Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
File: guS0v-5FTQqkcKXAqUEDSdSh13Q.mft (raw, json)
Hash identifier: qBcvk8tXTFGgjoTybNnN9tp5BCt+B2YT1eDijSzYI4Y=
Subject key identifier: D9:0C:51:CE:72:62:3B:62:4E:F1:54:D1:21:BE:C5:9F:7D:0F:DD:0E
Authority key identifier: 82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
Certificate issuer: /CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
Certificate serial: 019A725C99B1D99ED68749942F2CA0C7D200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
Manifest number: 1068
Signing time: Tue 11 Nov 2025 10:01:02 +0000
Manifest this update: Tue 11 Nov 2025 10:01:02 +0000
Manifest next update: Wed 12 Nov 2025 10:01:02 +0000
Files and hashes: 1: guS0v-5FTQqkcKXAqUEDSdSh13Q.crl (hash: 2kagm8WS2xmgQSfBe8R0aV+e25Vszv2o9l3EFDs/Nbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:99:b1:d9:9e:d6:87:49:94:2f:2c:a0:c7:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
Validity
Not Before: Nov 11 10:01:02 2025 GMT
Not After : Nov 12 10:01:02 2025 GMT
Subject: CN=d90c51ce72623b624ef154d121bec59f7d0fdd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:ab:ef:95:68:6d:aa:9d:f3:25:0d:c9:da:
b5:1a:10:f2:29:7b:5b:5f:8f:67:db:3d:4e:84:c3:
2f:a9:f3:21:07:7d:25:8d:36:10:f7:b2:2b:2f:a0:
de:55:6f:dd:22:2c:cc:b0:47:33:e7:47:75:e4:ab:
91:0e:39:d4:4f:ba:65:ee:b0:b9:45:06:db:be:4b:
5f:a1:17:b9:ff:60:a2:82:e3:34:97:c5:85:8d:af:
ce:89:92:cc:03:d9:3a:1f:79:3e:46:0b:18:2a:3a:
5d:85:4d:e5:65:da:b0:fb:fb:32:dd:ec:dd:2f:de:
8d:5a:82:b9:3d:75:b0:15:71:a3:67:91:41:b6:e0:
92:3e:f9:1d:12:b1:48:f8:2f:45:81:3e:10:5b:81:
e9:b5:90:30:bd:bf:e6:fa:3a:ca:3e:f3:96:93:de:
2f:69:54:ef:4d:45:70:e6:e7:9d:68:e0:69:be:95:
0a:c5:fb:5f:cb:b6:e2:c4:41:66:f8:bd:1e:bc:f8:
37:ab:55:61:51:07:55:bb:ed:4b:bc:c8:ad:b3:8b:
ae:be:cd:25:8c:d8:5d:58:72:da:c7:bc:b6:65:3e:
54:35:6a:87:fc:17:60:67:1e:be:a2:57:9f:e7:65:
8b:dc:00:e3:48:d9:62:07:56:ca:93:87:d7:ea:6b:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0C:51:CE:72:62:3B:62:4E:F1:54:D1:21:BE:C5:9F:7D:0F:DD:0E
X509v3 Authority Key Identifier:
keyid:82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:21:19:7c:70:f4:b2:05:f6:75:21:e6:82:96:d5:7e:b9:10:
67:9f:6c:3f:3d:bb:4b:28:2a:99:e1:22:22:52:b6:b1:37:d9:
fc:8b:9e:87:b0:cb:7f:ff:2b:6c:7a:45:9c:f6:de:12:fb:6c:
6e:8b:86:76:28:b2:64:43:41:f8:b6:38:6b:02:2a:1c:23:65:
b7:28:e1:06:75:66:98:46:d5:e2:e7:94:f1:34:ab:d0:25:f5:
09:0b:4b:9f:f7:d9:37:6e:aa:cc:a4:d3:fe:8f:ef:f5:e5:c9:
6a:fd:32:b5:ad:ea:97:5f:28:ee:77:04:bc:ce:ad:9b:58:40:
96:4f:af:da:4a:aa:1f:b4:de:bf:fe:96:fa:b3:43:e3:c1:05:
03:f8:d7:6b:5e:f8:a2:01:84:a3:85:f6:c1:70:90:14:e6:11:
46:f9:30:52:60:e6:2c:5c:28:22:53:75:6b:72:d3:cb:79:e5:
d4:4a:29:11:a7:67:1d:66:ef:4b:91:f8:6f:16:4f:78:91:10:
84:a7:d4:dc:2c:e6:17:de:46:a2:06:89:9e:73:14:81:7b:2e:
a9:d6:50:92:8f:6b:6b:a7:c6:b3:29:96:04:be:93:86:7d:43:
c0:99:f6:95:f3:e3:d5:b4:fc:69:a7:ae:27:55:83:ee:c9:58:
f6:d7:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:43 2025 by rpki-client