Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: JfqOSbhU3Z0FeniPO/EY1JONUG6pqQjsx6b9jara4zA=
Subject key identifier: BB:47:FF:7B:A2:59:47:30:9A:87:59:DB:62:89:DA:5F:1F:95:E6:A0
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 01974666EF7D7DE35871E3ACE79F014C53B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 09A4
Signing time: Fri 06 Jun 2025 18:00:40 +0000
Manifest this update: Fri 06 Jun 2025 18:00:40 +0000
Manifest next update: Sat 07 Jun 2025 18:00:40 +0000
Files and hashes: 1: XTZ-6WhmzXiDDwFWajhChN4966c.roa (hash: 76eYyVPhyFyHfOEPHeaphAj0SWfwnKjZwUHP7osL/Jg=)
2: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: 9B6r92nBHy9FBUz3/JWpeAwKwomDCIsGtmzFPtW5ijM=)
3: kTc3tdsyRqEwIQUrDzGOak8nANc.roa (hash: 7cesO8GKLYeXhtn4E2bVxqR/wKRQ+h04HAytGr5/XYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:ef:7d:7d:e3:58:71:e3:ac:e7:9f:01:4c:53:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Jun 6 18:00:40 2025 GMT
Not After : Jun 7 18:00:40 2025 GMT
Subject: CN=bb47ff7ba25947309a8759db6289da5f1f95e6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:b6:6f:21:70:72:e9:40:04:b5:32:ff:fc:
52:82:cc:fa:eb:b8:5d:94:8b:3e:8a:dd:59:6e:6c:
0d:db:4f:07:cf:1e:4c:bc:20:d9:cc:67:b9:4b:8f:
48:bb:f1:63:e2:63:1d:4b:88:ff:26:14:91:39:4b:
07:e9:6e:3a:b2:52:4d:6b:52:c5:56:5d:cf:f2:45:
f4:2a:d3:80:0a:df:db:56:77:fc:5b:b6:60:83:6e:
bf:7e:95:0d:7e:f5:c7:b8:7d:8e:d2:b6:f8:fd:13:
f0:e4:d2:8d:70:2a:e1:60:28:4d:5f:79:ff:ef:00:
cc:3e:60:40:dc:2a:26:19:5d:68:f0:cc:e5:20:90:
ce:87:37:7d:38:8d:3b:41:63:48:a5:b4:ec:a1:ee:
40:24:0e:90:74:a8:fa:8e:fa:5a:1b:ab:04:9e:ee:
31:a6:3d:e6:1d:f0:e3:ea:a5:ec:1c:bb:a9:de:a2:
21:32:49:8b:58:97:02:0a:6e:01:6c:a0:6a:75:fa:
01:0d:41:bb:97:27:bd:59:e5:bf:ef:a7:ec:7e:54:
ad:63:4e:fe:26:f5:3a:6c:3b:20:84:1a:e0:4d:ea:
85:b6:ed:ce:1b:4a:b2:96:fa:a9:69:45:68:4b:28:
c5:2d:b5:00:56:12:77:26:ea:e9:17:f3:45:53:a5:
04:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:47:FF:7B:A2:59:47:30:9A:87:59:DB:62:89:DA:5F:1F:95:E6:A0
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:87:d5:da:73:ab:76:b9:2c:12:a2:ed:77:43:ea:ef:2a:72:
54:06:03:99:0b:7d:a8:f3:c2:d0:96:2f:b8:d6:26:56:b1:05:
81:a0:9f:4c:13:e3:93:ae:05:0f:e2:57:c9:9e:3e:6a:93:53:
e2:79:97:f5:76:72:27:3f:6f:97:e9:6c:7a:0e:c2:44:24:77:
51:a5:b9:80:6b:9f:6d:1e:9c:03:db:b8:25:3f:85:fa:aa:97:
3d:57:76:b1:7d:36:ce:3f:5e:fb:46:59:d2:18:c3:97:9c:13:
51:2e:0e:22:87:c3:6b:34:ba:9c:cb:f9:93:5e:93:ec:63:b5:
f7:5d:3e:35:37:79:81:4a:04:bf:a2:0d:a2:fa:f5:ca:5d:55:
84:f4:0b:b2:89:93:98:b9:f5:05:ca:f5:31:e1:65:aa:0b:9a:
02:6c:53:99:a4:61:f2:d0:a9:9c:b9:42:d0:da:d0:75:97:99:
2b:c6:5d:33:05:26:ba:e9:b9:eb:1a:a2:25:3a:bf:b8:29:09:
e2:95:e9:8a:3e:75:a6:15:68:3f:87:47:76:a2:71:1e:9c:19:
af:ea:6a:3d:8f:1e:12:d8:3a:c6:fe:ff:42:e9:da:cd:d7:af:
6e:e3:aa:e3:0f:7d:3b:7e:a6:63:32:29:e7:3f:76:91:ba:b9:
a3:b2:0a:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZu99feNYceOs558BTFO2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTAxNGYxYzhjYTM5NjZhOTNlZjM5ZGJjNjEyZGFhYzBk
ODNkYzAwHhcNMjUwNjA2MTgwMDQwWhcNMjUwNjA3MTgwMDQwWjAzMTEwLwYDVQQD
EyhiYjQ3ZmY3YmEyNTk0NzMwOWE4NzU5ZGI2Mjg5ZGE1ZjFmOTVlNmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7S2byFwculABLUy//xSgsz667hd
lIs+it1ZbmwN208Hzx5MvCDZzGe5S49Iu/Fj4mMdS4j/JhSROUsH6W46slJNa1LF
Vl3P8kX0KtOACt/bVnf8W7Zgg26/fpUNfvXHuH2O0rb4/RPw5NKNcCrhYChNX3n/
7wDMPmBA3ComGV1o8MzlIJDOhzd9OI07QWNIpbTsoe5AJA6QdKj6jvpaG6sEnu4x
pj3mHfDj6qXsHLup3qIhMkmLWJcCCm4BbKBqdfoBDUG7lye9WeW/76fsflStY07+
JvU6bDsghBrgTeqFtu3OG0qylvqpaUVoSyjFLbUAVhJ3JurpF/NFU6UEfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtH/3uiWUcwmodZ22KJ2l8fleagMB8GA1UdIwQY
MBaAFILgFPHIyjlmqT7znbxhLarA2D3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGIt
NjZkODBlZDA5YmM3LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGItNjZkODBlZDA5YmM3
LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIfV2nOr
drksEqLtd0Pq7ypyVAYDmQt9qPPC0JYvuNYmVrEFgaCfTBPjk64FD+JXyZ4+apNT
4nmX9XZyJz9vl+lseg7CRCR3UaW5gGufbR6cA9u4JT+F+qqXPVd2sX02zj9e+0ZZ
0hjDl5wTUS4OIofDazS6nMv5k16T7GO1910+NTd5gUoEv6INovr1yl1VhPQLsomT
mLn1Bcr1MeFlqguaAmxTmaRh8tCpnLlC0NrQdZeZK8ZdMwUmuum56xqiJTq/uCkJ
4pXpij51phVoP4dHdqJxHpwZr+pqPY8eEtg6xv7/QunazdevbuOq4w99O36mYzIp
5z92kbq5o7IKEA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:21:14 2025 by rpki-client