Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
File: GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft (raw, json)
Hash identifier: C7LGgZ3AO4AzTgPojIpVNE28giN8Og1tVC3DKb6QgjM=
Subject key identifier: 52:23:4A:B9:96:95:90:D5:60:4B:5F:30:8F:EB:EF:21:5D:92:DA:B2
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Certificate issuer: /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial: 019A51F5931E8D42F3E2A5E52FCC3662179D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
Manifest number: 1285
Signing time: Wed 05 Nov 2025 03:00:39 +0000
Manifest this update: Wed 05 Nov 2025 03:00:39 +0000
Manifest next update: Thu 06 Nov 2025 03:00:39 +0000
Files and hashes: 1: GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl (hash: jTqAvYdTfY7u6Sh+w/Hz7IXaw28xP/sprGt5yguTQoY=)
2: uIeYeZznF-O1grN0M5g3SmcN33U.roa (hash: y5O+zvgRhkPeGKTBn9Qn4EVE0s2vlCMineSuEirJq9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:93:1e:8d:42:f3:e2:a5:e5:2f:cc:36:62:17:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
Validity
Not Before: Nov 5 03:00:39 2025 GMT
Not After : Nov 6 03:00:39 2025 GMT
Subject: CN=52234ab9969590d5604b5f308febef215d92dab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:b6:fc:96:e9:31:db:26:85:c9:11:70:73:
ac:eb:5d:5e:25:53:30:f0:f9:68:62:a3:6f:6d:e4:
6c:a8:c9:54:16:e3:3f:b2:9d:47:40:da:32:c1:df:
6d:17:b1:86:27:48:09:62:0b:ea:b6:5d:44:19:ac:
9c:6b:21:3e:bc:bb:28:56:08:ea:28:2a:b8:d2:78:
e5:d8:15:7c:f9:3a:05:e8:48:de:4b:d2:68:cf:63:
98:7a:cd:a6:12:c7:8a:73:69:58:ca:18:a9:5c:78:
a8:4f:85:2a:e9:2e:12:ce:46:d4:b1:d1:94:61:ee:
73:8f:67:98:55:cf:93:ba:55:36:1f:21:98:f2:64:
e8:b3:af:94:26:5a:d7:3b:95:26:69:c3:c0:cb:b0:
2e:35:94:6f:26:4b:ea:e4:23:ed:83:6a:5e:25:32:
5b:b6:22:ea:f3:55:aa:9d:15:c9:29:09:08:ad:0e:
e9:ae:65:75:be:21:51:f2:53:53:c0:3b:f2:c8:ac:
a4:32:ee:08:04:1c:bf:e3:52:3c:ac:36:3e:d1:c0:
78:7f:4c:cd:2a:f2:08:a7:62:3a:ef:3a:bb:ec:aa:
7d:5e:24:37:6a:cf:64:92:e4:dc:42:f1:c3:bb:21:
e0:27:71:c4:5c:e2:2a:d7:50:3d:1c:91:c8:96:29:
26:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:23:4A:B9:96:95:90:D5:60:4B:5F:30:8F:EB:EF:21:5D:92:DA:B2
X509v3 Authority Key Identifier:
keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d5:bf:c6:51:bf:59:a5:4a:c8:16:b6:ae:9e:55:33:14:ac:
85:26:27:d6:e9:b2:b6:fb:08:68:bb:08:39:00:f3:a5:99:48:
b8:bd:f5:fc:ce:65:42:c8:69:5b:94:c4:8d:e0:ec:e5:ca:72:
ec:6f:7d:13:c6:96:2c:90:ff:6d:ad:ba:0f:62:50:1d:53:ad:
b7:b9:57:58:05:f7:27:7b:c1:65:5d:ec:5a:73:e3:f1:47:ba:
17:cd:7a:6b:bd:ff:3f:92:9e:91:c6:1e:6f:9d:79:fe:e2:e1:
ce:f5:b3:cc:b2:1a:48:fe:31:49:a8:1a:5a:2b:ac:28:6e:ee:
c3:c1:fd:22:60:c5:95:e6:a3:08:15:9b:da:f1:b9:a7:89:39:
d5:8e:a0:9a:03:9d:e6:7d:04:d3:24:06:93:89:8c:d3:ec:37:
f9:ee:a8:3a:0d:b2:3a:97:bc:7d:19:85:60:68:4b:0c:8b:c7:
b5:56:14:66:bb:60:ee:9f:74:d0:4b:44:ee:97:81:9c:8b:73:
d9:b6:54:ef:80:ae:ec:34:59:35:da:15:a4:55:c4:72:6e:a4:
6e:82:09:03:90:4b:0a:7f:13:46:7b:34:5e:e9:91:5b:45:88:
60:f1:5d:d7:2a:1a:b6:19:28:17:81:f5:77:81:f2:24:da:5e:
4c:18:f9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:30 2025 by rpki-client