Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
File: guItqb8KdBce67TNmPwl8wQa3S8.mft (raw, json)
Hash identifier: HGomZHNs03oxufYEGN7GFEAEzU8lKqQDHuWZKnzQJIk=
Subject key identifier: 9B:75:60:A7:B4:3A:8C:39:85:9C:9F:69:39:98:92:F8:2D:09:83:0C
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Certificate issuer: /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial: 01965537A5DE199F6C35AF8B010C592D7E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 22:00:32 +0000
Manifest this update: Sun 20 Apr 2025 22:00:32 +0000
Manifest next update: Mon 21 Apr 2025 22:00:32 +0000
Files and hashes: 1: guItqb8KdBce67TNmPwl8wQa3S8.crl (hash: MrW+0FOuViNSr/KUxetfxXuO3bH3UqV582/9mW2y6K8=)
2: st7UugSXha_zumczLwSMs_JMMGo.roa (hash: zW6BjWFPz0O6Tl0aYcPhSf3EE25VQRz5yPeKPIedYY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:a5:de:19:9f:6c:35:af:8b:01:0c:59:2d:7e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Validity
Not Before: Apr 20 22:00:32 2025 GMT
Not After : Apr 21 22:00:32 2025 GMT
Subject: CN=9b7560a7b43a8c39859c9f69399892f82d09830c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:77:38:b9:27:07:61:f7:17:9b:da:6d:1e:
99:50:48:fa:bd:70:0b:12:e1:dc:a2:90:ad:20:36:
0d:cd:5f:a3:dc:b6:16:c7:83:4b:f0:09:ea:d8:c1:
65:ee:4a:29:4e:b2:fd:51:12:5e:b8:f7:16:02:9b:
ce:7a:62:8b:1c:8d:62:91:4d:99:9a:8a:a7:f7:b1:
cc:69:52:f3:19:c2:7e:cf:c4:45:03:81:20:86:9b:
6a:5b:31:0a:65:c2:c2:41:f7:f4:e2:52:de:99:b2:
03:93:ef:36:db:5c:6f:01:76:30:df:69:39:7d:66:
e5:59:da:49:49:35:62:70:cc:d7:99:d0:47:95:52:
1b:4b:c7:ac:71:c8:81:99:97:54:1d:6a:c6:68:cc:
24:4d:9e:5f:f9:88:f1:ea:c2:8d:61:dd:f4:41:71:
29:1a:2b:cd:c7:61:e3:f1:61:de:79:4f:8d:bd:cb:
27:eb:35:ce:03:0c:c8:ec:eb:4e:38:7f:d7:57:89:
a3:25:35:5d:c3:63:45:41:bb:f5:75:2e:c5:45:b1:
c7:3a:29:28:10:c1:af:1d:45:fd:e8:d3:b9:4c:67:
f0:93:70:74:6b:6d:b5:d4:8a:54:f1:36:4f:cf:f2:
7e:50:ef:88:12:72:76:d4:38:ea:98:84:b4:ce:7b:
a1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:75:60:A7:B4:3A:8C:39:85:9C:9F:69:39:98:92:F8:2D:09:83:0C
X509v3 Authority Key Identifier:
keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9a:9a:19:ec:d5:09:bc:94:75:54:de:78:03:d6:3f:3e:5c:
9a:92:a8:eb:be:81:cd:f0:61:dd:39:ba:c5:a5:9f:7f:8f:8f:
b7:94:dc:8a:b6:5c:af:2a:0f:4d:e4:4b:09:d2:44:19:e8:ad:
a9:fe:94:57:29:ca:93:b8:08:8d:60:cf:08:55:33:d3:5d:b4:
eb:a1:f4:67:cc:c9:9f:4b:b9:69:17:50:75:b6:b3:45:70:30:
fe:c8:b9:ae:43:7d:ab:10:45:80:b5:1a:39:4d:f0:41:0f:f6:
c3:bc:78:53:85:f1:73:de:06:25:59:35:eb:34:b8:ad:e6:6c:
17:e4:e3:a4:be:a7:f2:87:32:5a:fb:ae:54:78:8c:07:53:97:
d0:d7:e8:03:7c:07:17:f1:37:39:35:bc:9d:56:20:fc:16:b2:
f9:a1:95:c6:f8:9d:a4:44:67:8d:e3:54:cd:08:1f:84:56:cf:
98:20:ef:fd:81:ac:71:a8:8b:a4:c2:72:8c:1c:5d:4e:d2:78:
41:fe:50:a9:f1:15:d1:c2:15:0b:84:50:a4:8e:8b:66:3e:ce:
a6:db:4e:4f:b1:48:6a:00:2c:a4:16:46:54:43:a4:99:6a:7e:
ed:dc:24:33:3a:44:fb:7b:a2:bf:5c:79:36:26:89:6a:04:f1:
a3:74:d1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:21 2025 by rpki-client