFVp0BU5v4HgDSwoNqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:a7:0f:44:7e:c3:53:b5:63:8c:5f:5f:30:ed:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Validity
Not Before: Sep 7 03:00:58 2025 GMT
Not After : Sep 8 03:00:58 2025 GMT
Subject: CN=97384181d25ae4ad2dbf75f57d8af000cfb62cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5d:1d:7b:2e:23:c5:6b:1f:8d:dc:01:45:11:
15:e6:20:33:89:2d:97:ad:57:bb:6b:a3:bf:67:f9:
ba:ce:e6:af:f4:17:c4:5d:4e:e3:d7:92:e1:13:48:
db:ca:7e:24:90:d6:a7:8d:95:bc:51:c2:14:3f:22:
c3:da:75:6a:67:b8:d1:6b:d7:bf:ee:90:7a:01:8a:
e3:65:39:6f:7d:62:74:b9:22:8b:de:fa:17:c2:03:
46:31:a6:33:3b:9c:b9:20:a4:b7:79:95:f8:6d:47:
e9:84:bd:cc:6b:4d:02:64:47:d0:f3:94:71:26:7c:
b3:a2:ce:a0:87:1c:84:7a:83:94:dd:68:7c:3a:e4:
f7:ba:c7:0e:de:81:c0:9a:d0:77:c5:90:18:ed:af:
88:77:12:ea:46:b7:d9:11:34:f6:a0:5f:18:c9:2e:
84:9d:0d:fe:81:82:cb:d6:fb:4d:56:60:00:14:3f:
a2:30:16:44:77:80:40:e8:c0:37:38:9e:52:cc:c3:
f6:50:8c:31:dc:bc:e0:93:a4:42:45:a0:18:2b:99:
f9:0d:be:76:b5:08:f5:2a:ea:4d:22:cc:df:f0:57:
dc:15:9f:31:2c:07:96:d8:84:a3:88:e4:b0:8f:f0:
50:da:3a:47:53:85:50:23:df:e3:f7:cb:95:ce:cc:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:38:41:81:D2:5A:E4:AD:2D:BF:75:F5:7D:8A:F0:00:CF:B6:2C:B7
X509v3 Authority Key Identifier:
keyid:19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e5:cd:98:3e:40:67:99:ae:f9:ea:94:bd:b2:bc:27:9d:22:
54:2d:03:b9:e5:94:ec:f5:f5:41:d9:99:d4:fb:f0:ab:3c:22:
a2:0e:2a:59:e6:e7:09:db:42:d4:d6:d2:2c:d0:0d:e6:30:bd:
a7:44:2e:bc:01:0d:ac:41:e7:b2:d6:1e:ee:11:c2:37:90:c7:
aa:da:68:ab:40:2c:4d:3d:b2:de:b0:08:e3:5f:ee:f1:c8:19:
c6:a5:03:56:8f:e6:4d:27:70:91:e4:31:c3:b2:25:08:5a:47:
35:7e:7a:16:3d:ad:8b:a2:33:63:8f:c2:a9:2c:1b:65:33:dc:
50:9c:f0:52:fe:7e:32:20:07:30:e2:40:0a:d3:f3:3f:db:13:
6f:2d:f7:20:b9:2c:7f:87:74:17:eb:e5:f7:34:e7:c9:d5:d9:
fe:cc:64:f9:7f:15:cd:21:c5:16:f8:bb:b9:38:01:15:8f:43:
f7:a3:ab:76:9e:0e:4d:2c:b6:9a:4e:fd:9c:ad:30:d3:76:e0:
89:29:95:24:69:bc:1d:72:2e:51:a5:0d:7d:89:00:10:71:a5:
dd:3b:f3:f6:6a:93:2f:8a:58:92:be:4a:68:d4:c2:40:98:1d:
80:4c:9d:25:20:13:92:5e:c4:dc:bc:af:21:53:48:e5:48:b2:
64:8b:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:26 2025 by rpki-client