Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
File: GUoR_la49HpaFBUDK3f_n7CC4D8.mft (raw, json)
Hash identifier: 3XMuCLnLMxUwsnxZ+ZnOQ6V91iCehu8DTLZkk2bCZ+U=
Subject key identifier: 42:DD:04:B3:8F:11:9B:33:F3:81:BA:89:1F:CB:B6:C0:AC:97:80:02
Authority key identifier: 19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F
Certificate issuer: /CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
Certificate serial: 0199FBEAEAD30030564E2525C7ADACD30A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
Manifest number: 11A0
Signing time: Sun 19 Oct 2025 10:01:40 +0000
Manifest this update: Sun 19 Oct 2025 10:01:40 +0000
Manifest next update: Mon 20 Oct 2025 10:01:40 +0000
Files and hashes: 1: GUoR_la49HpaFBUDK3f_n7CC4D8.crl (hash: neKboRoqEq6sA0S8083so4LRy6WWSKmZwT7vJV3QD6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ea:d3:00:30:56:4e:25:25:c7:ad:ac:d3:0a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
Validity
Not Before: Oct 19 10:01:40 2025 GMT
Not After : Oct 20 10:01:40 2025 GMT
Subject: CN=42dd04b38f119b33f381ba891fcbb6c0ac978002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:d4:3e:44:5f:c4:ad:78:19:a6:70:5b:eb:
13:1d:37:5b:61:28:58:f9:b5:d9:4a:d1:42:a9:05:
19:22:a8:a9:e2:98:57:0b:04:1c:06:71:8e:4e:21:
25:2b:b4:66:e3:ec:8a:20:11:8b:0a:f3:8e:71:48:
a5:37:0d:71:9a:fb:14:7e:01:5f:58:9d:9a:aa:2c:
37:28:84:c0:a6:24:96:3e:4d:09:a8:3d:f0:ea:b4:
fd:32:52:08:33:1d:07:f5:f1:f8:08:6d:34:7d:4d:
2a:2f:94:e1:82:bf:42:16:fe:b0:46:e6:65:de:77:
1e:35:7b:05:87:42:a5:81:2c:0e:ed:70:95:d3:d5:
d7:79:a5:6e:35:36:8e:e5:1e:31:40:50:03:26:a1:
d0:44:27:3a:e1:29:fe:5e:a4:4c:82:88:45:bb:9c:
2e:57:e5:ce:4f:00:7c:d7:f6:de:6d:5e:ab:4a:0b:
de:96:20:59:49:f8:d3:3f:66:70:55:67:85:36:ef:
bd:10:2f:27:90:08:65:1e:d4:7f:a2:19:d7:67:65:
e5:c6:21:7c:7f:2d:2c:a9:73:91:6f:74:61:08:f6:
36:70:b4:5e:b2:f2:fc:c0:93:8d:08:07:da:88:37:
a4:82:50:89:68:a8:53:4c:ff:98:bc:c7:b5:7e:bd:
09:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DD:04:B3:8F:11:9B:33:F3:81:BA:89:1F:CB:B6:C0:AC:97:80:02
X509v3 Authority Key Identifier:
keyid:19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:44:f5:f9:54:72:c8:11:95:95:66:99:ae:bd:49:a2:f3:c1:
fb:01:ca:27:2b:d0:0d:9e:8d:e0:25:ca:98:de:8f:28:ea:d5:
14:b0:c2:a3:86:dd:86:2b:71:23:f1:3b:cd:20:57:fa:16:e3:
45:96:20:ed:da:32:89:26:bd:f1:32:99:6e:0c:b7:99:02:22:
31:80:29:a8:06:de:58:fd:1a:bb:77:94:4d:10:2d:c7:af:7e:
9b:3d:03:a3:6a:f7:90:41:4a:f0:cf:3b:19:87:5c:48:30:c1:
36:37:b0:32:5a:25:bb:ce:87:3d:f5:16:22:56:01:3f:3b:1a:
d9:0a:dc:b0:a1:c7:ff:e0:f0:36:8c:e3:96:b4:73:3c:99:ce:
7f:9d:29:14:13:48:3c:81:b6:c6:00:22:c2:b3:65:ad:97:e8:
16:a2:d7:ba:9e:7b:ac:e1:55:57:84:1e:89:a2:bf:c3:32:97:
da:b5:2a:5a:6b:32:e3:15:9a:4f:75:ef:11:9a:12:85:f6:2a:
c2:e5:29:cc:54:16:f1:88:70:94:76:2c:0e:9c:fc:a4:f6:79:
b0:b9:ba:40:b3:04:69:f2:2f:b2:42:bc:6c:6c:27:ba:f6:e6:
47:6c:44:95:e5:b2:46:25:cd:8b:49:f3:8b:b0:e9:b5:e1:14:
a6:b1:67:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:20 2025 by rpki-client