Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
File: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json)
Hash identifier: 49GOFk4ThyU+npH+czbnlH3Dty3zWKaQzxx9Ag4uygU=
Subject key identifier: 31:4E:04:AC:63:9A:10:D1:D9:BD:0C:1E:D4:23:A9:D2:E5:DA:1D:5C
Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
Certificate issuer: /CN=194e32a82e98f22d939ff9984455813be2ba6a91
Certificate serial: 019965ECE58AC9B54047081E0FFCC92D856A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
Manifest number: 01B2
Signing time: Sat 20 Sep 2025 07:00:48 +0000
Manifest this update: Sat 20 Sep 2025 07:00:48 +0000
Manifest next update: Sun 21 Sep 2025 07:00:48 +0000
Files and hashes: 1: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: AcDVbWm5jHfR+JoU+chEf46aYjoLEVJ1BUJXTqd7Ww0=)
2: UfSgUAAlY9L-pxjy9r66ZUMHciI.roa (hash: lfZloxngOlvdGd9PgYcQqf9/LWwVeSvhKaVHeCHu4Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:65:ec:e5:8a:c9:b5:40:47:08:1e:0f:fc:c9:2d:85:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91
Validity
Not Before: Sep 20 07:00:48 2025 GMT
Not After : Sep 21 07:00:48 2025 GMT
Subject: CN=314e04ac639a10d1d9bd0c1ed423a9d2e5da1d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:bd:2a:0f:6c:3d:00:3e:41:16:08:f6:ab:
13:cf:8d:fe:b1:5b:85:d2:81:a4:ef:7e:e8:ff:12:
30:d4:8e:c0:d2:1f:75:66:a3:ce:34:f1:ac:ac:3a:
04:74:21:3c:89:54:73:58:5f:da:87:61:89:11:ae:
a9:2e:1b:a7:d0:4b:f1:38:12:cc:da:a9:7e:c1:a0:
4c:7c:be:df:74:f4:64:30:2e:a9:fa:fa:04:95:12:
95:62:4f:81:96:1c:81:b8:9b:fd:bc:42:6c:b1:7a:
54:83:6f:73:c0:d9:8f:b2:9a:27:28:b8:e1:13:91:
24:4e:b6:de:90:f5:8e:1f:ff:24:26:d0:fb:30:a9:
ee:2e:5c:3b:ee:27:37:23:af:63:c1:81:c9:eb:4e:
38:7a:d7:84:c4:18:92:ef:c8:5a:e4:ae:29:6e:0a:
ee:68:fc:d1:02:0c:af:92:3a:89:4a:b8:6d:e8:21:
7d:54:c3:2a:b2:b1:41:b2:8a:f9:7f:46:5d:fc:1d:
71:95:79:71:99:8c:a6:1a:49:29:7a:26:93:66:9d:
a6:fa:2e:d1:c8:41:53:7f:68:bf:1e:07:74:4b:c7:
57:50:f3:04:c6:23:7c:7f:fa:56:f9:21:2f:b7:37:
78:9d:b4:b6:0c:20:03:2c:23:2a:5f:29:90:8c:15:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4E:04:AC:63:9A:10:D1:D9:BD:0C:1E:D4:23:A9:D2:E5:DA:1D:5C
X509v3 Authority Key Identifier:
keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6f:04:34:6e:b2:43:22:4d:c6:cf:19:8f:42:2e:15:d7:d7:
16:aa:9b:4f:86:69:b8:5b:8d:21:e7:b5:e0:a9:67:cf:b1:31:
20:ce:3f:92:01:10:00:c7:71:f3:b5:11:b2:0d:e3:0e:4c:2a:
9f:2c:a2:ea:f8:77:bd:7b:b7:6f:4a:e2:ab:5a:11:b7:16:8a:
f0:3c:49:23:89:e8:27:11:da:ec:85:0f:0e:cf:b7:45:0e:d3:
4c:8e:17:69:ba:07:e6:ca:b5:e5:5f:e3:83:e6:3b:c4:ed:4b:
15:42:31:79:ff:72:22:08:08:90:79:25:6a:a5:44:c7:ab:69:
55:cd:ab:79:34:30:f2:3b:e3:f2:43:08:31:a6:14:4a:d9:95:
61:f3:05:6d:88:19:dd:b0:01:c0:53:20:ca:47:2d:9f:76:86:
f1:68:3e:b8:bc:22:f2:b1:14:c1:05:8b:38:47:2c:8f:9b:37:
69:81:93:26:ea:43:c0:37:da:3d:82:5b:7a:6e:c5:6c:cb:35:
de:ed:9c:66:55:75:6f:e0:0a:a5:bd:12:aa:e3:60:e8:85:55:
9a:24:9c:15:fc:ba:dc:81:1e:df:80:af:78:b7:d0:21:0e:dc:
11:34:f1:ac:96:45:c6:3e:35:ac:b1:dc:ca:8e:8a:7d:6b:be:
45:b7:60:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 10:37:53 2025 by rpki-client