Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: QUYt9UpHFc5mSUH93JiRwyeWC2YeiMHQUqoHysszE0c=
Subject key identifier: 92:34:EB:40:CD:4C:66:E4:93:52:E4:F6:E4:40:5C:BF:A2:63:AA:01
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 01987751060DC0F0DBDC052E4C672D4C05B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: BF
Signing time: Mon 04 Aug 2025 23:00:55 +0000
Manifest this update: Mon 04 Aug 2025 23:00:55 +0000
Manifest next update: Tue 05 Aug 2025 23:00:55 +0000
Files and hashes: 1: 9PkegdPcOVaHYch8whuUGhkGOzc.roa (hash: nTpt8kDLjSLrMGR0C/m0j9Ftj77WGzhvL7KxFH3u7Z8=)
2: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: GzQtA8xk9ykIzGRa0Y9dkcs5X8ZwEsYQf9dD7S1OAww=)
3: mo525hECNfAEonllRKyyBVCuVuY.roa (hash: a5b0LUZ9waSvhihXnwQQ6mCuKjGwIDzPkvhonuJ3oDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:51:06:0d:c0:f0:db:dc:05:2e:4c:67:2d:4c:05:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Aug 4 23:00:55 2025 GMT
Not After : Aug 5 23:00:55 2025 GMT
Subject: CN=9234eb40cd4c66e49352e4f6e4405cbfa263aa01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:3b:2a:56:58:49:2a:ee:61:f6:aa:5d:1a:
8b:aa:f1:3c:e2:ad:f8:fc:16:5e:c2:a6:0d:16:1b:
a5:5f:05:10:38:d8:98:4f:48:10:1f:ec:44:f6:4d:
4f:64:0c:7e:da:02:16:e7:ff:02:7a:6e:da:ec:21:
06:f3:78:95:8f:8f:40:78:fb:bd:35:d5:e8:e5:a2:
da:64:23:e5:ed:39:2d:6d:df:94:bc:c0:f4:d2:ad:
64:70:cd:11:a5:1a:fc:99:0d:b9:f6:c3:f8:97:d4:
e5:58:a3:5e:20:a7:a0:0f:46:e4:2e:ff:af:01:10:
7b:41:89:c4:8c:4f:8f:27:b3:3c:8d:7f:4e:42:d4:
87:f0:15:56:0c:31:03:85:21:eb:65:62:8d:b3:3b:
5e:54:18:5b:34:05:c3:a8:81:4f:98:96:09:8a:f5:
30:1d:1d:b1:8d:71:3e:8c:dd:09:50:1f:55:22:d7:
0e:7b:fa:63:73:0f:09:54:15:d8:ac:66:2e:85:df:
d8:0a:2e:7d:66:7e:fa:d6:fd:e2:7e:d5:81:cb:6c:
a5:29:54:13:b0:05:7f:2e:e4:b5:49:e3:d3:e5:8a:
13:77:4e:85:8d:42:c9:d7:08:fc:80:d1:a8:09:7e:
13:7a:b8:0a:01:1f:e8:fe:3d:76:09:b5:d2:ab:83:
1c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:34:EB:40:CD:4C:66:E4:93:52:E4:F6:E4:40:5C:BF:A2:63:AA:01
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:09:74:f9:50:af:31:ac:04:37:9c:d3:7f:88:6e:d3:3f:05:
2c:ce:41:ff:5c:05:bf:ff:9d:a4:51:5f:e8:01:24:3c:c2:42:
3d:de:b5:67:aa:f4:7d:c1:7f:d1:64:5c:d7:ea:87:e0:9d:fa:
0e:3a:01:55:d6:73:71:99:b7:dd:ee:86:fd:35:88:34:33:be:
26:90:b8:a3:b7:39:d0:90:3a:ba:a6:81:bb:81:3c:dc:14:80:
22:be:86:cd:99:a9:bc:2b:f6:5d:8e:85:e9:ec:46:7e:f2:57:
65:61:1d:f9:f1:b2:71:e4:2a:dc:58:c7:74:0a:e4:e5:ea:20:
87:a0:f5:13:04:0f:1c:75:f1:02:ec:e9:30:d8:32:1d:42:53:
c4:cb:fe:55:33:70:ac:90:45:98:59:a0:64:c6:9c:0c:f1:c9:
d6:27:a6:c2:ff:bd:8e:03:3a:f9:99:6c:98:67:cd:c4:69:96:
07:ff:71:ea:95:49:5d:3f:c3:26:6a:32:81:62:4a:58:66:2e:
a2:ca:99:de:43:f8:46:3f:51:b8:8b:a4:38:8d:d8:04:93:93:
0f:0d:98:ab:1a:3f:61:13:c1:01:66:c8:dd:c3:56:51:c5:e0:
aa:42:e5:ff:3d:b8:36:3f:16:2f:38:06:fe:25:a7:63:51:4a:
e1:74:b5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:25:41 2025 by rpki-client