Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
File: GUKBeimILUM78buOvFmy_yVugD8.mft (raw, json)
Hash identifier: Jd9FEB9VDNzPUtp2MOtz8RkBOuKDYHbUZG5gOCk7zsg=
Subject key identifier: CF:1B:D1:47:4F:22:25:B0:69:07:59:A8:C9:07:BD:D5:43:6A:43:6E
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Certificate issuer: /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial: 019A006C43F58F4ECE495ABEDC30C7391E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
Manifest number: 0C1C
Signing time: Mon 20 Oct 2025 07:01:26 +0000
Manifest this update: Mon 20 Oct 2025 07:01:26 +0000
Manifest next update: Tue 21 Oct 2025 07:01:26 +0000
Files and hashes: 1: GUKBeimILUM78buOvFmy_yVugD8.crl (hash: P7t9r0hbP5JLWNKVOz6yNi+BZ8e3Yp8A8QhaM23gzPc=)
2: GcHslNVvtLMqacjR3pPEHzo6qdY.roa (hash: 2lxXQx2L70uMfwd/jJMu4ZB84tprJ69cJOFL2QzMBdQ=)
3: Jbshh5-Y5wAYjNhv_trKB-ylliE.roa (hash: 5xQE2hOATpkYgRTE2YQwm3+KGl3F12kDMLW5EC6YqT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:43:f5:8f:4e:ce:49:5a:be:dc:30:c7:39:1e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Validity
Not Before: Oct 20 07:01:26 2025 GMT
Not After : Oct 21 07:01:26 2025 GMT
Subject: CN=cf1bd1474f2225b0690759a8c907bdd5436a436e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9a:4e:f6:cf:32:66:c3:1a:dc:cb:68:23:cb:
eb:04:c9:a1:3e:b7:d2:69:65:36:83:7c:42:f9:a8:
c0:a9:f0:3a:6a:58:c0:6c:16:4a:1d:26:2c:ea:95:
5d:b2:05:56:22:6f:e9:53:2c:91:dd:e3:b8:88:ee:
34:aa:b5:ca:7f:16:e0:ea:15:4c:50:a4:f1:34:c5:
8b:df:67:f0:ec:5b:b5:66:b1:fd:32:7d:ea:50:f5:
0d:33:5a:df:9c:ce:4c:34:80:fd:b6:79:b7:dc:38:
97:77:3b:c0:bc:3a:a6:89:2a:52:a7:02:13:cd:e7:
b8:9f:03:c8:9c:76:cf:c2:b9:67:64:0c:c2:80:fa:
e3:94:08:13:06:cf:be:63:4d:50:c8:48:8b:d4:93:
1b:b3:c2:d8:8c:65:10:ba:cb:d3:08:4b:47:f5:b6:
31:f4:53:d3:8a:aa:36:3f:5c:f8:13:ba:74:90:bb:
67:81:fe:1d:83:43:13:98:52:fd:9a:75:50:e5:80:
8e:07:50:ef:2e:72:18:77:5c:8f:82:66:83:3a:17:
cf:4f:51:0e:09:5f:0d:fe:50:6d:ef:ac:5f:1a:5d:
94:0e:66:69:07:c8:fb:20:e3:12:25:94:26:da:94:
43:9b:99:16:a7:29:df:a0:06:e6:05:c3:cd:1c:61:
7d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1B:D1:47:4F:22:25:B0:69:07:59:A8:C9:07:BD:D5:43:6A:43:6E
X509v3 Authority Key Identifier:
keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bc:ab:e6:b1:ae:e0:6c:e6:ea:d9:7b:c0:03:dd:63:87:a6:
f8:87:62:0a:1a:23:7a:d3:34:00:a3:2e:9b:9c:04:27:31:79:
29:8f:35:66:53:6f:0f:ab:91:8c:df:03:eb:f7:55:e6:3f:91:
32:56:7d:95:5b:6e:23:a4:dc:c7:f8:34:5d:38:3e:7a:08:3e:
1a:7f:e3:64:0a:12:57:3a:03:f3:ac:1c:7d:32:cb:c2:26:37:
8b:15:1a:d9:eb:a1:a0:5c:52:b2:8f:62:f4:2e:94:25:7d:63:
4d:d6:31:16:0f:c6:e1:4e:48:fb:f5:94:2c:44:29:79:7b:2e:
bc:c5:a8:b4:31:62:34:d5:2c:34:78:b2:66:a7:f7:25:6d:21:
11:df:67:0c:2c:8d:5e:49:74:d7:f9:5b:9d:d6:e3:19:ab:df:
c5:dc:d5:52:99:eb:0b:39:fc:e2:ea:63:90:33:00:68:cc:98:
74:85:98:c0:35:b3:8a:df:56:97:be:e8:67:b9:93:06:bf:40:
68:dc:c6:7f:fe:1f:24:b8:b0:dc:bf:c2:cb:48:78:e6:07:4e:
7c:13:70:d6:27:d1:be:f7:1a:11:a2:52:f5:c5:44:f2:0c:d4:
2f:ec:1a:db:e8:6c:ec:a9:6a:66:e8:a6:f4:eb:73:08:ec:9c:
2c:99:35:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:34 2025 by rpki-client