Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
File: GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft (raw, json)
Hash identifier: BIo6k0k5ZzkyAsNLIcJ+W244zDr3CUSz1At50YXN0rg=
Subject key identifier: CF:B7:4C:40:68:85:C6:25:F1:61:1D:E5:C1:AA:1B:4E:19:EA:8F:CA
Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Certificate issuer: /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Certificate serial: 0197B6D72D61A9D6B8260372A5E78661554C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
Manifest number: 13E2
Signing time: Sat 28 Jun 2025 14:00:44 +0000
Manifest this update: Sat 28 Jun 2025 14:00:44 +0000
Manifest next update: Sun 29 Jun 2025 14:00:44 +0000
Files and hashes: 1: GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl (hash: Etd2KzU4217urCqgATSlkq9YXa64ZzFsse4wI7F2XZ8=)
2: eUeAvm73-2L5UqqKdbnJ3M6g16M.roa (hash: Y9d2L+uaXCF5y4wJiUN6TycT1kpDQNqljoU9Xps8N/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:2d:61:a9:d6:b8:26:03:72:a5:e7:86:61:55:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Validity
Not Before: Jun 28 14:00:44 2025 GMT
Not After : Jun 29 14:00:44 2025 GMT
Subject: CN=cfb74c406885c625f1611de5c1aa1b4e19ea8fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:a8:58:6b:01:52:3b:4e:01:f0:05:df:9a:
ba:f4:09:2e:ea:7f:98:e4:ca:44:d9:b6:75:57:0f:
11:34:7c:72:f0:2e:d6:f2:36:46:24:8c:65:23:39:
d2:be:c9:47:6b:77:9b:12:df:0b:24:4d:98:57:86:
0f:37:83:4b:27:dc:a9:5b:71:34:db:d8:52:df:8d:
30:e7:48:79:5b:95:c5:78:d3:ea:af:6e:58:80:76:
02:3a:0c:f2:36:e1:1d:58:1f:5a:07:6e:6f:ce:51:
9d:83:ee:0e:58:df:05:8f:30:ac:da:ec:a6:ba:c2:
2b:79:6d:09:13:95:f4:b3:42:c7:a1:5f:d9:9b:8b:
38:90:24:b4:38:b3:bf:8d:1c:b6:31:ea:83:2c:51:
7a:f7:04:0d:43:9e:2b:72:b6:22:b8:15:d1:af:4c:
0b:b9:3a:29:27:b5:b5:4e:fd:bb:02:16:fd:de:53:
0b:4d:a3:a3:ab:f7:83:7d:39:3d:1a:19:b0:17:ae:
2d:43:2a:bf:3d:53:5c:1f:59:1c:74:c9:a5:21:ae:
a4:6b:26:70:84:f2:1d:31:56:16:db:1c:9e:cd:f2:
7d:02:50:d6:8f:9e:09:74:41:0c:01:d5:ff:a9:1f:
64:48:ee:83:5e:30:f0:47:98:45:f1:92:9e:91:0b:
55:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B7:4C:40:68:85:C6:25:F1:61:1D:E5:C1:AA:1B:4E:19:EA:8F:CA
X509v3 Authority Key Identifier:
keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2c:67:01:d1:3d:5e:0a:51:8e:cb:99:15:0c:cf:e5:4e:a4:
57:23:ad:d7:ba:a5:f5:16:db:6a:15:ab:e1:b7:be:24:fa:3c:
3c:2f:64:5e:1e:9c:74:bf:c9:fa:91:aa:34:71:01:13:29:dd:
83:31:f2:7f:7e:34:3b:74:1d:e0:bb:5d:03:5d:9b:29:44:21:
ee:84:0a:f4:13:39:24:c0:c8:34:a6:06:84:5a:f7:54:53:44:
ee:cf:9c:6f:d1:da:49:01:c6:5e:74:1f:d8:c4:1e:77:0f:b1:
19:b7:8f:74:87:d1:b1:c8:e1:63:f6:d0:7a:93:e0:23:86:ec:
67:2f:dc:68:4d:de:74:26:25:46:7a:83:38:b8:ad:76:80:dd:
a8:a4:13:24:37:31:b0:08:a6:f3:1a:e7:11:6d:14:31:d7:df:
69:10:fc:0e:96:d6:5d:b1:e0:4d:46:66:e2:0d:53:c0:af:84:
a2:c3:30:06:76:c8:a0:2c:5a:7b:25:86:cb:43:97:b5:a2:49:
e7:e2:60:97:f2:97:ac:7c:17:0b:44:16:82:ba:69:b7:a2:ec:
10:b8:4e:a6:af:f6:c4:c2:46:92:c2:72:61:ec:9f:7f:7b:a1:
62:76:46:75:52:01:be:52:0f:c6:14:94:93:b6:a6:46:2c:74:
c6:35:80:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:17 2025 by rpki-client