Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: /x1KnVe0fRJ9E4iITDbL3xdq0vxR3YjXvEFYUdu4SyM=
Subject key identifier: 7B:64:6E:0A:E1:52:C6:19:77:E3:96:10:97:7C:D1:A5:EF:A2:E5:B6
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 0199FF59702891240C780094138FC7162129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 018A
Signing time: Mon 20 Oct 2025 02:01:15 +0000
Manifest this update: Mon 20 Oct 2025 02:01:15 +0000
Manifest next update: Tue 21 Oct 2025 02:01:15 +0000
Files and hashes: 1: 9PkegdPcOVaHYch8whuUGhkGOzc.roa (hash: nTpt8kDLjSLrMGR0C/m0j9Ftj77WGzhvL7KxFH3u7Z8=)
2: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: ODmUH5PQLNnn6H5rjr/MaA+Q/Y2IRux2V+5olI9HhvU=)
3: mo525hECNfAEonllRKyyBVCuVuY.roa (hash: a5b0LUZ9waSvhihXnwQQ6mCuKjGwIDzPkvhonuJ3oDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:70:28:91:24:0c:78:00:94:13:8f:c7:16:21:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Oct 20 02:01:15 2025 GMT
Not After : Oct 21 02:01:15 2025 GMT
Subject: CN=7b646e0ae152c61977e39610977cd1a5efa2e5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:11:e9:c8:9c:59:64:7d:0b:1c:8e:a3:67:
9e:38:05:82:6a:3a:4c:98:38:44:e3:80:93:14:e2:
4a:6e:de:26:a7:d6:29:57:7b:2a:5d:80:30:f7:7c:
50:9d:1b:ae:b8:55:fa:86:a8:c1:9b:a4:78:cc:53:
7e:8c:24:89:5f:50:83:d7:b6:ba:1c:8b:2a:52:82:
a0:7c:b5:19:93:ca:a8:3d:a9:ab:b5:54:76:22:75:
e8:98:53:92:59:46:21:3e:b8:24:8f:0b:96:8d:66:
3c:8d:59:45:f5:31:f0:09:ca:6d:e9:4d:7a:63:a6:
7c:bc:6d:ca:ca:df:58:59:30:12:29:d5:a7:28:03:
51:ea:81:fb:b3:7f:92:25:2d:19:02:90:4d:c7:41:
5b:6c:2f:d9:02:80:ee:f4:57:b7:83:e2:31:61:35:
d8:31:3b:0e:da:a2:15:1a:a6:c5:06:8e:86:39:c4:
3b:fb:18:38:3c:85:81:16:e9:7a:d4:07:a4:6f:c1:
79:ce:c9:98:f1:77:0e:b5:ec:37:8f:1f:50:0e:33:
9c:a8:4c:bf:9e:88:62:ee:c2:51:ba:91:03:7d:75:
a8:0e:b8:ad:21:95:b9:c9:ca:96:6b:4f:65:80:87:
06:b0:16:f8:2a:03:23:89:c6:b0:d9:35:37:7c:33:
15:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:64:6E:0A:E1:52:C6:19:77:E3:96:10:97:7C:D1:A5:EF:A2:E5:B6
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:04:aa:22:57:a1:31:64:5a:29:e3:eb:73:a6:2f:21:0d:a4:
5b:2e:2f:6a:71:09:44:f1:b5:66:78:a3:f5:63:a7:9b:b9:0d:
55:33:2c:01:17:16:fe:31:10:b0:f0:a9:1f:23:cb:58:5f:f8:
0f:75:15:50:74:5a:6b:c6:03:7c:f7:43:7a:91:32:f7:3f:80:
05:25:6f:1e:83:68:91:b2:a9:fe:41:ee:ac:47:66:ea:fd:8c:
30:ec:e3:c5:dc:39:a1:bc:3f:f0:4f:2e:ad:f3:da:e0:48:c6:
77:35:5e:1b:71:60:3f:be:6f:b4:d4:6e:15:b5:40:ba:ae:2c:
e4:27:dc:8c:d0:06:26:c4:e1:65:88:8f:f8:7a:60:7e:a7:66:
bc:88:68:41:78:3d:a6:31:4c:03:28:84:91:34:5a:19:cc:c8:
ef:5d:8a:35:22:5f:8a:21:7b:8d:07:8a:ab:9b:48:00:c1:83:
31:22:f0:9a:8b:f1:0c:0d:c1:37:0c:b9:2a:1d:0f:8c:67:a2:
dc:9b:34:34:f3:0a:7a:c2:90:31:a5:40:b3:a2:ff:7a:e3:1f:
c3:f5:5f:58:3d:a7:ac:e3:2f:25:4c:40:68:1b:f0:15:c4:01:
ac:0c:79:80:c3:2f:87:ed:ca:8f:59:9b:da:31:b2:d8:d2:f7:
5d:17:ff:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:51:04 2025 by rpki-client