Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
File: guOWgcWq77NeVPStivpCjU_94Go.mft (raw, json)
Hash identifier: QPHRU13qBioaHtiVMoc3sjNtt/8EK0TXsNt+xjDi5Mg=
Subject key identifier: EA:67:39:B7:C3:48:BF:20:E7:2D:1A:B3:6C:BA:09:EF:A7:7A:44:65
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Certificate issuer: /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial: 01993424FD0B41D7753F054C99643D0CAB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
Manifest number: 0E77
Signing time: Wed 10 Sep 2025 15:01:03 +0000
Manifest this update: Wed 10 Sep 2025 15:01:03 +0000
Manifest next update: Thu 11 Sep 2025 15:01:03 +0000
Files and hashes: 1: FqQHS5x0K7fb3ABv-R1O2rQGEvc.roa (hash: 2VetqHsWLuCtCZQI5pXnNL52eNemAp797/ha4XRoM7M=)
2: _FNnAfXHIK3mS0z3F15N5D4m-eE.roa (hash: AzmbPxnJj3q2Pp6UGPDbM97rM3z/NgrygHufcP5z/7g=)
3: guOWgcWq77NeVPStivpCjU_94Go.crl (hash: cUna9ishIMm9w9465XJ4uT18jWxmBsZXGh3A1i2EH7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:fd:0b:41:d7:75:3f:05:4c:99:64:3d:0c:ab:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Validity
Not Before: Sep 10 15:01:03 2025 GMT
Not After : Sep 11 15:01:03 2025 GMT
Subject: CN=ea6739b7c348bf20e72d1ab36cba09efa77a4465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:9f:02:51:bf:cc:25:c2:0e:0f:51:0c:ef:
b7:55:9e:09:4a:b1:8d:0d:1c:a9:b8:c8:dd:c8:47:
c6:33:0d:6a:b3:9c:51:50:36:31:85:72:68:e2:38:
a3:2a:bd:d6:ba:a8:8f:e9:09:7a:b3:2d:7d:8e:a7:
b5:55:10:c0:6e:8a:4e:18:dd:83:fb:ba:cf:66:f5:
e0:7b:94:73:44:c8:b3:c8:77:56:1b:55:34:63:28:
f2:f3:42:81:b4:87:e1:ad:ad:07:d9:3e:41:bb:2f:
fe:73:35:c3:35:d5:d9:29:b6:8b:00:86:12:32:d1:
eb:02:0f:0c:87:58:04:4b:52:5c:c8:2e:91:e2:7c:
99:18:ea:4a:67:34:a4:31:12:cc:c4:51:07:73:30:
04:57:84:f4:65:b2:4c:9f:4c:f9:81:f7:89:f9:d8:
85:c8:07:73:c8:e9:71:70:38:5d:56:6e:4a:21:83:
bb:b9:0d:b3:9c:4c:f3:a4:5e:3b:3b:ce:ab:5c:a1:
c9:8e:8e:a3:f0:a3:44:78:a5:1a:a6:62:0b:f0:73:
f1:04:a6:44:f0:c2:93:6d:61:81:a7:4e:a6:64:c6:
1b:58:b7:93:99:69:dd:7a:8e:70:e9:f1:8e:12:ab:
82:47:ad:cd:3f:80:ee:b5:77:7e:fe:c6:71:36:30:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:67:39:B7:C3:48:BF:20:E7:2D:1A:B3:6C:BA:09:EF:A7:7A:44:65
X509v3 Authority Key Identifier:
keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fd:85:2e:2f:ec:6a:11:fe:b8:49:b4:4d:86:6c:d0:73:21:
9f:86:5f:1d:09:55:c3:ef:99:00:ee:e7:72:a8:8a:f7:e1:f9:
d0:f9:af:fc:9a:2e:7d:1d:05:ce:9b:79:0c:bf:16:f1:7b:50:
f5:c8:85:49:1a:3a:38:43:60:8e:0b:86:6b:fd:19:f5:21:6b:
af:25:24:d3:e3:10:3b:39:cf:42:11:6a:6a:96:3b:bd:b1:67:
bb:18:af:fc:00:16:97:8e:bf:49:7d:38:ba:80:45:92:16:32:
fe:1d:c4:11:ac:8d:ed:fc:8b:88:55:91:71:ea:19:ae:0a:45:
0d:c5:0f:89:01:8e:cd:bc:f9:98:09:1d:16:56:2c:a2:e9:cf:
2e:9f:0c:26:96:03:74:87:e7:b4:b8:3b:4d:c5:a1:de:04:b6:
b0:62:1f:60:a1:4c:83:3f:b4:9f:80:8f:c4:05:d1:fa:52:f0:
13:8a:e4:dd:83:7e:a7:30:7f:ad:af:9e:c5:95:69:04:a6:d8:
f1:27:05:08:91:14:a1:24:76:3e:d0:d8:1e:ba:36:f9:44:be:
f6:6a:1a:94:cb:99:31:45:52:ee:15:b4:c1:33:48:c2:3c:31:
b5:3c:2c:72:2d:b7:0c:5e:18:64:08:f9:4a:cb:47:18:f6:f6:
ca:7a:62:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:03:53 2025 by rpki-client