Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
File: GUwuZp9lV99OPUmk8mW1QReS_6A.mft (raw, json)
Hash identifier: YLEiAnf8Q92ekmqjxuB5Qk+y6oWKfUyugJvMpnQM8Ss=
Subject key identifier: 32:CE:69:A2:C7:2A:E4:C0:44:85:CB:91:7C:56:2C:AD:F6:5C:3B:E0
Authority key identifier: 19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
Certificate issuer: /CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Certificate serial: 01989712B59F6DE3C2CBC5772CF3ECBA8304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
Manifest number: 0D87
Signing time: Mon 11 Aug 2025 03:00:42 +0000
Manifest this update: Mon 11 Aug 2025 03:00:42 +0000
Manifest next update: Tue 12 Aug 2025 03:00:42 +0000
Files and hashes: 1: GUwuZp9lV99OPUmk8mW1QReS_6A.crl (hash: GziLgLF8CLj5fzaGjNo19nLtN1SKvda0QBJ9DZ3a5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:b5:9f:6d:e3:c2:cb:c5:77:2c:f3:ec:ba:83:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Validity
Not Before: Aug 11 03:00:42 2025 GMT
Not After : Aug 12 03:00:42 2025 GMT
Subject: CN=32ce69a2c72ae4c04485cb917c562cadf65c3be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:51:d0:e6:e1:1e:23:aa:17:c4:6f:a5:76:
ec:f5:fb:29:61:7e:18:05:8e:8f:ac:f6:74:75:83:
54:96:bf:cf:ca:c3:8c:37:df:be:3a:a9:da:5e:6f:
ec:3e:53:a0:f2:99:96:59:ba:cb:74:a3:45:ba:dd:
9e:d8:a3:a1:40:55:4a:ee:6f:90:d1:04:ed:6e:2d:
51:dc:a5:ed:10:10:c9:14:46:7b:0e:fe:42:5e:21:
b0:08:c0:b0:f0:6b:cc:c2:f4:d9:71:76:b6:4b:e8:
91:eb:03:96:4d:94:7a:60:b7:a0:10:c0:17:2d:6b:
c3:e4:72:be:6c:a7:0f:c3:f8:69:e8:06:38:33:40:
63:e7:9b:54:3b:db:17:f6:6b:17:85:b6:bd:27:58:
1a:47:61:96:2c:ce:8c:27:66:9f:5a:b2:35:f3:b0:
e3:78:d7:35:56:b0:bc:d6:30:86:95:32:01:59:29:
62:ef:8f:1b:71:4d:06:a5:87:c2:ae:cc:e2:9a:de:
88:22:57:d0:fa:41:b1:fb:a1:89:5d:a3:9f:d9:f2:
ad:62:3e:d1:c1:b4:f0:d1:25:7d:e2:9d:97:3a:5c:
04:32:1b:f9:e0:dc:47:aa:7a:d4:e6:3b:b5:60:d1:
96:d5:ea:dd:b2:ad:9c:6c:05:fc:ae:51:7b:c1:3e:
e7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CE:69:A2:C7:2A:E4:C0:44:85:CB:91:7C:56:2C:AD:F6:5C:3B:E0
X509v3 Authority Key Identifier:
keyid:19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a2:29:ae:ba:07:98:6e:41:50:b1:22:65:4e:a4:32:17:8f:
4f:4b:a8:ea:f3:ad:42:f8:c3:e5:2d:54:72:8c:d3:cd:d5:18:
d2:58:87:3f:56:8f:00:d6:51:77:10:07:25:d7:92:32:f5:b2:
90:78:87:20:e4:e6:dd:98:0c:16:9b:65:7c:c9:1a:45:82:c1:
96:45:62:78:69:16:42:cb:b5:be:31:5a:56:51:81:da:1d:ac:
4a:21:bb:0a:cb:97:9d:15:1c:01:db:03:06:d8:10:9a:e6:c4:
37:6e:66:2f:2e:31:83:ad:1b:87:89:db:ee:de:aa:30:04:6a:
c1:e6:8c:5d:3a:52:ae:51:44:a8:bf:23:26:88:8b:2a:4f:19:
e7:20:0f:6d:7e:df:75:9b:97:95:c1:3b:19:1c:b8:4a:6d:34:
de:25:4b:7c:b6:f9:ed:b7:d2:73:04:cd:01:08:b4:bc:3e:25:
68:02:68:78:b4:e3:49:cf:e6:da:93:54:24:11:b8:cb:65:19:
1e:45:64:ff:ef:2a:2c:3c:93:bc:e6:88:f8:7c:cc:46:27:2a:
ae:6d:d4:0d:f4:f3:fa:7d:2c:22:46:a3:3f:0d:a1:d3:76:1f:
ca:f2:6e:ba:bb:64:39:c2:3e:be:65:d2:27:41:da:d8:86:b1:
32:b8:8a:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXErWfbePCy8V3LPPsuoMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NGMyZTY2OWY2NTU3ZGY0ZTNkNDlhNGYyNjViNTQxMTc5
MmZmYTAwHhcNMjUwODExMDMwMDQyWhcNMjUwODEyMDMwMDQyWjAzMTEwLwYDVQQD
EygzMmNlNjlhMmM3MmFlNGMwNDQ4NWNiOTE3YzU2MmNhZGY2NWMzYmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxflR0ObhHiOqF8RvpXbs9fspYX4Y
BY6PrPZ0dYNUlr/PysOMN9++OqnaXm/sPlOg8pmWWbrLdKNFut2e2KOhQFVK7m+Q
0QTtbi1R3KXtEBDJFEZ7Dv5CXiGwCMCw8GvMwvTZcXa2S+iR6wOWTZR6YLegEMAX
LWvD5HK+bKcPw/hp6AY4M0Bj55tUO9sX9msXhba9J1gaR2GWLM6MJ2afWrI187Dj
eNc1VrC81jCGlTIBWSli748bcU0GpYfCrszimt6IIlfQ+kGx+6GJXaOf2fKtYj7R
wbTw0SV94p2XOlwEMhv54NxHqnrU5ju1YNGW1erdsq2cbAX8rlF7wT7nQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLOaaLHKuTARIXLkXxWLK32XDvgMB8GA1UdIwQY
MBaAFBlMLmafZVffTj1JpPJltUEXkv+gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1V3dVpwOWxWOTlPUFVtazhtVzFRUmVTXzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zNGRmZTAtOTIwNi00MWRmLWJhMDEt
YTlmZjdhNTM3NTNhLzEvR1V3dVpwOWxWOTlPUFVtazhtVzFRUmVTXzZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8zNGRmZTAtOTIwNi00MWRmLWJhMDEtYTlmZjdhNTM3NTNh
LzEvR1V3dVpwOWxWOTlPUFVtazhtVzFRUmVTXzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqIprroH
mG5BULEiZU6kMhePT0uo6vOtQvjD5S1UcozTzdUY0liHP1aPANZRdxAHJdeSMvWy
kHiHIOTm3ZgMFptlfMkaRYLBlkVieGkWQsu1vjFaVlGB2h2sSiG7CsuXnRUcAdsD
BtgQmubEN25mLy4xg60bh4nb7t6qMARqweaMXTpSrlFEqL8jJoiLKk8Z5yAPbX7f
dZuXlcE7GRy4Sm003iVLfLb57bfScwTNAQi0vD4laAJoeLTjSc/m2pNUJBG4y2UZ
HkVk/+8qLDyTvOaI+HzMRicqrm3UDfTz+n0sIkajPw2h03YfyvJuurtkOcI+vmXS
J0Ha2IaxMriKpA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:09:22 2025 by rpki-client