
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
File: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json)
Hash identifier: JXW3DS17UGA0k+h2KgjKC32Eu/TVNVGFA1LU7lw++bI=
Subject key identifier: BD:9C:35:1A:B2:09:D5:4D:BC:FD:F5:51:39:41:BA:F7:FA:A7:BF:0C
Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
Certificate issuer: /CN=194e32a82e98f22d939ff9984455813be2ba6a91
Certificate serial: 0198D515EC406AFA80DF896CA5EE942A6D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
Manifest number: 0167
Signing time: Sat 23 Aug 2025 04:00:40 +0000
Manifest this update: Sat 23 Aug 2025 04:00:40 +0000
Manifest next update: Sun 24 Aug 2025 04:00:40 +0000
Files and hashes: 1: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: ndtAF/t45Atmbhvwsh0UFb0dCDC/6qB4YprH80o7/tg=)
2: UfSgUAAlY9L-pxjy9r66ZUMHciI.roa (hash: lfZloxngOlvdGd9PgYcQqf9/LWwVeSvhKaVHeCHu4Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ec:40:6a:fa:80:df:89:6c:a5:ee:94:2a:6d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91
Validity
Not Before: Aug 23 04:00:40 2025 GMT
Not After : Aug 24 04:00:40 2025 GMT
Subject: CN=bd9c351ab209d54dbcfdf5513941baf7faa7bf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:5b:40:e9:36:78:a5:7f:c9:18:5a:dc:95:
ff:a6:3f:1b:0b:bb:1a:d9:80:41:33:38:71:73:e4:
7a:a7:9c:a5:7d:5e:b3:6f:ae:30:85:10:a1:49:5e:
54:40:d7:16:2b:26:ca:65:d7:b6:8f:02:6d:32:e0:
38:66:e9:a0:45:ea:b3:f6:c6:1b:15:04:b6:c7:f0:
0a:ad:10:d6:79:6b:76:fe:75:50:84:34:94:f8:d5:
cd:6b:53:5d:21:8c:58:40:3b:dc:a7:02:a6:5a:0b:
7b:65:c2:09:61:31:13:42:68:77:33:01:32:34:73:
5d:02:56:db:8a:ac:5b:2d:0e:37:2d:ca:aa:34:68:
47:88:4a:5f:f8:f8:13:10:52:75:a2:f6:3e:6d:a3:
4b:b0:83:84:21:c6:6c:14:0c:15:c1:80:df:39:03:
18:9b:5c:77:b1:9f:bf:7f:bf:4e:3b:c2:22:02:a6:
90:6c:8a:a8:34:9f:2d:0e:7b:63:3c:f9:75:57:60:
a4:66:0a:82:93:d7:81:61:4d:2a:ba:92:b3:bd:35:
b6:ec:3c:93:e3:97:43:6e:de:5f:7c:ac:92:7f:e5:
bc:8c:7f:5f:b4:d8:ee:26:7e:c9:c2:c2:8f:25:66:
3b:68:91:b3:61:ea:f3:d4:e3:23:97:c6:e2:58:f6:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9C:35:1A:B2:09:D5:4D:BC:FD:F5:51:39:41:BA:F7:FA:A7:BF:0C
X509v3 Authority Key Identifier:
keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7c:f9:f6:f4:d0:b1:ef:e7:d5:8e:68:1d:a2:17:aa:94:22:
26:a7:48:d6:ad:60:78:49:07:10:7d:00:0a:bd:7d:43:82:4e:
ab:6a:57:b4:31:f6:42:6f:e3:02:b0:f2:4a:de:8c:c9:84:58:
16:c7:ec:70:40:56:37:15:5f:2e:93:ab:18:b1:a7:26:cf:98:
59:a2:9b:cd:79:20:d2:4e:e6:19:1c:4d:62:fe:4b:49:92:9d:
3b:29:28:1c:df:b1:5a:8a:52:73:a0:c4:5b:5e:52:89:83:e2:
01:04:73:d9:c9:ea:e4:f9:a4:2f:0d:37:39:f2:09:af:61:30:
e1:cd:71:66:04:5b:51:7b:49:4a:5f:a4:83:3c:6d:77:58:95:
9b:65:fc:4d:04:de:20:d8:fe:f0:9b:1e:cb:04:29:ab:49:9b:
f7:54:aa:a1:ff:bc:03:f3:8b:d5:0d:99:ca:79:18:10:25:6f:
74:c4:f1:12:3f:40:f8:23:aa:48:7b:a2:71:85:29:84:99:0b:
3f:da:0c:75:6a:fd:2d:b8:7a:80:10:48:3b:19:d5:57:1a:ed:
66:0f:5d:d4:5c:a2:2a:57:89:a9:8e:b5:ba:7f:58:18:04:82:
5c:38:21:c3:5d:af:aa:34:5c:49:58:b3:30:d8:3c:e0:3d:44:
6c:1f:ca:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFexAavqA34lspe6UKm1IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NGUzMmE4MmU5OGYyMmQ5MzlmZjk5ODQ0NTU4MTNiZTJi
YTZhOTEwHhcNMjUwODIzMDQwMDQwWhcNMjUwODI0MDQwMDQwWjAzMTEwLwYDVQQD
EyhiZDljMzUxYWIyMDlkNTRkYmNmZGY1NTEzOTQxYmFmN2ZhYTdiZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNNbQOk2eKV/yRha3JX/pj8bC7sa
2YBBMzhxc+R6p5ylfV6zb64whRChSV5UQNcWKybKZde2jwJtMuA4ZumgReqz9sYb
FQS2x/AKrRDWeWt2/nVQhDSU+NXNa1NdIYxYQDvcpwKmWgt7ZcIJYTETQmh3MwEy
NHNdAlbbiqxbLQ43LcqqNGhHiEpf+PgTEFJ1ovY+baNLsIOEIcZsFAwVwYDfOQMY
m1x3sZ+/f79OO8IiAqaQbIqoNJ8tDntjPPl1V2CkZgqCk9eBYU0qupKzvTW27DyT
45dDbt5ffKySf+W8jH9ftNjuJn7JwsKPJWY7aJGzYerz1OMjl8biWPZjeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2cNRqyCdVNvP31UTlBuvf6p78MMB8GA1UdIwQY
MBaAFBlOMqgumPItk5/5mERVgTviumqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mMzZiOWMtN2UzNy00ZjE4LTg4NjUt
MTNlNzNmNjYzOTdiLzEvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mMzZiOWMtN2UzNy00ZjE4LTg4NjUtMTNlNzNmNjYzOTdi
LzEvR1U0eXFDNlk4aTJUbl9tWVJGV0JPLUs2YXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHz59vTQ
se/n1Y5oHaIXqpQiJqdI1q1geEkHEH0ACr19Q4JOq2pXtDH2Qm/jArDySt6MyYRY
FsfscEBWNxVfLpOrGLGnJs+YWaKbzXkg0k7mGRxNYv5LSZKdOykoHN+xWopSc6DE
W15SiYPiAQRz2cnq5PmkLw03OfIJr2Ew4c1xZgRbUXtJSl+kgzxtd1iVm2X8TQTe
INj+8JseywQpq0mb91Sqof+8A/OL1Q2ZynkYECVvdMTxEj9A+COqSHuicYUphJkL
P9oMdWr9Lbh6gBBIOxnVVxrtZg9d1FyiKleJqY61un9YGASCXDghw12vqjRcSViz
MNg84D1EbB/K+Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:43 2025 by rpki-client