Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
File: GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft (raw, json)
Hash identifier: 8k4bENscHQvIlFqbcJUDLpKfUriAsU9ZqNIiRq8acPU=
Subject key identifier: 50:C6:96:EE:F6:85:EC:09:DD:93:E0:B6:03:5B:68:46:62:D0:FB:7A
Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Certificate issuer: /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Certificate serial: 019A4EF496EC18AEFF65B262A0C87E2A1C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
Manifest number: 153A
Signing time: Tue 04 Nov 2025 13:00:43 +0000
Manifest this update: Tue 04 Nov 2025 13:00:43 +0000
Manifest next update: Wed 05 Nov 2025 13:00:43 +0000
Files and hashes: 1: GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl (hash: aVbLpgwT32TprpDTx70KS8zoJdYNsdU+2u06a75JYsw=)
2: eUeAvm73-2L5UqqKdbnJ3M6g16M.roa (hash: Y9d2L+uaXCF5y4wJiUN6TycT1kpDQNqljoU9Xps8N/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:96:ec:18:ae:ff:65:b2:62:a0:c8:7e:2a:1c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Validity
Not Before: Nov 4 13:00:43 2025 GMT
Not After : Nov 5 13:00:43 2025 GMT
Subject: CN=50c696eef685ec09dd93e0b6035b684662d0fb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:95:14:37:90:7c:ab:8f:90:8f:29:22:69:e1:
52:de:d7:62:a6:61:1f:85:71:8a:74:94:2d:86:00:
37:1d:0b:f4:9e:16:aa:cb:34:a5:6c:2a:66:53:1a:
c8:db:63:b9:a0:1c:83:d1:67:d6:0d:09:e1:43:38:
f2:a4:49:0a:c9:5e:4e:78:a4:ab:75:27:4f:d2:67:
36:a2:6b:fb:c6:1e:8b:db:1f:96:01:61:98:7e:1e:
65:1a:af:3a:45:ce:5d:28:35:27:30:92:f4:60:bc:
d8:df:75:59:a7:13:66:08:1a:ea:7f:25:8f:8a:3c:
2f:20:d3:9d:84:df:47:cf:1c:4c:83:5f:33:a3:1a:
91:8c:fd:04:16:ba:72:5f:54:4d:e9:3c:4a:96:8c:
93:ff:3c:43:2b:b7:ee:e2:7c:77:cc:d2:45:13:cd:
be:68:71:e2:fc:67:42:82:00:76:92:61:90:bf:7d:
ea:b1:0b:3d:72:08:d6:b9:65:62:78:d9:38:01:1b:
8b:d4:f2:c1:7a:c7:fc:a4:58:b4:fc:a6:df:4c:0e:
22:09:61:5f:56:27:40:75:1b:c4:ed:e7:62:d8:8b:
6a:33:6c:e6:f2:02:df:e5:ba:ac:de:ad:fb:3b:8b:
92:c7:48:ac:7c:be:4b:c5:25:69:ef:02:ed:70:46:
2a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C6:96:EE:F6:85:EC:09:DD:93:E0:B6:03:5B:68:46:62:D0:FB:7A
X509v3 Authority Key Identifier:
keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:15:a3:7d:6a:ee:f1:3a:86:df:85:c4:31:01:1d:a0:0e:30:
21:3b:a1:03:7e:20:dc:16:77:94:e3:3f:13:c9:9d:c3:8d:95:
a3:ae:62:e8:fa:3e:4e:6c:8a:8b:50:ee:c7:62:76:60:2d:44:
ac:83:c9:bd:10:48:73:28:30:33:50:cd:7d:ec:14:5f:6a:f4:
fc:84:3e:bb:11:a1:76:78:53:84:e6:b1:db:f6:e2:9c:a4:d5:
cc:8e:a6:aa:5f:48:56:2c:d1:17:c5:11:8e:b4:fd:7f:40:40:
1f:af:2b:34:a0:fe:98:1a:8b:cd:15:a3:a1:a5:e2:aa:15:d8:
63:b7:7f:a8:7d:5d:e9:e2:27:6d:0c:7d:35:d3:6f:50:90:b3:
ff:ca:e1:fe:e1:d9:9c:7b:a1:81:e7:96:bb:20:12:92:c6:b8:
16:d3:f7:cd:d1:a6:16:b3:d4:03:0d:15:8f:70:0f:8b:57:ed:
06:da:3b:bc:a5:74:74:60:19:cf:c2:7b:fb:b6:13:c1:64:7e:
3f:37:55:f6:22:85:9a:42:9f:dc:2f:91:23:8b:86:71:90:3d:
6c:1c:e1:9a:96:03:b6:13:01:c9:d9:ed:b8:89:7d:b7:ff:90:
13:a6:6d:81:74:0d:e5:52:9e:46:93:5b:fa:ee:c6:7a:3f:09:
8d:8f:94:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9JbsGK7/ZbJioMh+KhxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZTFjN2FhMGIzOTVlMDYxMmVjNDIzZmUwN2ZiMDM4OWFh
YTQwMDMwHhcNMjUxMTA0MTMwMDQzWhcNMjUxMTA1MTMwMDQzWjAzMTEwLwYDVQQD
Eyg1MGM2OTZlZWY2ODVlYzA5ZGQ5M2UwYjYwMzViNjg0NjYyZDBmYjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pUUN5B8q4+QjykiaeFS3tdipmEf
hXGKdJQthgA3HQv0nhaqyzSlbCpmUxrI22O5oByD0WfWDQnhQzjypEkKyV5OeKSr
dSdP0mc2omv7xh6L2x+WAWGYfh5lGq86Rc5dKDUnMJL0YLzY33VZpxNmCBrqfyWP
ijwvINOdhN9HzxxMg18zoxqRjP0EFrpyX1RN6TxKloyT/zxDK7fu4nx3zNJFE82+
aHHi/GdCggB2kmGQv33qsQs9cgjWuWVieNk4ARuL1PLBesf8pFi0/KbfTA4iCWFf
VidAdRvE7edi2ItqM2zm8gLf5bqs3q37O4uSx0isfL5LxSVp7wLtcEYq8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDGlu72hewJ3ZPgtgNbaEZi0Pt6MB8GA1UdIwQY
MBaAFBrhx6oLOV4GEuxCP+B/sDiaqkADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3VISHFnczVYZ1lTN0VJXzRILXdPSnFxUUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hYmU2MjgtZmNlNy00NDdlLTg1M2Ut
OTRmZGM5ZmJkY2FjLzEvR3VISHFnczVYZ1lTN0VJXzRILXdPSnFxUUFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9hYmU2MjgtZmNlNy00NDdlLTg1M2UtOTRmZGM5ZmJkY2Fj
LzEvR3VISHFnczVYZ1lTN0VJXzRILXdPSnFxUUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxWjfWru
8TqG34XEMQEdoA4wITuhA34g3BZ3lOM/E8mdw42Vo65i6Po+TmyKi1Dux2J2YC1E
rIPJvRBIcygwM1DNfewUX2r0/IQ+uxGhdnhThOax2/binKTVzI6mql9IVizRF8UR
jrT9f0BAH68rNKD+mBqLzRWjoaXiqhXYY7d/qH1d6eInbQx9NdNvUJCz/8rh/uHZ
nHuhgeeWuyASksa4FtP3zdGmFrPUAw0Vj3APi1ftBto7vKV0dGAZz8J7+7YTwWR+
PzdV9iKFmkKf3C+RI4uGcZA9bBzhmpYDthMBydntuIl9t/+QE6ZtgXQN5VKeRpNb
+u7Gej8JjY+UUw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:16 2025 by rpki-client