Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
File: GurA9jJXsiTsFxBuG83v0ywkd4s.mft (raw, json)
Hash identifier: LUwDkutczC2RMbAQx07CcvD5Vb+4XGVcb3FPybF8Fmo=
Subject key identifier: 9D:68:AD:69:05:85:D2:7E:99:DD:51:72:5D:59:0E:48:8E:41:BA:1B
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial: 019A01B5F420A17EE942A25D9B1B2765020C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
Manifest number: 0863
Signing time: Mon 20 Oct 2025 13:01:32 +0000
Manifest this update: Mon 20 Oct 2025 13:01:32 +0000
Manifest next update: Tue 21 Oct 2025 13:01:32 +0000
Files and hashes: 1: 57MdEJb-nBShQLLCWdO0TGMwrmU.roa (hash: AI0OebgvFdQLqYYDJFtpVuV594/Dy/OB9klpHE+tsqU=)
2: B7Qapo5g1oDmbBkmOp4VI6hXM-Q.roa (hash: QPX22bu8lrGVz4DhZjKtOs7g7eex/hilxfsr4fUW4YM=)
3: GurA9jJXsiTsFxBuG83v0ywkd4s.crl (hash: FA+3DUeeAJ8VVcOcOddvhKDh8sZWaFDBbJ0ovn4+Adc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:f4:20:a1:7e:e9:42:a2:5d:9b:1b:27:65:02:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Validity
Not Before: Oct 20 13:01:32 2025 GMT
Not After : Oct 21 13:01:32 2025 GMT
Subject: CN=9d68ad690585d27e99dd51725d590e488e41ba1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:e0:bf:e8:58:91:96:4b:93:0d:6e:fa:ef:
3b:be:8b:f2:a4:b9:a8:16:9a:54:e6:63:98:83:a3:
e7:b6:ed:1e:2b:be:22:c9:8c:7f:47:9f:ff:39:2b:
be:ee:55:ee:3d:c9:41:83:68:fb:82:04:5f:96:69:
b6:5b:1a:2e:ec:4a:18:30:9b:9b:f7:a0:09:ac:62:
50:51:88:01:b1:96:23:45:9e:09:a2:4d:88:7d:03:
20:93:8e:fd:c6:07:6b:7e:0d:ea:a0:7c:eb:20:ff:
16:e1:d4:79:e3:87:b4:56:fa:34:a1:6e:11:1e:6d:
58:28:46:c6:71:2a:ad:1c:f1:99:d0:df:aa:bb:9d:
6d:4d:80:2b:bd:4d:da:e9:e8:02:82:46:ad:a6:68:
f8:e7:bf:f7:d4:8d:1a:2a:07:98:f2:35:50:42:81:
34:41:7f:e0:8f:4c:4e:3c:37:95:5a:07:d4:72:6a:
56:15:ff:6d:cc:e4:a7:5b:40:f9:bf:79:3a:45:94:
d1:88:c0:95:9f:4e:fa:45:43:38:01:fa:cf:bb:e2:
e0:00:22:0f:9f:ec:6c:c1:27:30:03:84:2a:16:4f:
92:fc:0d:10:7d:45:90:d1:30:03:77:36:5c:c8:20:
fd:f8:28:99:b2:a9:5a:65:8e:de:64:dc:bd:9b:36:
6f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:68:AD:69:05:85:D2:7E:99:DD:51:72:5D:59:0E:48:8E:41:BA:1B
X509v3 Authority Key Identifier:
keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f6:44:f4:cc:00:c2:4c:bf:d9:3a:c5:1a:30:e0:97:00:4b:
30:a0:ef:a4:24:13:2e:9f:66:97:f3:69:ba:2c:81:49:4b:93:
47:af:4d:0b:e1:7d:c9:ae:23:91:83:bc:81:cd:3c:76:ec:be:
c6:19:42:e5:35:2c:0f:1c:53:18:15:ba:47:ef:80:f3:09:25:
55:3c:2a:71:30:d7:c5:de:8d:c7:b9:87:8c:91:ff:f7:b9:8c:
db:6b:76:18:ed:c7:8c:dd:5e:63:05:53:d6:ac:de:81:69:4b:
c8:4b:79:46:bb:08:04:28:59:76:ec:f7:dd:d9:87:31:13:75:
76:1e:bf:36:7d:22:17:c5:5f:65:dc:96:5f:ff:fe:dc:42:fa:
6c:96:0d:48:85:d7:4f:20:9a:17:35:e3:a2:e0:20:23:60:17:
2e:36:5c:c5:40:c6:b0:ec:1e:81:3e:1b:73:b3:99:87:ba:39:
01:4f:f7:64:10:a5:b9:50:2e:6a:8d:ae:12:82:73:cf:6f:31:
ac:92:8d:fb:ec:40:18:5c:bf:51:ef:8a:cc:17:10:f6:04:8e:
ab:1d:b4:ad:90:43:cb:62:19:0f:37:d3:8f:ee:dc:cf:9b:1f:
9d:f2:75:7f:0d:13:ff:0b:3f:f5:e2:94:ae:93:50:61:25:2a:
fa:61:28:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:14:28 2025 by rpki-client