Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
File: GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft (raw, json)
Hash identifier: cf+vhFVxof131wGGR86Ti0cTCv/OttYgt+e/5Akz1os=
Subject key identifier: 0F:02:64:09:4C:05:46:B2:33:8A:40:93:8F:C1:03:1B:F7:1C:AC:EC
Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Certificate issuer: /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Certificate serial: 0198741944401CDF83F5981DAF62A76FF0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
Manifest number: 1444
Signing time: Mon 04 Aug 2025 08:01:09 +0000
Manifest this update: Mon 04 Aug 2025 08:01:09 +0000
Manifest next update: Tue 05 Aug 2025 08:01:09 +0000
Files and hashes: 1: GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl (hash: KBIW6esZPcDmc704JK0c2qy3PBq3t5YjSU1tfNivY4g=)
2: eUeAvm73-2L5UqqKdbnJ3M6g16M.roa (hash: Y9d2L+uaXCF5y4wJiUN6TycT1kpDQNqljoU9Xps8N/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:44:40:1c:df:83:f5:98:1d:af:62:a7:6f:f0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Validity
Not Before: Aug 4 08:01:09 2025 GMT
Not After : Aug 5 08:01:09 2025 GMT
Subject: CN=0f0264094c0546b2338a40938fc1031bf71cacec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:2a:cb:8c:fd:48:8d:81:14:7e:c1:0a:07:
15:0e:77:dd:eb:8b:a0:1a:b7:2e:44:f5:67:94:ad:
c1:d1:47:5d:31:bf:28:7e:b6:7e:a2:44:f7:76:ff:
93:0a:e9:f4:a8:de:45:65:6a:0f:4b:4b:c2:3a:cc:
12:60:15:6d:db:63:90:fe:cd:14:37:4d:f2:72:2b:
14:da:0b:47:61:68:20:ea:95:b4:fc:5c:6e:4d:63:
53:a2:d6:75:63:c9:71:a4:df:ec:5b:99:89:3c:21:
4b:01:c2:6c:07:17:01:57:8d:c5:2a:c9:db:bb:60:
05:e9:fe:9b:a2:ea:7d:9a:39:b0:fd:97:74:9d:d9:
70:ae:3b:ab:7f:df:e9:5e:c2:81:61:46:ae:8a:d0:
46:c2:02:8e:b2:73:8f:47:4b:6e:74:91:e3:a9:73:
b6:1b:2a:8e:3d:2c:d4:9e:71:46:4e:30:6d:dc:49:
f7:a1:db:8a:e4:15:cf:f5:b8:e8:a4:6c:01:7a:61:
24:22:fb:f8:7e:6f:be:20:f8:db:e9:00:90:3b:42:
ac:a0:b0:f1:6b:22:02:a7:33:0d:69:8c:0e:aa:bd:
94:98:f7:08:08:41:6a:58:49:05:22:66:da:33:e5:
83:e0:38:34:cb:86:03:af:c3:c8:79:92:fb:ad:7e:
c2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:02:64:09:4C:05:46:B2:33:8A:40:93:8F:C1:03:1B:F7:1C:AC:EC
X509v3 Authority Key Identifier:
keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:40:80:b9:13:54:b1:1c:1b:2a:16:58:ea:58:cf:4e:f0:c9:
6f:49:c4:18:09:55:10:d1:7f:6a:46:40:7d:a0:85:23:94:71:
ad:ce:c9:4b:13:de:b0:20:60:a6:f5:12:11:84:2a:ce:fa:25:
72:05:61:bd:71:fd:02:4c:c3:c1:9a:04:e5:0c:cd:6f:c4:b7:
51:24:77:0a:0b:ff:9a:93:8d:4b:8d:02:f3:e5:0e:e1:d5:f2:
df:8f:56:c2:c3:72:85:20:54:b1:bb:52:ae:c4:58:4a:cd:bf:
0c:fc:be:4e:44:59:7b:48:98:fc:0e:1e:f1:74:fc:71:4a:27:
d3:c2:6d:50:96:a0:66:34:37:d9:07:e2:48:86:65:e3:3b:4c:
b8:1b:d6:db:79:3c:62:b6:e1:65:79:cc:26:df:72:9f:71:50:
1a:d3:28:32:d3:38:f8:7b:c3:3b:fb:08:d0:07:a9:ad:37:76:
e5:fe:90:61:5a:67:57:62:fa:42:11:63:14:16:51:7f:56:42:
17:42:46:8b:78:11:74:0c:8b:63:54:49:08:fe:58:5f:90:8d:
a8:0f:80:5c:62:fc:54:94:39:4a:12:92:7a:26:66:9c:fd:c5:
88:ef:86:55:19:56:0e:a9:8c:c0:56:f5:4e:4a:62:47:8d:90:
f1:e3:03:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:26 2025 by rpki-client