Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
File: guOWgcWq77NeVPStivpCjU_94Go.mft (raw, json)
Hash identifier: lZWaDdgzzr29UcBJ7v5aoS8PzdK5oaC+cjkikWD/jBI=
Subject key identifier: 55:F3:E2:2E:00:C8:EA:EC:77:C0:40:15:86:6D:C4:C9:30:7D:17:EB
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Certificate issuer: /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial: 01984A77C8EC06CEA246CBB34F554032793E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
Manifest number: 0DFE
Signing time: Sun 27 Jul 2025 06:00:20 +0000
Manifest this update: Sun 27 Jul 2025 06:00:20 +0000
Manifest next update: Mon 28 Jul 2025 06:00:20 +0000
Files and hashes: 1: FqQHS5x0K7fb3ABv-R1O2rQGEvc.roa (hash: 2VetqHsWLuCtCZQI5pXnNL52eNemAp797/ha4XRoM7M=)
2: _FNnAfXHIK3mS0z3F15N5D4m-eE.roa (hash: AzmbPxnJj3q2Pp6UGPDbM97rM3z/NgrygHufcP5z/7g=)
3: guOWgcWq77NeVPStivpCjU_94Go.crl (hash: 1EP+nlcFEEwdYCrrN5cSHrgtVAQ87eyC2lcOniUM61U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:c8:ec:06:ce:a2:46:cb:b3:4f:55:40:32:79:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Validity
Not Before: Jul 27 06:00:20 2025 GMT
Not After : Jul 28 06:00:20 2025 GMT
Subject: CN=55f3e22e00c8eaec77c04015866dc4c9307d17eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f3:a0:fc:79:06:c4:e6:e9:e7:6f:60:9f:83:
90:87:05:41:9a:96:6e:f6:83:54:fd:d3:b0:e8:d2:
38:c4:ce:43:0a:66:51:49:42:56:8e:b7:b9:3a:2d:
7e:0b:82:18:ae:59:73:a1:bd:77:48:60:ab:fe:e8:
e3:0c:62:96:a3:42:00:b0:e3:6f:06:91:98:9d:fb:
27:3a:52:36:8b:c8:27:98:3f:2f:40:d2:69:d1:be:
04:ea:c2:d5:74:e3:a1:86:80:07:0e:d4:67:69:15:
86:18:88:a1:76:f3:98:ee:8f:36:5b:a6:fd:1e:7c:
51:63:14:3e:dd:e4:2f:68:53:f3:dd:86:ba:b6:e2:
a5:1f:b3:02:5b:62:7b:ba:19:24:db:d1:25:b9:4c:
11:6b:93:36:0e:1e:dd:e5:86:ed:1e:73:b7:fc:57:
f6:7e:4b:88:cd:d6:c5:5d:fb:9b:3d:ee:fa:90:ec:
92:9c:22:a3:6f:b7:df:30:6d:72:7f:19:f9:9c:79:
05:a3:d2:17:fa:b0:1c:14:70:6a:a6:9b:97:a4:5d:
97:5f:47:40:7e:fe:b6:cf:52:cb:d7:78:46:28:ce:
94:46:2a:b7:14:45:6a:21:7c:13:0f:84:19:fe:47:
49:17:81:a9:3f:fe:a3:8a:43:31:05:84:82:53:cb:
52:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F3:E2:2E:00:C8:EA:EC:77:C0:40:15:86:6D:C4:C9:30:7D:17:EB
X509v3 Authority Key Identifier:
keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d3:82:eb:09:9a:08:f7:02:d0:ce:b6:a3:66:59:f1:c7:bf:
3d:1b:5f:59:24:3b:22:26:d0:87:73:f1:da:b4:70:7b:61:1d:
7c:93:be:82:53:7b:c6:2f:fb:a7:b3:db:ba:ba:5b:5e:fa:cf:
23:9e:f8:dd:a7:2f:e7:68:30:11:ba:07:a8:ec:47:17:69:c8:
24:8a:88:96:2f:6f:c4:17:b8:4b:f2:44:fc:6d:a8:84:bf:f2:
b0:e1:0c:7e:09:fa:8f:62:20:3c:63:bf:45:19:37:c6:0d:08:
93:85:9f:f6:89:ad:ca:dd:e4:7e:87:fd:7e:51:63:8a:77:9a:
c9:a9:e9:73:cd:ec:66:67:53:84:63:8f:6d:03:b5:95:de:7f:
57:45:3a:a4:a9:16:c9:9e:ac:d4:76:ca:13:64:9d:5b:f1:2a:
2d:ed:bd:b8:ab:e9:8d:03:ed:de:83:a1:5c:3f:eb:83:29:81:
5c:ee:98:f2:61:02:3d:25:35:f5:12:04:a8:d9:d7:5e:a6:27:
c6:6a:df:79:e5:22:6a:6f:71:0c:95:b2:f9:f4:96:a6:3f:2a:
6e:c2:a5:0b:da:fd:2f:8e:2c:ee:b5:6f:32:d6:83:2f:ce:11:
40:7c:3d:a8:d0:03:11:39:31:40:d2:06:48:67:7d:ec:d8:0f:
a4:a5:2f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:39:16 2025 by rpki-client