Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
File: GUKBeimILUM78buOvFmy_yVugD8.mft (raw, json)
Hash identifier: G+kYRalDzMQHu9QpKjTUpBLOV2/37OmOfs10tE6wBz0=
Subject key identifier: A7:85:73:B9:DC:CA:30:36:AE:38:64:BA:60:9F:89:26:CF:6E:A4:B4
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Certificate issuer: /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial: 019A4F9973A10576B6056391C6D1FADFAFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
Manifest number: 0C45
Signing time: Tue 04 Nov 2025 16:00:47 +0000
Manifest this update: Tue 04 Nov 2025 16:00:47 +0000
Manifest next update: Wed 05 Nov 2025 16:00:47 +0000
Files and hashes: 1: GUKBeimILUM78buOvFmy_yVugD8.crl (hash: hx77l3W8KRIGemQIyt42MNHYGkglW42UhtSQ3DM+Ktc=)
2: GcHslNVvtLMqacjR3pPEHzo6qdY.roa (hash: 2lxXQx2L70uMfwd/jJMu4ZB84tprJ69cJOFL2QzMBdQ=)
3: Jbshh5-Y5wAYjNhv_trKB-ylliE.roa (hash: 5xQE2hOATpkYgRTE2YQwm3+KGl3F12kDMLW5EC6YqT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:73:a1:05:76:b6:05:63:91:c6:d1:fa:df:af:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Validity
Not Before: Nov 4 16:00:47 2025 GMT
Not After : Nov 5 16:00:47 2025 GMT
Subject: CN=a78573b9dcca3036ae3864ba609f8926cf6ea4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:be:fb:5e:b3:76:bd:6b:7d:72:a4:34:bc:
ea:43:b8:b5:ef:fe:c1:77:4e:fc:8a:e2:7a:c4:4d:
8b:43:aa:c4:e6:d0:1a:bc:44:8e:74:31:1c:57:e6:
6d:35:55:af:08:cf:5d:2d:01:00:11:84:bb:57:6d:
56:2e:28:45:f2:76:50:ad:24:49:72:df:c6:0a:5b:
c8:ee:ca:67:0e:4a:c6:3e:ad:2a:28:b2:7a:75:dd:
4f:ea:a1:9e:c1:94:1d:4a:78:19:b9:4e:ec:86:bb:
5e:08:0d:e6:3d:90:f2:b0:97:ac:0c:8c:a4:0d:1d:
e9:50:75:aa:d0:5b:f2:b0:4b:b6:3c:7d:4d:b0:a1:
d1:ef:b0:1f:41:ff:45:81:ea:24:d2:02:1e:89:6c:
41:33:fb:ae:06:d5:bc:3c:a5:44:41:80:5f:16:79:
c4:e5:98:0d:fb:74:7c:f8:ce:05:2f:2b:99:ee:3e:
a1:86:91:b5:1d:31:ef:99:71:9f:cd:24:02:8b:e7:
0b:0c:8d:85:95:a8:5e:69:98:00:89:cc:47:00:38:
59:68:74:55:cb:e6:77:28:ea:83:9f:57:c3:b2:22:
0b:8a:32:60:a1:88:c9:ef:4a:30:99:a8:3f:34:4d:
70:a6:8e:39:c2:e8:0e:02:16:87:b6:45:e2:06:e6:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:85:73:B9:DC:CA:30:36:AE:38:64:BA:60:9F:89:26:CF:6E:A4:B4
X509v3 Authority Key Identifier:
keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:05:8c:fd:33:28:30:f6:56:3b:c3:1f:11:3d:a8:e9:f8:8c:
82:68:25:6c:2e:82:53:c8:c2:47:05:b9:25:9a:24:00:85:f0:
b0:09:ca:54:70:82:1b:6d:66:35:dc:fc:95:10:35:07:0d:92:
5b:30:6b:e2:44:bf:a8:dd:c0:ed:dd:d3:0b:b8:11:dd:26:e3:
01:38:38:d6:28:33:d0:a5:84:76:8a:4d:cc:50:9c:45:11:b5:
ca:8a:e9:48:71:6c:e3:dc:4f:2f:a9:a9:5c:77:92:5f:87:8e:
95:6f:e0:a6:af:90:3a:1e:9e:a1:1c:15:b5:9a:7d:48:e7:2d:
98:23:63:bf:36:7a:38:f1:c7:41:09:ab:88:02:cc:45:df:da:
d9:50:5a:12:8e:fb:8b:3d:4b:e3:8d:87:d6:52:83:8c:84:a6:
7a:ed:db:d9:b8:d3:01:59:3e:ca:d5:cb:bf:d8:5d:d1:0b:8b:
9d:b4:5d:27:85:be:05:91:e7:06:61:32:61:ad:06:6b:13:fa:
a6:2a:a8:04:62:ca:d0:4e:c1:f0:27:d2:8d:48:75:61:53:6f:
a8:e3:1a:ee:ca:51:7c:e8:a1:bf:3c:83:7e:75:1c:fb:03:e0:
22:47:35:63:ee:80:b5:30:bc:91:85:f3:78:fc:4a:dc:9c:f5:
ca:a0:d9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:21 2025 by rpki-client