Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
File: GUwuZp9lV99OPUmk8mW1QReS_6A.mft (raw, json)
Hash identifier: dB4Bm2gCWg6OWuhSIehImm6RKdutskP46W8td5WBEjM=
Subject key identifier: 09:16:24:6B:86:EA:C5:39:3E:F5:DB:03:C0:79:79:B3:F9:82:77:02
Authority key identifier: 19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
Certificate issuer: /CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Certificate serial: 019A72267354F8ADE7E44011B9AE0E513055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
Manifest number: 0E7D
Signing time: Tue 11 Nov 2025 09:01:53 +0000
Manifest this update: Tue 11 Nov 2025 09:01:53 +0000
Manifest next update: Wed 12 Nov 2025 09:01:53 +0000
Files and hashes: 1: GUwuZp9lV99OPUmk8mW1QReS_6A.crl (hash: zYANj/54DVd2bhNY9TnKivvUGchWPtZ8CvfswPlAQeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:73:54:f8:ad:e7:e4:40:11:b9:ae:0e:51:30:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Validity
Not Before: Nov 11 09:01:53 2025 GMT
Not After : Nov 12 09:01:53 2025 GMT
Subject: CN=0916246b86eac5393ef5db03c07979b3f9827702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:69:d3:51:76:81:7a:56:3b:86:c0:20:ef:6e:
3e:f4:ac:32:3f:3c:1d:d2:17:38:10:4e:80:28:63:
e8:a9:eb:20:0e:a2:73:62:e1:34:20:cf:89:ea:0a:
45:44:12:6c:f1:17:b3:96:44:86:03:f2:63:a5:14:
4a:8e:29:8a:28:aa:91:eb:e5:dd:ac:c4:d2:69:cf:
c7:f6:6b:3f:bb:fa:2b:95:d0:ef:e4:6a:bf:5e:8a:
e7:6c:63:f1:15:48:c4:74:66:94:d8:0d:cd:6c:6c:
da:48:17:e5:80:e9:d6:6c:11:32:ab:82:1d:54:de:
41:5d:ed:1a:5a:8e:97:9e:0f:f3:28:3c:9d:41:de:
38:f7:88:7a:b3:3f:96:15:dd:47:7c:23:db:3b:55:
62:40:51:6f:0d:19:6f:15:bb:41:70:50:94:dd:7a:
00:cc:c1:2d:63:25:44:d4:e6:ef:65:8f:e1:57:d5:
55:6a:05:71:bb:3e:42:be:b1:f0:39:c0:b2:a7:c2:
d6:69:9b:d7:12:62:83:1c:10:58:15:c5:b8:f6:e3:
0a:48:74:52:ce:07:6c:37:94:cc:fe:ea:d2:34:70:
74:c8:e3:34:c3:c2:99:b5:dd:fa:50:c0:1b:5f:8c:
fc:c8:a3:bd:14:ed:dc:6b:c7:1b:a8:a5:f2:09:1e:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:16:24:6B:86:EA:C5:39:3E:F5:DB:03:C0:79:79:B3:F9:82:77:02
X509v3 Authority Key Identifier:
keyid:19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:19:4a:af:c5:57:74:46:f6:3a:16:8e:7b:96:80:f6:23:6e:
bd:1f:0d:a7:d8:e2:de:75:c7:86:77:b7:a4:f7:c8:92:e7:3e:
24:eb:10:b0:be:88:a8:9a:ae:36:ba:66:79:87:4c:4b:c1:94:
2a:30:91:6f:dd:4a:25:de:30:09:c5:70:38:c9:5c:9d:be:7d:
50:38:c4:79:e7:0d:b7:df:67:96:90:2f:90:ba:5e:ff:07:d9:
24:a8:7e:8a:e1:7c:9b:0e:7d:16:9f:5c:ee:7e:aa:c8:33:e9:
47:4a:ae:0e:58:ab:83:89:b6:59:c4:14:7d:50:5c:59:34:3e:
a2:dd:5d:6d:11:5c:f9:53:25:f0:64:d0:95:ec:6e:a5:98:f3:
03:a8:f3:31:8d:88:35:25:d5:8d:7c:8c:bd:f9:63:74:26:38:
ab:90:d3:dc:15:10:62:d4:94:a3:3d:20:20:95:16:b2:03:93:
24:15:28:39:a7:4a:9d:ac:5a:8e:cc:c8:68:8c:e6:83:05:aa:
f6:1f:d9:0a:05:74:8d:d1:3d:0f:02:93:1a:cb:e4:31:13:54:
51:1a:0a:29:72:29:21:30:3c:19:52:7d:ff:aa:41:53:7d:5b:
fa:77:87:54:e1:b8:95:a1:e8:5c:77:92:f3:d9:95:c2:92:3e:
24:ed:43:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:18 2025 by rpki-client