Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: FKpAvDn4FGzEBz7c/yFX5FGjETJ/w9mpWWhUAVqKi1U=
Subject key identifier: 35:2B:AE:BE:7C:F2:E5:01:6A:BC:70:C9:FD:BD:D8:72:B8:6A:07:38
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 01984B54A64139712B3E49CD7A7ECEBC7BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0A2B
Signing time: Sun 27 Jul 2025 10:01:35 +0000
Manifest this update: Sun 27 Jul 2025 10:01:35 +0000
Manifest next update: Mon 28 Jul 2025 10:01:35 +0000
Files and hashes: 1: XTZ-6WhmzXiDDwFWajhChN4966c.roa (hash: 76eYyVPhyFyHfOEPHeaphAj0SWfwnKjZwUHP7osL/Jg=)
2: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: 4nbDkmkqLiSgktk4dUJ3kL83rtOtzRzcVDZRgW4IKgU=)
3: kTc3tdsyRqEwIQUrDzGOak8nANc.roa (hash: 7cesO8GKLYeXhtn4E2bVxqR/wKRQ+h04HAytGr5/XYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:a6:41:39:71:2b:3e:49:cd:7a:7e:ce:bc:7b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Jul 27 10:01:35 2025 GMT
Not After : Jul 28 10:01:35 2025 GMT
Subject: CN=352baebe7cf2e5016abc70c9fdbdd872b86a0738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:00:2a:aa:02:ed:a7:63:9c:a2:00:eb:3f:80:
f2:34:f3:1b:ce:11:95:29:9c:0b:14:0a:00:70:d6:
4c:29:c5:43:99:66:62:e1:7c:8b:a1:6d:11:8d:c8:
a6:59:87:c0:fd:b1:91:04:42:be:6b:06:29:b5:37:
28:c8:2d:8d:20:fa:ba:13:4d:e9:ca:b9:f8:f4:fa:
08:af:6c:01:df:38:47:87:94:23:10:f8:bc:be:cd:
ac:e1:cf:15:32:d7:95:eb:1a:7e:72:4f:46:cd:78:
34:c3:51:f6:43:76:bc:0a:f7:99:4a:11:d2:76:8d:
da:f7:16:06:a7:35:6a:9d:d6:7b:63:13:f8:74:b0:
6f:93:75:11:95:94:4d:0e:88:0f:1d:81:0b:12:32:
3e:28:d9:a2:86:e7:de:7b:3c:cf:65:bf:ed:1e:39:
82:43:df:ba:7b:4a:4d:2e:eb:fb:43:92:82:f0:90:
dc:05:72:44:7e:dc:40:de:45:b2:f1:28:dd:99:83:
3b:6a:73:c9:08:5c:7a:e9:17:2c:a0:37:78:ea:25:
3d:65:ed:a6:ca:37:50:2b:f8:14:5f:be:7b:bb:12:
41:a0:3c:a7:f0:68:6f:08:fd:2f:72:53:00:83:bf:
33:d9:a8:51:35:78:f9:a6:86:d4:d5:3d:17:ff:20:
93:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2B:AE:BE:7C:F2:E5:01:6A:BC:70:C9:FD:BD:D8:72:B8:6A:07:38
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:72:4a:71:0e:eb:ae:71:07:c0:78:54:01:7e:0b:9d:34:1f:
3e:0b:4b:34:0b:cc:67:ed:01:ce:3d:55:bb:e3:b1:cd:a0:c3:
6d:83:16:a7:f8:58:3d:59:10:54:93:3a:40:3c:55:dd:20:50:
9d:dc:c0:e5:c1:ac:fa:6d:94:41:0e:d6:6a:1d:40:bc:9b:a3:
ed:25:bf:36:4d:cd:d5:10:08:fd:6c:ed:7c:a2:63:56:7e:98:
0a:e1:cf:c7:7e:69:66:17:c5:69:f3:f1:cc:09:f1:87:66:0e:
49:b5:a8:ed:06:cb:f3:78:38:8d:6a:cf:07:62:cb:d5:9d:12:
58:4e:1c:be:ee:68:ec:c2:2a:cb:4d:40:ca:a4:55:6b:89:bb:
8d:2a:50:7e:5e:c7:72:c0:66:02:22:f8:1d:ba:34:6c:7a:59:
3d:97:7f:5c:85:8c:a3:ba:b4:45:b2:d9:4a:dc:3e:5a:86:2d:
7f:07:d6:53:f2:40:4e:22:be:34:15:f0:38:84:9b:63:3f:a6:
68:9f:92:c1:28:9c:6e:a6:7f:70:14:46:d4:5a:b8:77:a3:41:
e4:c6:60:5e:1f:43:c9:6c:be:c4:b0:66:f1:11:61:d6:7b:71:
43:51:50:5f:10:cb:03:4d:70:3c:c7:ad:a7:53:51:5e:18:9a:
57:20:12:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:46:32 2025 by rpki-client