Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: bw53gQsRMOtYqO41HzCmC42pBJfbpnJFguYa2iOf3/A=
Subject key identifier: 0A:7D:45:6F:0F:24:8B:70:52:07:9E:C7:44:E8:37:68:3D:24:73:8A
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 019A52636966956A4C799520768416F012FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 01B5
Signing time: Wed 05 Nov 2025 05:00:38 +0000
Manifest this update: Wed 05 Nov 2025 05:00:38 +0000
Manifest next update: Thu 06 Nov 2025 05:00:38 +0000
Files and hashes: 1: 9PkegdPcOVaHYch8whuUGhkGOzc.roa (hash: nTpt8kDLjSLrMGR0C/m0j9Ftj77WGzhvL7KxFH3u7Z8=)
2: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: fs46JQJldRAQm9jd4dBFfuyzj3S2V27GX1MGsUKIN7w=)
3: mo525hECNfAEonllRKyyBVCuVuY.roa (hash: a5b0LUZ9waSvhihXnwQQ6mCuKjGwIDzPkvhonuJ3oDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:69:66:95:6a:4c:79:95:20:76:84:16:f0:12:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Nov 5 05:00:38 2025 GMT
Not After : Nov 6 05:00:38 2025 GMT
Subject: CN=0a7d456f0f248b7052079ec744e837683d24738a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:b5:99:53:a6:b6:0b:8b:21:50:1e:19:b9:
58:1d:4e:2f:52:a4:a9:cd:b1:20:e1:ae:be:5e:57:
f0:bb:68:51:6b:af:01:83:b6:88:0c:d1:21:9b:43:
2e:26:c2:1a:0a:0a:f9:d6:64:a8:5a:5e:d3:b2:6f:
98:18:b3:78:31:4e:5e:c5:3c:82:52:35:29:4d:9c:
68:d7:b6:48:aa:57:72:ab:54:60:2c:83:8b:38:f1:
a8:69:66:e6:74:0b:c8:b1:f8:01:7d:69:2e:8d:1d:
84:ce:04:5a:89:68:4d:d4:de:f8:07:76:f0:c8:77:
e3:6c:9f:e6:9d:09:52:d2:c3:ad:29:8e:48:1e:be:
c8:32:32:d4:a0:b4:9e:8c:eb:e2:1e:3d:db:ab:f5:
d4:79:6a:9c:8c:55:35:cc:7a:0d:7e:62:89:25:0d:
87:5a:55:dc:2f:f0:db:d8:21:16:c7:f5:1f:ba:89:
d9:11:b8:d5:ab:1b:5e:99:90:3f:73:df:24:0c:36:
fa:ed:a2:8a:9f:70:8c:b8:61:fa:f3:a7:0a:ff:3f:
9f:7c:43:25:cc:2b:d5:17:d8:b8:9a:0b:bb:cc:5f:
d2:85:4b:20:ca:ec:db:59:e5:78:d0:58:6f:07:c9:
e8:26:cf:f5:3c:ef:64:b3:ee:e2:34:e0:a5:95:c0:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7D:45:6F:0F:24:8B:70:52:07:9E:C7:44:E8:37:68:3D:24:73:8A
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cc:7f:40:52:9a:fd:1a:ed:97:19:58:b7:c7:3e:b1:a8:26:
d1:d7:a8:d3:17:73:ab:e3:1e:2f:8b:3b:f3:31:72:47:0a:96:
b1:2a:43:3c:0e:85:bc:6d:49:3e:a3:d5:63:9f:6b:dc:b4:a1:
a4:a0:cb:78:34:37:3f:da:9c:82:64:c5:57:e8:03:9b:8b:3d:
8c:e6:94:50:8c:7f:8a:c6:05:7d:90:e8:66:8e:9d:93:8c:85:
07:b5:6a:e1:2a:f2:22:23:8e:c3:69:69:00:37:2e:65:ee:6d:
d5:ec:1e:33:3a:4b:e7:ba:db:fd:ae:24:4e:2a:a9:1b:24:ec:
e7:1e:73:a0:e3:48:0f:8b:ff:c6:19:7e:7b:b8:fa:a9:e6:78:
47:78:26:55:3b:d5:6d:57:a7:22:a5:f9:7b:dd:8f:3e:e2:44:
bd:f2:04:03:1c:25:50:8e:47:36:6d:a4:7e:57:e8:3f:f6:ca:
63:3c:7a:2c:30:25:a9:7c:86:3a:b7:2c:c0:6c:09:ee:0d:72:
70:0d:9b:b7:03:02:44:f5:3a:41:30:b6:c2:49:ff:af:e4:31:
b5:68:ea:7b:43:59:f5:de:34:1a:e3:6c:89:29:c9:a0:02:b4:
87:e6:51:e0:39:81:2a:38:27:e5:12:eb:92:64:48:04:f4:f7:
a9:cb:35:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:25:14 2025 by rpki-client