Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: +xiP/buBuhEvnUtQRnbnRc6BQ/bFHyzrisSatiewRYI=
Subject key identifier: 93:13:19:1B:E4:4B:42:08:EB:0D:81:E2:51:ED:5F:2D:84:93:68:24
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 019A1E3F0265CEE1B9418F8367B97C9BE30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 019A
Signing time: Sun 26 Oct 2025 02:00:37 +0000
Manifest this update: Sun 26 Oct 2025 02:00:37 +0000
Manifest next update: Mon 27 Oct 2025 02:00:37 +0000
Files and hashes: 1: 9PkegdPcOVaHYch8whuUGhkGOzc.roa (hash: nTpt8kDLjSLrMGR0C/m0j9Ftj77WGzhvL7KxFH3u7Z8=)
2: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: gX9GPHWuNtRTIAQveuXamCVmUuy+y2EPxQp21lJGAhM=)
3: mo525hECNfAEonllRKyyBVCuVuY.roa (hash: a5b0LUZ9waSvhihXnwQQ6mCuKjGwIDzPkvhonuJ3oDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3f:02:65:ce:e1:b9:41:8f:83:67:b9:7c:9b:e3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Oct 26 02:00:37 2025 GMT
Not After : Oct 27 02:00:37 2025 GMT
Subject: CN=9313191be44b4208eb0d81e251ed5f2d84936824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:37:3b:3b:a2:41:97:ad:19:ec:10:71:e7:be:
cf:b2:61:86:a0:de:08:53:17:da:86:77:8a:70:27:
a7:ce:89:66:f9:b4:a7:15:1a:68:ba:9e:c2:5b:87:
2f:2f:43:b9:f6:14:7b:01:fa:cd:37:1e:f4:38:e5:
e7:9f:03:66:7f:5b:2d:f9:bd:c1:4a:de:46:92:84:
ad:9d:83:1f:a3:63:7c:8c:00:54:e8:37:f1:20:a7:
55:1e:c0:a1:f1:25:29:c3:98:60:41:c9:f3:08:97:
59:3e:ab:65:99:e2:d2:14:70:be:af:ac:d1:2f:9f:
cd:e8:4a:c8:98:7c:33:b2:2a:69:af:f6:3a:fe:34:
de:d0:26:f1:35:87:40:e4:59:52:24:9f:00:e3:d7:
a7:32:64:a1:b9:f8:95:34:15:94:ee:8a:49:ca:4e:
aa:d8:8d:3c:8a:06:1f:61:b6:43:d5:62:f0:1f:bd:
e6:ea:3a:ce:53:ce:67:e1:53:36:8b:3d:bc:64:c1:
02:5f:9b:3b:34:1e:45:be:2f:31:6e:7b:e5:ee:e8:
29:40:fa:84:ee:b9:17:ab:ae:57:9b:f0:ac:ee:dc:
7d:42:c3:9c:1c:59:07:4a:b3:37:ac:d8:25:43:1d:
d0:7e:37:93:7e:56:1e:e8:99:2b:57:4f:ab:2e:1a:
b7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:13:19:1B:E4:4B:42:08:EB:0D:81:E2:51:ED:5F:2D:84:93:68:24
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:21:94:6a:65:ed:bf:e4:ab:1b:56:e5:4b:f6:07:e5:3d:51:
5d:f8:91:32:cf:e0:fb:99:8e:fb:46:3a:20:11:5e:1c:15:38:
06:a7:31:ce:50:7e:76:13:86:a2:da:d3:20:b4:5e:df:a6:80:
bf:d6:4a:7a:a8:8a:53:c8:58:34:66:7a:42:2c:b5:12:b4:87:
b9:b2:56:78:8a:a6:95:77:d0:c3:6b:b9:98:28:b9:9a:c1:96:
f8:2e:4c:3f:45:e3:e7:71:bd:70:c0:0f:dc:5f:4f:ff:a6:bd:
53:28:d9:02:17:5e:86:33:b5:89:70:9d:e4:6a:10:33:b3:6b:
35:8e:3a:da:08:26:db:f5:be:a9:23:7d:45:ac:d7:13:b5:b7:
52:9e:64:50:f2:f8:95:99:f8:df:86:d7:17:b7:ff:d8:45:87:
77:b6:e9:46:ec:96:dd:12:84:40:09:ed:0f:cb:ec:8c:a7:82:
ed:9a:6a:61:3a:34:3c:8a:d4:fb:dd:2e:15:7d:90:57:e1:69:
bc:79:2a:72:2f:a5:ed:f9:4e:20:c8:48:46:83:48:29:c4:c1:
42:af:29:8d:29:7c:ce:14:9d:e1:29:fc:71:53:81:cd:f2:59:
38:5a:3f:73:d5:60:4f:e9:05:66:6b:ad:13:cd:51:88:b5:d6:
95:5a:46:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:06:54 2025 by rpki-client