Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: P00Np5m1QR7gCsjj+7uBT19jE+Fuh7jP6+6eaLOtP1s=
Subject key identifier: 3E:6A:33:BA:D2:79:8B:A2:4D:AD:E2:B3:10:58:21:41:7C:EB:F9:95
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 019A096FEB5045376110C25EFB7E33979DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0B12
Signing time: Wed 22 Oct 2025 01:02:00 +0000
Manifest this update: Wed 22 Oct 2025 01:02:00 +0000
Manifest next update: Thu 23 Oct 2025 01:02:00 +0000
Files and hashes: 1: XTZ-6WhmzXiDDwFWajhChN4966c.roa (hash: 76eYyVPhyFyHfOEPHeaphAj0SWfwnKjZwUHP7osL/Jg=)
2: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: 5xwoRPGh19OcaCX40KHmcKzKijHQOKdpHL+tlfUGniY=)
3: kTc3tdsyRqEwIQUrDzGOak8nANc.roa (hash: 7cesO8GKLYeXhtn4E2bVxqR/wKRQ+h04HAytGr5/XYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:6f:eb:50:45:37:61:10:c2:5e:fb:7e:33:97:9d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Oct 22 01:02:00 2025 GMT
Not After : Oct 23 01:02:00 2025 GMT
Subject: CN=3e6a33bad2798ba24dade2b3105821417cebf995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b8:48:cb:e5:3d:59:78:43:62:0e:31:c7:43:
b2:cf:4b:ef:b0:2c:58:d9:28:c2:15:d5:d2:f3:2c:
5a:bd:c0:b4:e5:65:7e:1e:80:a9:ee:c6:09:73:fa:
08:d5:1c:ea:d1:e7:4a:ff:e4:0c:30:c8:50:92:dd:
74:cd:d0:a9:61:22:01:44:fb:9d:dd:3f:39:4b:95:
c6:ce:07:82:51:86:e2:b1:bb:40:51:71:5a:c2:85:
62:57:6e:be:d4:2d:2f:fa:2b:61:99:11:12:89:91:
e5:11:62:7e:aa:49:1c:df:85:53:e1:66:42:95:e4:
17:7a:fd:d4:81:8a:eb:0d:e6:60:09:4c:4e:65:7d:
c3:bf:41:bf:dd:4c:3b:84:44:64:e5:f7:6e:22:9d:
1f:7c:d8:1b:1c:0c:f9:00:98:db:6f:38:7d:f0:b3:
4a:98:c5:b2:df:ce:69:e4:1a:50:75:63:c8:40:b7:
0b:7d:4f:be:50:02:01:72:16:6c:c7:75:15:9b:42:
bf:e7:b4:aa:fc:7b:a1:fc:44:f8:dc:80:37:82:23:
71:b3:92:f7:cb:b7:2e:f6:52:2c:d9:cd:40:32:b3:
a5:23:2c:d6:36:c8:50:6b:58:90:5f:a3:a8:dc:9e:
06:ef:f4:cb:06:d5:b4:4d:ac:02:c1:4a:f6:7e:a0:
a1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6A:33:BA:D2:79:8B:A2:4D:AD:E2:B3:10:58:21:41:7C:EB:F9:95
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:53:d5:53:30:d6:67:de:7d:34:7b:b8:75:b1:a7:2b:ee:8c:
7f:3d:43:58:16:52:33:6e:a3:ea:67:58:78:d8:ce:68:38:18:
ca:93:21:7c:4e:7f:ba:6a:de:f8:0b:b8:87:fb:6c:8b:78:4f:
ab:b9:0d:1b:94:97:95:f0:c2:1f:b1:d3:4f:3b:32:c3:bd:c7:
9d:f5:dd:66:36:63:55:10:f3:b7:05:eb:2a:2e:8d:76:a7:6e:
32:cd:98:a1:3b:dc:d5:1c:47:34:31:2b:66:13:59:32:64:e7:
24:43:cf:1c:17:64:9e:3f:1e:65:18:eb:94:d4:dd:78:dd:6f:
33:96:72:5e:2a:b9:38:4e:e5:5d:cb:98:20:15:cc:eb:fd:bd:
e7:7c:ad:fd:ed:a8:b8:2b:00:42:c5:b3:c2:90:fd:83:91:70:
5e:46:ac:75:90:fa:4d:e8:65:ab:13:42:c0:b4:85:73:d5:b3:
1c:32:b0:6d:de:88:04:6b:59:1d:76:f8:f9:7e:09:41:ba:1b:
2f:39:f4:b1:24:4f:22:96:ae:4a:6b:f7:9d:80:b4:53:21:7a:
2f:fd:c3:0f:c4:43:f8:ba:a5:28:0d:a1:7a:b2:29:c5:c8:a3:
18:44:be:4a:ba:ea:ea:84:6a:3c:50:0e:39:82:a8:8f:c0:5c:
b2:b6:1c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 11:55:03 2025 by rpki-client