Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
File: GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json)
Hash identifier: Lqie8raNMYkjDCEZwUMSKl+gcrxZkVEtqnEHzf6it6A=
Subject key identifier: A6:3D:2E:E4:99:5C:FF:40:FF:90:18:1F:77:8E:02:E1:5B:FD:77:19
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial: 019A52D23784951DA7ACD88DAF74BE0EE02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
Manifest number: 088D
Signing time: Wed 05 Nov 2025 07:01:39 +0000
Manifest this update: Wed 05 Nov 2025 07:01:39 +0000
Manifest next update: Thu 06 Nov 2025 07:01:39 +0000
Files and hashes: 1: 57MdEJb-nBShQLLCWdO0TGMwrmU.roa (hash: AI0OebgvFdQLqYYDJFtpVuV594/Dy/OB9klpHE+tsqU=)
2: B7Qapo5g1oDmbBkmOp4VI6hXM-Q.roa (hash: QPX22bu8lrGVz4DhZjKtOs7g7eex/hilxfsr4fUW4YM=)
3: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: 7MaBmglGmte+v5Ejgma2i7lzG4vzu3OX7JIdGiYfGTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:37:84:95:1d:a7:ac:d8:8d:af:74:be:0e:e0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Validity
Not Before: Nov 5 07:01:39 2025 GMT
Not After : Nov 6 07:01:39 2025 GMT
Subject: CN=a63d2ee4995cff40ff90181f778e02e15bfd7719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:54:c8:0b:34:86:76:51:fe:45:8d:ac:7d:
9f:27:0a:db:7c:fd:5f:c0:b2:b0:9f:2e:f1:b4:c1:
1e:10:2c:29:01:a1:ef:59:de:31:41:27:71:7f:2d:
f5:e8:28:7c:5b:7e:24:f4:1f:da:cd:93:9d:1f:23:
d5:9b:e3:94:6f:0c:97:b3:aa:20:34:94:dd:6c:73:
96:15:ab:9a:56:a4:ea:fc:d0:cf:e0:f1:02:54:56:
da:01:23:48:13:44:b4:85:71:f7:8c:db:f6:b4:6f:
bd:93:56:92:43:db:00:a5:3b:b7:37:0c:fb:a3:41:
8c:34:20:23:db:7e:d3:e5:bd:57:07:2b:d3:43:82:
ac:5d:a3:46:ce:01:be:c7:0d:d8:f9:70:91:80:7b:
68:c3:25:05:b4:a7:af:a1:b9:25:2a:40:ac:93:b7:
52:e3:f3:39:dd:ca:fd:83:13:8e:3a:53:95:c3:9e:
e1:c8:c3:95:cc:f5:70:ae:c1:ca:05:d2:44:47:80:
55:78:e1:4b:f6:50:ed:08:7d:9e:2e:f7:f5:65:3c:
f4:50:b8:2b:45:70:ec:f2:11:4a:22:2a:f9:44:bd:
4f:17:3c:93:b8:59:5c:ae:97:de:60:43:50:c5:aa:
90:1e:0e:52:85:7e:e6:35:86:34:38:74:e6:31:5e:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3D:2E:E4:99:5C:FF:40:FF:90:18:1F:77:8E:02:E1:5B:FD:77:19
X509v3 Authority Key Identifier:
keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:69:e1:fe:14:6a:20:77:3a:5b:04:b4:39:ed:68:9d:75:b2:
bb:c3:f0:a6:10:b5:41:47:40:c2:7d:ff:bc:b0:54:2e:9f:48:
69:95:d8:e5:2e:7a:6c:65:1a:c0:4c:bb:fa:76:5b:45:8c:fb:
92:62:39:f4:fc:4c:dd:de:e6:6d:e9:b8:9c:e5:f9:90:3f:63:
40:b9:28:ce:e1:8e:15:7b:6f:d0:31:37:a1:19:ad:8b:df:48:
f8:8a:6d:6b:c1:88:3b:b3:72:44:e9:d8:6d:b4:1a:ac:af:24:
29:39:a2:51:5e:84:8e:ad:51:a5:3f:c3:78:5d:d5:ec:15:de:
70:c1:c2:30:cd:b0:77:c5:86:5e:f0:27:09:b0:53:ab:75:74:
14:f3:5c:ce:8f:0c:bb:a9:de:48:1c:88:4b:73:a3:2d:b9:cb:
ce:bf:0f:da:cd:97:c5:e1:77:8f:e4:49:a4:2d:8b:ed:5a:a8:
43:5b:a2:47:22:0c:a1:01:2b:20:c2:06:3f:5b:8d:c4:8e:ca:
48:dc:22:f8:9c:65:75:4c:8e:66:3f:4f:fc:31:97:1f:00:a3:
72:c3:c8:ee:1d:f3:a6:47:50:ea:db:66:cc:72:e6:e0:32:21:
03:46:1f:da:c4:c8:09:00:02:4b:48:7c:f5:41:b4:95:6d:3f:
62:4c:b7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:13:31 2025 by rpki-client