Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
File: GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json)
Hash identifier: D6n6FrpwaOBByvQ2Ol3uQeiMaRVHnuzWgw/SK6HvlZk=
Subject key identifier: 30:3F:C1:13:65:5B:C8:1E:4E:95:AF:CE:08:8A:2B:A1:C4:36:E9:8A
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Certificate issuer: /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial: 019A4F62CCC05E15C67C01389896397E820F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
Manifest number: 086B
Signing time: Tue 04 Nov 2025 15:01:06 +0000
Manifest this update: Tue 04 Nov 2025 15:01:06 +0000
Manifest next update: Wed 05 Nov 2025 15:01:06 +0000
Files and hashes: 1: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: HhfIxSyKgSi3vPmWz7QG/BNj8C3wKVJMjmX6vS7h0Jc=)
2: MBByOIj39pYIect2LdRi3wnM4oc.roa (hash: tdzNEKUZ3mXK0KXsFeqcPam83cZmJKXuHjjqHDm2aqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:cc:c0:5e:15:c6:7c:01:38:98:96:39:7e:82:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Validity
Not Before: Nov 4 15:01:06 2025 GMT
Not After : Nov 5 15:01:06 2025 GMT
Subject: CN=303fc113655bc81e4e95afce088a2ba1c436e98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7a:67:83:15:28:82:ea:a1:2c:df:db:30:fd:
92:27:ef:21:9c:53:dd:89:95:67:0b:32:cb:cb:33:
90:a2:ee:4c:8d:51:74:d7:c5:8a:f8:65:ff:77:85:
46:1f:27:cf:ac:18:f4:8a:af:98:46:1d:2c:a5:5b:
e7:05:6b:69:ff:e5:ce:36:ed:0b:3a:00:99:e1:5f:
3b:8b:dd:0e:d2:da:cb:24:29:ad:76:65:90:24:41:
d2:b2:91:4d:df:12:fb:c4:bd:48:da:33:66:5b:a5:
6e:93:d4:e8:23:a1:6b:24:ff:99:cc:02:e6:3b:7d:
c7:5f:88:a0:be:b8:21:b3:69:3d:bd:f0:07:29:2f:
33:9e:48:f8:9a:ff:9f:bd:77:0b:6b:47:cc:7c:75:
16:c8:d6:db:a2:71:b6:af:8d:40:13:a8:a1:bc:b4:
79:ee:ee:a8:22:60:29:09:ab:f6:77:32:66:37:24:
98:2a:f4:4a:0f:de:03:af:0a:3c:21:1b:1a:d5:f1:
1f:5e:ee:e5:95:0f:76:62:67:7f:20:17:e3:f6:6c:
98:61:0d:3d:55:63:55:4d:4f:5a:87:2b:60:45:40:
c1:1d:c4:38:38:cd:fe:b4:bd:95:7f:32:a0:ed:ca:
af:a0:ea:b5:ec:1a:67:a8:63:cb:b1:e6:bb:67:0e:
bc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3F:C1:13:65:5B:C8:1E:4E:95:AF:CE:08:8A:2B:A1:C4:36:E9:8A
X509v3 Authority Key Identifier:
keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ae:2c:37:ee:5f:6a:7b:df:0e:0f:82:fe:4a:1f:1d:b6:16:
80:7f:10:8f:f0:29:45:c6:96:d3:16:72:8c:e5:71:e9:3f:55:
3a:5d:d7:2e:dc:62:fb:70:d2:07:92:96:7b:12:4a:13:1a:42:
b5:c6:1d:6b:3c:7b:2a:18:e3:7a:fc:d3:26:f9:7c:3e:0b:85:
02:78:51:bd:c4:2c:4e:41:91:db:c4:bf:49:02:98:47:33:9b:
81:7a:e0:4b:d9:6a:77:fa:dd:c1:1f:02:f1:77:8b:4c:c8:58:
8a:fc:f4:1d:2b:2d:a9:48:03:04:52:16:40:43:d3:d2:ab:b0:
85:ef:a7:49:f2:a4:78:da:7d:6f:f8:e6:93:8c:e9:0b:1e:dd:
82:47:4f:18:33:d1:02:01:c6:7b:39:08:6e:0d:ff:6f:bf:52:
9b:f7:82:56:65:d4:5b:30:29:97:ea:46:b6:49:96:cd:b5:14:
22:3e:53:63:7f:28:b0:0b:2d:06:50:e6:7a:95:99:b0:2d:81:
84:e3:3d:0c:9d:14:63:63:93:47:a3:45:0c:e3:e0:23:07:f8:
d9:36:6b:44:2c:8c:72:25:26:4f:c2:b2:2f:b9:34:4a:98:98:
2d:1c:01:46:ce:5b:dc:33:ab:a0:6a:34:12:a9:b8:27:3b:49:
d3:c3:02:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:08 2025 by rpki-client