Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
File: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json)
Hash identifier: t7X1V4tHjpCoh5/2f0WxithtV08pMDKEGuNER0fJQjI=
Subject key identifier: F6:69:86:0F:00:48:5B:0F:63:C5:5B:8A:AC:35:0A:00:72:0D:20:A9
Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
Certificate issuer: /CN=194e32a82e98f22d939ff9984455813be2ba6a91
Certificate serial: 019A64D7F425CBF55FB33CAEB4BF1819A4F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
Manifest number: 0236
Signing time: Sat 08 Nov 2025 19:01:05 +0000
Manifest this update: Sat 08 Nov 2025 19:01:05 +0000
Manifest next update: Sun 09 Nov 2025 19:01:05 +0000
Files and hashes: 1: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: bRtTSEBlFwVIxSRrLQSh/1uEsdrBe98NSGvczXYJXLE=)
2: UfSgUAAlY9L-pxjy9r66ZUMHciI.roa (hash: lfZloxngOlvdGd9PgYcQqf9/LWwVeSvhKaVHeCHu4Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 18:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:64:d7:f4:25:cb:f5:5f:b3:3c:ae:b4:bf:18:19:a4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91
Validity
Not Before: Nov 8 19:01:05 2025 GMT
Not After : Nov 9 19:01:05 2025 GMT
Subject: CN=f669860f00485b0f63c55b8aac350a00720d20a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:32:59:ef:d7:de:09:18:6b:49:2e:a8:79:
e3:00:a4:2a:75:c8:e0:4d:7d:b8:06:63:b5:1a:73:
f7:9e:d9:3e:3e:0d:92:ac:9b:95:0d:52:af:23:c9:
a3:18:cd:3b:46:1c:5f:98:8f:70:fd:86:bc:d8:9c:
25:c1:d0:6c:5c:39:55:d3:54:d3:89:77:79:cd:dc:
21:85:20:a1:98:1f:32:63:c8:74:12:37:cd:f9:c2:
cb:f1:90:85:cf:a7:04:50:c8:58:6d:7c:73:1e:94:
59:fe:2a:ec:7d:fd:5b:bb:e6:93:cf:c2:5b:7e:c4:
f5:1f:46:17:15:33:eb:5b:1d:d6:67:03:b5:35:8a:
34:be:7b:44:9a:9b:e2:1b:5a:fa:d1:7f:5a:7c:33:
22:7c:4d:3b:21:c0:92:a3:97:03:7e:a2:e8:12:b2:
10:02:c2:cd:e3:1b:f9:07:f9:23:b2:44:f6:54:df:
40:b7:48:b6:f7:f3:55:1e:8d:68:8f:e6:c5:f1:bb:
74:92:81:01:96:ed:48:7f:ae:0b:ff:41:29:e8:52:
b2:f9:14:47:1d:5c:64:56:48:c1:ba:27:a0:34:4b:
fd:ea:b0:4c:1f:21:13:51:0b:33:77:69:92:4e:f1:
6d:60:e1:8e:ab:c8:6f:bf:50:02:70:6c:ca:36:40:
41:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:69:86:0F:00:48:5B:0F:63:C5:5B:8A:AC:35:0A:00:72:0D:20:A9
X509v3 Authority Key Identifier:
keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:61:bc:0f:2d:2c:fe:18:eb:bc:78:e2:fd:6d:5d:f5:47:90:
ac:3c:f0:55:78:a7:fb:7f:90:9e:e8:41:1a:4e:0f:3b:7a:32:
59:e7:29:97:0f:7b:75:a9:ba:54:11:81:58:ca:33:21:0e:c8:
62:3a:a3:79:38:33:ef:31:63:da:b3:77:c3:a6:92:06:57:3c:
9a:a0:42:59:b3:5b:f5:3d:86:bc:21:2f:c7:88:ab:0a:1b:a0:
7f:ab:63:8d:a4:74:9c:6c:b1:78:f9:b4:6b:c9:33:0b:4e:89:
d3:f5:b0:3a:46:60:e4:06:44:27:b9:75:2f:de:7c:e3:b7:d5:
e5:62:a4:bf:3c:0c:45:8e:7b:10:94:b5:96:fd:77:b9:47:b0:
4b:4c:ee:f2:dc:28:cd:f2:77:11:e4:e8:2e:60:46:4f:fc:2d:
72:fb:4b:21:a9:d3:6f:6c:43:79:ba:df:43:b6:5c:0f:77:c2:
c2:e5:af:98:53:e8:b5:0b:29:f2:2c:99:fc:2b:24:22:41:13:
21:9c:5e:1a:1c:96:7e:7c:80:cf:fb:fc:1e:6a:40:5e:24:d2:
0e:eb:bf:74:2e:b1:0b:fd:ef:59:53:ba:48:ed:c0:a0:fa:b8:
6c:f5:98:65:e8:a1:a4:43:29:e4:15:94:70:3b:73:1b:04:dd:
73:9e:7e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 21:40:09 2025 by rpki-client