Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
File: GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft (raw, json)
Hash identifier: ZDJjXfMWwF6E/JpCQXzLtlBgCE+AocZG596fT3BDxTU=
Subject key identifier: 4E:C9:1D:2F:38:84:46:2A:79:41:FC:2D:DB:AC:52:2E:C0:94:D4:AE
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Certificate issuer: /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial: 0199FCFD8A8C22753B2AE85ABC8D1F0BA823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
Manifest number: 1259
Signing time: Sun 19 Oct 2025 15:01:38 +0000
Manifest this update: Sun 19 Oct 2025 15:01:38 +0000
Manifest next update: Mon 20 Oct 2025 15:01:38 +0000
Files and hashes: 1: GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl (hash: jagZtCth98bP04BINwUzw6mIWopx1ADXDfvtK2kOvA8=)
2: uIeYeZznF-O1grN0M5g3SmcN33U.roa (hash: y5O+zvgRhkPeGKTBn9Qn4EVE0s2vlCMineSuEirJq9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:8a:8c:22:75:3b:2a:e8:5a:bc:8d:1f:0b:a8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
Validity
Not Before: Oct 19 15:01:38 2025 GMT
Not After : Oct 20 15:01:38 2025 GMT
Subject: CN=4ec91d2f3884462a7941fc2ddbac522ec094d4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:69:0f:d1:7d:6f:07:e4:8c:95:9d:54:17:
36:01:09:96:d4:3a:ce:8b:c1:a3:9e:c9:ca:76:02:
a1:92:a9:ff:c4:fe:8e:4d:63:4f:61:a8:60:4c:35:
44:5a:f9:36:56:6d:45:b0:25:b4:f3:85:93:fe:f7:
1f:c7:c5:c6:e0:4e:01:6d:4a:a5:c4:5e:38:f4:71:
30:a1:fc:cf:e0:9e:32:ef:f8:13:f0:6a:99:6e:98:
9a:9b:8e:ca:42:63:16:37:bd:06:f5:c6:e1:25:40:
e2:fc:7b:c5:d3:d6:aa:e3:b7:0d:ee:82:3c:9f:cc:
08:32:ee:50:2c:64:60:25:1a:c2:f5:51:42:3d:31:
19:98:d8:db:33:7c:c6:89:15:91:0e:09:b3:93:7b:
76:76:20:ac:0d:7e:a0:20:92:af:24:b7:85:d1:37:
ad:d7:00:f8:cd:d0:fd:3e:7d:62:73:38:67:d3:d3:
ee:d0:79:9c:a2:8e:f8:d3:2a:6d:b9:00:98:40:20:
e8:60:5d:d1:e4:28:3d:f0:cc:be:b6:45:5c:15:a3:
22:de:cd:fa:00:e0:c7:10:4e:f2:ea:35:51:df:c6:
81:af:b1:46:2e:30:20:f1:1c:0d:09:85:d5:22:db:
2d:c2:a0:a1:a4:25:60:0a:43:c5:e5:84:4b:30:d6:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C9:1D:2F:38:84:46:2A:79:41:FC:2D:DB:AC:52:2E:C0:94:D4:AE
X509v3 Authority Key Identifier:
keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:dd:88:62:0c:32:c0:5f:00:e5:35:27:26:a3:28:3a:9b:66:
92:03:34:cf:5c:06:91:d7:fc:67:51:c8:f1:93:8d:bc:c4:fc:
11:99:81:0c:30:75:36:68:4d:b9:25:91:5a:cd:54:c3:a2:12:
0d:ab:aa:f0:f3:70:f3:49:0d:84:76:a9:43:64:97:29:99:35:
92:03:4f:44:b4:58:48:31:fd:c2:51:87:ad:2f:50:8a:2e:52:
fd:cb:3d:c5:a3:cc:6d:d9:17:83:c1:34:d1:eb:5e:7c:14:ff:
b1:3b:37:a8:fd:7a:79:fc:ff:c7:79:e3:34:15:80:1f:50:27:
0d:2a:76:f8:33:94:f5:43:b2:17:da:85:3c:0b:f9:98:5b:79:
16:a6:72:c7:fc:db:be:c5:92:f6:15:dd:ad:f4:31:2c:be:eb:
c4:11:7b:d1:27:dc:84:23:1e:ef:55:79:c7:22:f5:e9:5d:f4:
96:b1:6b:21:7e:b0:87:2c:b4:b1:fb:25:91:69:d7:74:02:db:
9e:2b:16:c3:4d:35:e2:b8:75:3d:02:82:8c:f1:38:82:e8:e2:
6b:38:72:a6:fd:cf:b5:b4:67:34:1c:7d:18:d4:db:4f:e7:76:
ff:79:63:15:78:b7:f2:5a:8f:f2:a7:98:11:75:b4:9a:aa:63:
7e:95:8a:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/YqMInU7KuhavI0fC6gjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NGYwYjI3MmUyNDNhY2ZhZjM2MzQ2MDk0ZTU4Mzk1Y2Mx
MzgzYjQwHhcNMjUxMDE5MTUwMTM4WhcNMjUxMDIwMTUwMTM4WjAzMTEwLwYDVQQD
Eyg0ZWM5MWQyZjM4ODQ0NjJhNzk0MWZjMmRkYmFjNTIyZWMwOTRkNGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmNpD9F9bwfkjJWdVBc2AQmW1DrO
i8GjnsnKdgKhkqn/xP6OTWNPYahgTDVEWvk2Vm1FsCW084WT/vcfx8XG4E4BbUql
xF449HEwofzP4J4y7/gT8GqZbpiam47KQmMWN70G9cbhJUDi/HvF09aq47cN7oI8
n8wIMu5QLGRgJRrC9VFCPTEZmNjbM3zGiRWRDgmzk3t2diCsDX6gIJKvJLeF0Tet
1wD4zdD9Pn1iczhn09Pu0Hmcoo740yptuQCYQCDoYF3R5Cg98My+tkVcFaMi3s36
AODHEE7y6jVR38aBr7FGLjAg8RwNCYXVItstwqChpCVgCkPF5YRLMNYBjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7JHS84hEYqeUH8LdusUi7AlNSuMB8GA1UdIwQY
MBaAFBlPCycuJDrPrzY0YJTlg5XME4O0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNTNkMzQtYzNkNi00OWRiLWFiN2Yt
YTljY2U1NmEwNjY4LzEvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hNTNkMzQtYzNkNi00OWRiLWFiN2YtYTljY2U1NmEwNjY4
LzEvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAON2IYgwy
wF8A5TUnJqMoOptmkgM0z1wGkdf8Z1HI8ZONvMT8EZmBDDB1NmhNuSWRWs1Uw6IS
Dauq8PNw80kNhHapQ2SXKZk1kgNPRLRYSDH9wlGHrS9Qii5S/cs9xaPMbdkXg8E0
0etefBT/sTs3qP16efz/x3njNBWAH1AnDSp2+DOU9UOyF9qFPAv5mFt5FqZyx/zb
vsWS9hXdrfQxLL7rxBF70SfchCMe71V5xyL16V30lrFrIX6whyy0sfslkWnXdALb
nisWw0014rh1PQKCjPE4gujiazhypv3PtbRnNBx9GNTbT+d2/3ljFXi38lqP8qeY
EXW0mqpjfpWKqA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:05 2025 by rpki-client