Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
File: guX7w-pSWnjGMMTahkuppg4Zm_8.mft (raw, json)
Hash identifier: gQ7I1wjShIH4ODdruFpFbNuyZmvbZNXCMCPZnU3pZzA=
Subject key identifier: 5A:9F:A5:5E:A1:3E:4F:A2:21:A6:99:E0:31:55:99:CD:F6:5A:7E:0E
Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
Certificate issuer: /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Certificate serial: 019A725C5684C473D652EE7554712926850C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:00:45 +0000
Manifest this update: Tue 11 Nov 2025 10:00:45 +0000
Manifest next update: Wed 12 Nov 2025 10:00:45 +0000
Files and hashes: 1: 1-QG4tCncv0FTtCHqg5B2GIvzr7Y.roa (hash: Y2rS+2UdPK85e7sE5yCklBS//u+UrJBVKAmv+QqSGio=)
2: guX7w-pSWnjGMMTahkuppg4Zm_8.crl (hash: 2ROageKwlSZ8nhsOuQeS1PVXfalj46PvaxOVcqNLWzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:56:84:c4:73:d6:52:ee:75:54:71:29:26:85:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Validity
Not Before: Nov 11 10:00:45 2025 GMT
Not After : Nov 12 10:00:45 2025 GMT
Subject: CN=5a9fa55ea13e4fa221a699e0315599cdf65a7e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1f:09:85:c7:01:16:22:67:dc:e2:e5:b2:05:
26:44:85:4c:37:9f:50:cc:24:15:ca:21:6b:42:d8:
22:28:aa:45:06:c1:7b:bc:c0:21:a0:75:bf:f1:3b:
41:ce:38:09:15:a3:ce:a4:c6:61:a1:b2:eb:74:2c:
f2:99:73:2c:80:56:a2:40:3c:bf:00:3a:87:a3:85:
94:33:1b:28:3f:39:f8:96:91:af:ad:8e:df:26:9b:
b4:4f:d8:f3:67:e3:35:26:65:3c:83:e7:6a:49:3b:
89:79:8b:82:91:eb:8f:5e:ca:36:37:76:92:74:76:
c5:13:21:a6:9d:bc:c0:37:f0:94:52:92:1d:69:12:
42:4f:39:35:4c:db:42:1b:db:23:8b:c9:d1:68:d5:
7e:da:60:e4:61:0a:fb:ce:49:c6:c2:11:bd:07:6a:
c7:90:11:5e:cf:8c:08:9a:a6:9c:3d:52:69:92:8a:
23:1b:c0:dd:46:a3:81:80:2a:37:46:ac:a0:36:26:
5a:87:ba:4c:c4:e4:a8:c6:d9:0d:d2:96:ea:1a:28:
6a:f4:a7:12:91:ee:dc:04:93:a0:6d:ca:a0:51:13:
2b:f8:b2:f4:42:c2:b7:82:77:9a:91:61:5d:59:db:
4e:cf:47:36:05:19:40:e9:2a:31:96:cb:95:b2:85:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9F:A5:5E:A1:3E:4F:A2:21:A6:99:E0:31:55:99:CD:F6:5A:7E:0E
X509v3 Authority Key Identifier:
keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f3:de:27:60:3e:b4:a4:e1:3e:b0:44:d5:43:04:6e:f7:7d:
af:4b:cd:76:10:0b:6f:3f:60:43:b6:37:90:46:ef:a6:27:24:
7f:7a:fd:7c:4a:c6:17:72:61:66:a6:a0:aa:27:a9:d2:63:fe:
ab:d9:7b:08:53:0e:88:78:21:e4:24:61:c3:2c:ce:d6:5a:f1:
fe:fe:dd:03:59:de:d0:bf:8c:5b:cf:e3:f8:3a:e7:49:7d:c7:
c8:60:f6:92:4a:07:c9:d2:1f:30:66:ff:af:3e:32:c1:40:dd:
44:5c:95:2e:d3:ea:c2:9c:48:a7:e4:6b:bb:17:ee:36:a6:8d:
85:12:32:96:c1:4c:ec:69:85:b2:f3:5e:99:48:80:62:3c:a4:
9f:60:00:90:ed:33:61:42:f5:52:3d:91:c7:02:ac:fd:cc:63:
dc:75:96:6b:ee:c7:78:67:c1:e2:58:42:bc:4f:77:a0:a8:71:
68:86:6f:9b:b4:d2:d9:14:5d:7e:a2:bc:57:76:7c:0d:ce:4c:
9c:44:bd:85:ba:07:ae:8d:b5:83:1c:10:77:af:4b:de:0e:97:
73:68:ad:8d:f5:4d:2c:ba:5b:b0:35:ed:0a:66:e1:60:44:c4:
70:1b:5d:4a:1b:9c:64:cd:f6:02:6d:86:fc:67:84:a1:f0:8c:
54:d4:c7:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXFaExHPWUu51VHEpJoUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTVmYmMzZWE1MjVhNzhjNjMwYzRkYTg2NGJhOWE2MGUx
OTliZmYwHhcNMjUxMTExMTAwMDQ1WhcNMjUxMTEyMTAwMDQ1WjAzMTEwLwYDVQQD
Eyg1YTlmYTU1ZWExM2U0ZmEyMjFhNjk5ZTAzMTU1OTljZGY2NWE3ZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB8JhccBFiJn3OLlsgUmRIVMN59Q
zCQVyiFrQtgiKKpFBsF7vMAhoHW/8TtBzjgJFaPOpMZhobLrdCzymXMsgFaiQDy/
ADqHo4WUMxsoPzn4lpGvrY7fJpu0T9jzZ+M1JmU8g+dqSTuJeYuCkeuPXso2N3aS
dHbFEyGmnbzAN/CUUpIdaRJCTzk1TNtCG9sji8nRaNV+2mDkYQr7zknGwhG9B2rH
kBFez4wImqacPVJpkoojG8DdRqOBgCo3RqygNiZah7pMxOSoxtkN0pbqGihq9KcS
ke7cBJOgbcqgURMr+LL0QsK3gneakWFdWdtOz0c2BRlA6SoxlsuVsoVj+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqfpV6hPk+iIaaZ4DFVmc32Wn4OMB8GA1UdIwQY
MBaAFILl+8PqUlp4xjDE2oZLqaYOGZv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yZWNlMjYtMTc4MS00NTVlLTgwYjMt
OTNkZDY1MDc0ODhlLzEvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8yZWNlMjYtMTc4MS00NTVlLTgwYjMtOTNkZDY1MDc0ODhl
LzEvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifPeJ2A+
tKThPrBE1UMEbvd9r0vNdhALbz9gQ7Y3kEbvpickf3r9fErGF3JhZqagqiep0mP+
q9l7CFMOiHgh5CRhwyzO1lrx/v7dA1ne0L+MW8/j+DrnSX3HyGD2kkoHydIfMGb/
rz4ywUDdRFyVLtPqwpxIp+RruxfuNqaNhRIylsFM7GmFsvNemUiAYjykn2AAkO0z
YUL1Uj2RxwKs/cxj3HWWa+7HeGfB4lhCvE93oKhxaIZvm7TS2RRdfqK8V3Z8Dc5M
nES9hboHro21gxwQd69L3g6Xc2itjfVNLLpbsDXtCmbhYETEcBtdShucZM32Am2G
/GeEofCMVNTHPw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:38 2025 by rpki-client