Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
File: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json)
Hash identifier: bghP7p6U75petBmx7HSjCxYOAQ6w5H5QAbq+dSkiNvQ=
Subject key identifier: A7:AB:AE:BD:79:8E:B3:3F:A5:BB:85:56:BD:F4:36:2B:06:A1:A8:D0
Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
Certificate issuer: /CN=194e32a82e98f22d939ff9984455813be2ba6a91
Certificate serial: 019A55646BC4C35905DFA8641A3C5B0EF2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
Manifest number: 022E
Signing time: Wed 05 Nov 2025 19:00:35 +0000
Manifest this update: Wed 05 Nov 2025 19:00:35 +0000
Manifest next update: Thu 06 Nov 2025 19:00:35 +0000
Files and hashes: 1: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: 8zKrg7HaMqOjozt1dPSpFb0LX9XUQEHVmx6Wwv4f1Gc=)
2: UfSgUAAlY9L-pxjy9r66ZUMHciI.roa (hash: lfZloxngOlvdGd9PgYcQqf9/LWwVeSvhKaVHeCHu4Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:6b:c4:c3:59:05:df:a8:64:1a:3c:5b:0e:f2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91
Validity
Not Before: Nov 5 19:00:35 2025 GMT
Not After : Nov 6 19:00:35 2025 GMT
Subject: CN=a7abaebd798eb33fa5bb8556bdf4362b06a1a8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:08:0f:26:6a:5f:6b:9e:0f:05:a3:68:f0:
2e:ea:9d:1a:e6:c7:2a:6d:93:15:eb:5a:fa:59:2d:
29:57:5d:17:6f:4b:7e:29:cd:71:f7:a2:a2:14:d1:
77:f3:22:44:50:73:f1:d5:41:7e:5a:4a:e5:2a:82:
c6:76:76:29:b2:27:4f:d8:71:40:05:82:83:36:23:
0b:f1:96:7e:74:9e:98:82:0e:2f:7e:af:59:69:f0:
3b:8f:c9:97:1c:b7:9f:eb:e8:4b:19:a3:71:7b:9b:
e1:98:9f:00:36:96:bf:c6:0c:0f:8a:4a:66:68:0a:
96:0a:02:9e:8f:55:06:92:41:9c:b3:8c:8b:98:54:
5d:f1:0e:d9:05:1d:1e:57:c4:e4:3c:62:e9:e5:a0:
e6:77:5b:cc:12:36:ba:5b:5c:4c:58:a8:e8:75:b5:
d3:11:48:56:fb:00:58:27:9a:ae:6b:c7:64:0a:16:
7b:29:b0:29:11:f6:95:20:bc:ab:2c:44:c8:18:0b:
aa:31:e7:8d:bd:27:07:af:16:3b:1b:6a:82:35:df:
b8:dd:06:90:cd:46:f0:f8:48:6a:83:d9:c0:8d:36:
8e:29:b1:4b:91:fc:66:f2:02:66:dd:a0:29:a7:ef:
e8:8f:61:7c:28:da:1a:ff:c9:61:79:55:1f:14:2b:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AB:AE:BD:79:8E:B3:3F:A5:BB:85:56:BD:F4:36:2B:06:A1:A8:D0
X509v3 Authority Key Identifier:
keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bd:cf:22:04:c8:a3:f3:13:f5:8c:a8:f0:15:e2:51:30:21:
2c:fd:b8:80:9a:52:0e:34:09:c0:83:30:46:c5:c5:f4:ef:25:
79:63:a9:52:5a:50:3e:09:4f:08:fa:da:16:16:7c:e9:9e:17:
1a:7e:81:6b:f3:27:0c:e9:48:dd:5d:8e:14:55:56:4f:f1:75:
0f:26:26:19:17:76:04:02:02:ed:e2:0b:69:76:7a:cd:d2:60:
58:ed:20:c2:7d:29:7c:82:96:1d:53:45:b6:2f:d9:66:7a:f7:
d9:73:b0:fb:0a:56:f3:0f:df:99:b6:1d:63:1f:0d:0b:dc:50:
41:15:27:d8:d9:e7:28:ad:95:c4:d6:d1:56:19:1f:e0:5e:c0:
e6:41:d5:e3:42:cb:82:ed:91:89:f1:af:12:ef:7b:db:46:3d:
a3:95:9d:94:f8:0b:95:68:61:48:7f:e3:91:6e:46:9e:85:0d:
17:38:40:1f:c3:39:b2:7e:74:98:e7:ad:da:7d:f5:3d:57:dc:
a7:86:66:d7:eb:2e:03:c9:36:fe:02:97:fd:04:84:6b:7b:c1:
bd:98:7d:2f:0c:31:84:80:af:50:3f:ac:3c:c3:a1:62:a1:c4:
29:b4:b0:e1:c2:45:5b:30:8c:23:7a:da:ed:0b:ba:16:1e:a6:
f5:d2:e8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:45:51 2025 by rpki-client