
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
File: GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft (raw, json)
Hash identifier: 0Hxl5Iur6OYmxRdK7oVgkeS9PpMGX98uGhZOX+3tGK4=
Subject key identifier: 5F:E0:BF:5D:97:EE:97:39:EA:C4:99:63:77:45:E8:7B:85:A5:A5:AC
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Certificate issuer: /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial: 0198D583E10F9E0586087FD241472F87E108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
Manifest number: 11C0
Signing time: Sat 23 Aug 2025 06:00:46 +0000
Manifest this update: Sat 23 Aug 2025 06:00:46 +0000
Manifest next update: Sun 24 Aug 2025 06:00:46 +0000
Files and hashes: 1: GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl (hash: voQ+kj2G7Ey8lWEf2n0bPrLvSsKGvnSBmrsuRj3TrnI=)
2: uIeYeZznF-O1grN0M5g3SmcN33U.roa (hash: y5O+zvgRhkPeGKTBn9Qn4EVE0s2vlCMineSuEirJq9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e1:0f:9e:05:86:08:7f:d2:41:47:2f:87:e1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
Validity
Not Before: Aug 23 06:00:46 2025 GMT
Not After : Aug 24 06:00:46 2025 GMT
Subject: CN=5fe0bf5d97ee9739eac499637745e87b85a5a5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d9:ff:c6:e9:ab:4d:22:3c:df:29:76:92:a4:
09:2e:95:a4:7b:64:a7:a5:90:20:23:7d:8e:52:ff:
29:f3:80:e6:6b:85:d3:a7:b2:3a:0d:88:aa:a8:39:
35:f8:8b:76:b5:7b:dd:b3:4c:48:10:94:c0:1c:76:
dc:cc:bb:46:f4:a9:0e:67:a0:b0:93:3b:68:6e:d3:
fa:f5:4a:0b:ab:10:70:c9:47:cd:70:a8:9e:fd:32:
d3:73:44:14:82:6e:62:41:bd:fb:d7:63:9b:ab:9e:
d9:77:03:88:84:de:5c:1f:7a:be:cb:5b:40:46:99:
02:24:5c:b1:c6:29:8d:ee:33:5c:92:b9:34:1e:33:
01:4c:81:ed:ed:cf:43:0a:64:e2:52:da:57:66:de:
27:2f:bf:3d:9c:4f:ea:78:27:a7:1f:7b:8b:56:b2:
05:de:87:66:56:28:1f:fe:89:b1:ab:7c:d0:ef:b1:
30:90:fc:ef:1c:40:6e:09:fc:bd:ee:98:42:64:61:
e1:74:d7:32:65:37:8f:50:72:14:03:63:60:2f:d1:
31:da:d2:58:c5:47:ec:86:19:c4:30:d8:dd:e8:32:
2c:19:40:34:fb:2c:b0:04:01:59:c2:5e:13:bd:d4:
62:d4:29:57:da:29:85:dd:49:6f:2d:5e:38:a3:53:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E0:BF:5D:97:EE:97:39:EA:C4:99:63:77:45:E8:7B:85:A5:A5:AC
X509v3 Authority Key Identifier:
keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a1:e8:db:3f:e1:08:8f:69:ee:da:a6:48:54:bb:a1:6b:1c:
d8:c1:26:c0:17:e8:d8:72:59:bd:2f:29:f4:e5:71:c1:7e:55:
f0:be:05:90:fb:dd:f1:4f:d5:fc:6b:10:3d:30:0c:60:1a:a0:
a8:dd:c8:d2:ea:89:bf:02:dc:7e:02:ef:3a:db:17:74:14:90:
08:c3:93:9d:f5:5c:8a:56:ba:52:0d:f1:71:97:7d:80:1b:6e:
44:0e:ea:a8:68:b7:b6:f3:7c:eb:11:66:b2:9d:73:30:f1:14:
9c:c1:a0:c5:b7:6f:c4:58:4d:d7:39:0b:b0:2b:ea:03:46:0a:
89:fb:c7:26:99:db:5c:8f:39:bc:5f:76:f4:a5:9e:95:6a:4e:
cb:02:3c:19:12:c2:20:e9:35:b0:d6:b3:8d:37:dd:e0:c6:1a:
12:4e:93:ad:38:b0:07:1a:ca:7c:c0:3d:67:06:c9:b4:88:f8:
80:f1:cb:7e:ac:dc:20:12:de:6b:ab:d7:9b:b2:da:e7:81:e6:
bb:00:96:53:ec:97:54:51:ee:2e:6a:29:31:18:dc:32:76:c0:
1f:08:97:6f:00:88:b0:f0:10:1a:6a:0e:ef:82:01:4d:2d:20:
bd:f4:53:43:e0:d5:b4:1c:9e:a2:26:a6:02:ab:7d:23:1e:c7:
0f:84:bf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:17:42 2025 by rpki-client