Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
File: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json)
Hash identifier: 0PBUCdBRvcR9+imrtiHn2h8VYwWmyscGDZiWBeYYa6U=
Subject key identifier: E2:12:68:23:E5:1B:BC:22:99:26:9E:49:FE:92:B8:AD:41:E3:CB:99
Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
Certificate issuer: /CN=194e32a82e98f22d939ff9984455813be2ba6a91
Certificate serial: 01988F8FDDBA52FB5FA6DBD748C61E5A2991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
Manifest number: 0143
Signing time: Sat 09 Aug 2025 16:00:26 +0000
Manifest this update: Sat 09 Aug 2025 16:00:26 +0000
Manifest next update: Sun 10 Aug 2025 16:00:26 +0000
Files and hashes: 1: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: SjBDkjTmTB5KTVDAYWFMMavrSobwKEIGp5JIpOMuKBo=)
2: UfSgUAAlY9L-pxjy9r66ZUMHciI.roa (hash: lfZloxngOlvdGd9PgYcQqf9/LWwVeSvhKaVHeCHu4Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:8f:dd:ba:52:fb:5f:a6:db:d7:48:c6:1e:5a:29:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91
Validity
Not Before: Aug 9 16:00:26 2025 GMT
Not After : Aug 10 16:00:26 2025 GMT
Subject: CN=e2126823e51bbc2299269e49fe92b8ad41e3cb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:e8:b7:0b:d5:8f:0d:f0:d4:26:68:e7:de:
bf:10:07:6b:90:41:35:38:d6:30:1e:93:76:20:0b:
59:82:53:67:1d:59:55:1a:54:55:09:cd:8e:5e:1a:
31:5b:e2:df:e9:28:2f:41:e7:4e:3c:6e:e5:be:69:
1a:c7:9d:a6:d0:3d:17:07:42:95:ab:64:7d:6d:f0:
8b:e3:69:25:7f:fb:e6:53:f8:b3:46:e4:3b:2c:3f:
d6:ac:6e:72:e9:5c:81:69:dc:fc:61:ed:ce:7f:ca:
f8:d9:80:d8:aa:db:5e:cc:e4:34:0b:c2:d9:43:c0:
18:af:56:a6:d6:e9:d3:8c:4b:70:9b:06:2c:00:5a:
74:95:20:d2:d3:dd:2d:78:c6:2e:ba:ad:ea:60:15:
1f:c8:e3:e5:f7:c8:d6:8e:61:42:01:08:06:eb:db:
f0:c2:fc:f8:bb:78:6f:a1:12:31:87:c5:8b:27:c4:
c1:ee:6a:6b:ed:de:ff:83:f7:38:1a:93:47:47:51:
75:30:46:4d:21:c0:35:5b:7d:f2:c6:7c:37:b8:76:
32:fd:8b:ff:35:a7:50:ca:f2:c6:80:6c:9a:a4:27:
e3:95:c3:f0:14:4e:a0:80:e7:ca:66:fa:16:fc:53:
c8:84:f3:af:b6:6f:cd:6e:66:3e:37:6d:2e:bf:63:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:12:68:23:E5:1B:BC:22:99:26:9E:49:FE:92:B8:AD:41:E3:CB:99
X509v3 Authority Key Identifier:
keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:69:4d:1c:e7:3d:93:59:c3:0e:e0:0a:5b:be:ee:98:16:db:
bf:b2:23:89:a1:4e:ed:4e:b8:ad:fb:ae:cc:5c:5d:cd:91:82:
b5:8a:31:59:28:12:8c:1f:34:af:27:75:eb:40:08:9f:0c:8e:
fb:76:d3:85:a2:ef:fc:b3:74:cc:49:7c:54:90:ab:94:a9:fb:
2a:fc:d1:ee:17:b5:22:fc:f4:2f:ce:b9:53:21:ff:3f:ec:26:
f5:7b:05:b3:be:df:fa:73:1b:de:55:f2:dc:8c:e4:fe:88:10:
ff:6f:cb:58:88:36:2d:37:a9:dc:18:30:56:95:ab:1e:cc:e6:
7f:8e:54:6e:38:2b:81:16:eb:a7:14:63:92:b0:b3:c5:2e:2a:
53:9e:38:66:0e:e4:31:3b:a3:5b:e8:69:c7:01:c6:2e:42:0a:
b5:af:5b:74:9e:b5:fc:2c:71:4a:43:2d:c9:49:78:3d:44:ba:
93:3b:d6:03:ee:0c:b6:0b:93:76:4e:6f:24:03:e5:9b:dd:dd:
48:8e:f0:25:35:e9:3a:aa:16:14:82:a9:64:33:48:b0:fb:be:
bd:6e:d2:ab:6b:89:98:a2:cb:95:95:0e:96:34:7e:36:52:ad:
64:29:f1:a3:eb:08:d3:f1:4d:e2:ed:4a:35:8d:77:c1:70:9e:
d4:4d:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:36:00 2025 by rpki-client