Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
File: guaSFNb9VedQULqBG_fBJDkQn-4.mft (raw, json)
Hash identifier: 8tTiQ7sKNprbAG6h5K0QVdLpx8m+a9aIZdAAMDiY3gQ=
Subject key identifier: 64:49:13:D5:D7:5E:C7:DC:BC:8A:49:E6:EC:DB:58:E6:53:82:37:F9
Authority key identifier: 82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
Certificate issuer: /CN=82e69214d6fd55e75050ba811bf7c12439109fee
Certificate serial: 0198469B475A513FA8DCE0C605770422CA10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
Manifest number: 0CE7
Signing time: Sat 26 Jul 2025 12:00:38 +0000
Manifest this update: Sat 26 Jul 2025 12:00:38 +0000
Manifest next update: Sun 27 Jul 2025 12:00:38 +0000
Files and hashes: 1: Yf8xLh6ONOE-LcHsXkQWHpv_Qbs.roa (hash: w0wC5FwQryxr68NY97Vqd4lkkn8kQ9lhz7BZtY1f10I=)
2: guaSFNb9VedQULqBG_fBJDkQn-4.crl (hash: eOW7IAPefAYrqUG/cj+Lth50oW8J3LexvB++7bDLVpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:47:5a:51:3f:a8:dc:e0:c6:05:77:04:22:ca:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e69214d6fd55e75050ba811bf7c12439109fee
Validity
Not Before: Jul 26 12:00:38 2025 GMT
Not After : Jul 27 12:00:38 2025 GMT
Subject: CN=644913d5d75ec7dcbc8a49e6ecdb58e6538237f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:18:69:06:3a:8e:d0:d3:4c:92:98:84:0d:
c3:b1:63:80:7e:82:4b:af:f6:07:07:89:e9:9d:59:
dc:92:01:eb:fc:19:1b:88:c2:c9:0b:a5:a4:5b:1a:
e0:99:d3:d4:a0:a3:63:b5:ee:e8:8a:b4:78:9d:06:
1a:98:80:5b:43:99:34:52:e0:1d:7b:9e:67:bd:2c:
65:2c:80:cf:3e:62:ab:a7:a8:2b:68:01:50:a8:d3:
50:cd:59:1d:16:a0:34:db:9c:84:02:c7:0a:d9:b4:
3f:f6:d6:1e:83:18:d8:7f:b8:e6:67:1c:82:77:35:
0b:19:78:ef:b8:28:17:a6:a5:fb:aa:a8:f8:16:17:
ed:02:eb:d2:10:e9:c4:67:10:86:bb:64:8f:e6:92:
d7:dd:aa:13:89:4a:e9:99:9a:a1:22:f9:a8:08:10:
40:14:84:d5:34:82:c9:10:ba:73:a0:99:25:c0:a3:
d0:ba:88:17:c1:3a:3d:9d:0a:98:c9:cc:7e:df:c7:
bd:6a:97:22:7b:00:06:37:08:90:cf:ac:a8:8c:a1:
70:83:a2:6d:78:24:1b:66:93:16:99:58:b7:30:97:
ff:23:ed:b8:d7:ed:e0:68:11:0c:45:5c:48:b5:22:
9a:82:62:a1:76:8b:0e:97:8c:ce:90:19:ca:d6:21:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:49:13:D5:D7:5E:C7:DC:BC:8A:49:E6:EC:DB:58:E6:53:82:37:F9
X509v3 Authority Key Identifier:
keyid:82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ea:c5:11:98:fc:59:ee:1b:cd:c7:b1:c0:d6:e3:23:0b:1f:
11:ce:02:63:d4:cc:a4:fc:61:91:b6:12:5b:7d:a9:89:f0:9f:
47:e3:27:c7:b9:f4:00:77:38:64:b6:99:e0:24:8c:d5:2e:a1:
a9:d7:ee:51:ca:03:ef:c5:e5:66:26:45:a9:35:55:b2:a4:07:
88:ff:89:70:21:79:cf:8c:58:4c:da:bc:e9:47:57:85:e4:bd:
c5:2d:44:41:50:19:f7:8e:9c:80:a9:f2:bd:26:40:8e:af:f9:
89:ec:5e:db:25:df:84:95:61:58:99:57:06:e0:0d:96:b4:36:
00:c9:4e:ac:56:a8:1b:45:24:1d:f0:65:47:13:e5:f7:cb:70:
61:f8:d2:c3:77:68:29:fe:24:f6:a3:41:3d:c1:cb:cc:87:27:
06:7b:27:c7:8e:ff:06:62:19:83:bd:23:ac:00:52:25:a2:59:
26:78:a5:81:48:a1:90:17:ca:e9:8d:39:ca:3f:09:24:50:35:
ac:75:b3:c1:a3:34:ba:f9:9d:e7:71:e1:ef:9a:31:5d:f8:18:
6d:a9:08:c7:4a:43:1c:75:ca:b3:f6:4d:8c:9d:d5:4f:9c:38:
4c:93:f0:57:23:79:d3:16:5c:1c:f2:92:5e:de:24:a2:f4:a0:
d8:0c:97:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:50:03 2025 by rpki-client