
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
File: guOWgcWq77NeVPStivpCjU_94Go.mft (raw, json)
Hash identifier: nkRWS7UJd+GqoAF9qEwFL10+xxR0S0bKSLWziQc8gqg=
Subject key identifier: 96:93:56:25:B0:ED:65:E5:F9:01:AF:54:7A:33:07:18:4A:C2:FA:DD
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Certificate issuer: /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial: 01974B8D573E3582CE87AAEA29AC2BC6BF35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
Manifest number: 0D7A
Signing time: Sat 07 Jun 2025 18:00:43 +0000
Manifest this update: Sat 07 Jun 2025 18:00:43 +0000
Manifest next update: Sun 08 Jun 2025 18:00:43 +0000
Files and hashes: 1: FqQHS5x0K7fb3ABv-R1O2rQGEvc.roa (hash: 2VetqHsWLuCtCZQI5pXnNL52eNemAp797/ha4XRoM7M=)
2: _FNnAfXHIK3mS0z3F15N5D4m-eE.roa (hash: AzmbPxnJj3q2Pp6UGPDbM97rM3z/NgrygHufcP5z/7g=)
3: guOWgcWq77NeVPStivpCjU_94Go.crl (hash: HE/2XDOxdj9JUKuQ5/nt9TMlmlJNc4OncrzpuiTUMNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:57:3e:35:82:ce:87:aa:ea:29:ac:2b:c6:bf:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Validity
Not Before: Jun 7 18:00:43 2025 GMT
Not After : Jun 8 18:00:43 2025 GMT
Subject: CN=96935625b0ed65e5f901af547a3307184ac2fadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a4:56:f6:ea:6e:40:ff:0c:54:0d:3f:a6:83:
f6:a8:1f:54:dc:a9:4c:3c:39:d6:10:4d:d4:b2:95:
b3:0f:3d:d0:85:95:86:b9:e7:39:3c:99:32:9c:b0:
14:bf:f9:37:06:b0:0c:10:aa:cf:b7:43:01:4c:28:
9f:85:39:aa:11:d4:2e:66:bb:23:56:ea:b3:6d:3b:
ae:e5:3c:44:c3:4c:64:6f:f3:dc:71:ae:43:56:8d:
e6:4f:23:5f:1e:ac:dc:1b:ab:97:35:eb:c0:54:2a:
81:2e:c6:70:ad:4e:e9:f0:ea:73:9d:f7:30:14:53:
16:ad:8c:be:83:0e:5e:86:ca:ba:06:cc:31:4c:39:
0f:2b:a5:86:9b:24:37:14:a3:8d:69:ed:b8:cf:48:
c9:15:1f:71:2c:4e:d0:79:55:71:a3:a8:5b:ab:0b:
4b:60:c7:04:aa:3d:ef:22:82:ee:8c:59:4b:86:6d:
a9:55:54:d0:92:c3:dc:5f:0f:7a:2f:f4:5a:52:4a:
b9:12:a1:56:90:3d:65:78:f4:7a:b8:8b:58:54:f4:
4e:19:c3:73:9e:8b:30:ef:12:e4:d2:1f:c6:59:d2:
6b:6c:f7:12:16:d9:27:d9:87:63:d6:7c:26:50:44:
92:59:88:2e:ec:e3:66:d5:7d:4c:61:f7:7d:af:71:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:93:56:25:B0:ED:65:E5:F9:01:AF:54:7A:33:07:18:4A:C2:FA:DD
X509v3 Authority Key Identifier:
keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:51:46:a8:fa:63:b5:32:56:35:2e:2b:8d:8d:43:48:67:d3:
5d:3b:69:e8:8d:9f:77:e3:0a:a5:31:b8:ff:e7:48:23:4a:67:
f1:47:00:3b:af:18:35:60:0e:99:45:06:7e:95:ae:24:02:ac:
fd:5f:d1:70:c5:38:95:ab:71:79:77:e5:67:23:c6:fe:0f:95:
76:b7:56:01:98:f2:cd:1d:18:1a:ca:da:86:de:6d:27:5f:49:
66:98:7d:ab:71:82:b8:e8:4d:3a:b6:86:ca:bf:36:e4:fb:2b:
aa:7e:f5:89:e8:56:b0:b3:ff:18:5d:ff:71:fc:e9:16:41:61:
73:f9:9d:34:97:9f:72:37:59:bc:a4:fb:3f:ae:bf:13:a3:15:
f0:bf:ae:a6:b5:a5:31:08:49:83:42:8d:e9:93:22:af:d5:b9:
19:90:94:54:1d:31:9a:0b:74:26:34:ef:6e:0a:e9:43:1a:16:
07:43:7a:44:c2:65:c5:1b:0f:26:0f:48:97:da:84:20:be:63:
24:c4:6d:35:a4:93:02:06:69:ea:3f:31:01:48:17:e3:50:f3:
1c:47:7f:64:79:e2:3b:f0:9d:35:f2:4a:c0:22:3f:d6:98:76:
be:2a:db:2b:4f:6a:cf:d2:78:b6:c5:9e:41:cb:21:8a:51:a7:
64:69:1a:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjVc+NYLOh6rqKawrxr81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTM5NjgxYzVhYWVmYjM1ZTU0ZjRhZDhhZmE0MjhkNGZm
ZGUwNmEwHhcNMjUwNjA3MTgwMDQzWhcNMjUwNjA4MTgwMDQzWjAzMTEwLwYDVQQD
Eyg5NjkzNTYyNWIwZWQ2NWU1ZjkwMWFmNTQ3YTMzMDcxODRhYzJmYWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaRW9upuQP8MVA0/poP2qB9U3KlM
PDnWEE3UspWzDz3QhZWGuec5PJkynLAUv/k3BrAMEKrPt0MBTCifhTmqEdQuZrsj
VuqzbTuu5TxEw0xkb/Pcca5DVo3mTyNfHqzcG6uXNevAVCqBLsZwrU7p8Opznfcw
FFMWrYy+gw5ehsq6BswxTDkPK6WGmyQ3FKONae24z0jJFR9xLE7QeVVxo6hbqwtL
YMcEqj3vIoLujFlLhm2pVVTQksPcXw96L/RaUkq5EqFWkD1lePR6uItYVPROGcNz
nosw7xLk0h/GWdJrbPcSFtkn2Ydj1nwmUESSWYgu7ONm1X1MYfd9r3F9qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaTViWw7WXl+QGvVHozBxhKwvrdMB8GA1UdIwQY
MBaAFILjloHFqu+zXlT0rYr6Qo1P/eBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81N2I1M2UtMzAwMy00NmE2LTljZTgt
ZmFmZDE0OTZhZTU5LzEvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81N2I1M2UtMzAwMy00NmE2LTljZTgtZmFmZDE0OTZhZTU5
LzEvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1FGqPpj
tTJWNS4rjY1DSGfTXTtp6I2fd+MKpTG4/+dII0pn8UcAO68YNWAOmUUGfpWuJAKs
/V/RcMU4latxeXflZyPG/g+VdrdWAZjyzR0YGsraht5tJ19JZph9q3GCuOhNOraG
yr825Psrqn71iehWsLP/GF3/cfzpFkFhc/mdNJefcjdZvKT7P66/E6MV8L+uprWl
MQhJg0KN6ZMir9W5GZCUVB0xmgt0JjTvbgrpQxoWB0N6RMJlxRsPJg9Il9qEIL5j
JMRtNaSTAgZp6j8xAUgX41DzHEd/ZHniO/CdNfJKwCI/1ph2virbK09qz9J4tsWe
QcshilGnZGkaoA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:19:53 2025 by rpki-client