Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
File: guOWgcWq77NeVPStivpCjU_94Go.mft (raw, json)
Hash identifier: D2faq35VEpyMA8GJkzpWN0dgx9F3ZMKIRI1pFGXNnUM=
Subject key identifier: F9:42:A4:20:21:15:0A:1E:D5:13:C0:E0:28:6A:20:26:6A:AE:E1:E6
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Certificate issuer: /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial: 019A21ADD90D2A5EDD93CA8307A5BF2DB373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
Manifest number: 0EF2
Signing time: Sun 26 Oct 2025 18:00:32 +0000
Manifest this update: Sun 26 Oct 2025 18:00:32 +0000
Manifest next update: Mon 27 Oct 2025 18:00:32 +0000
Files and hashes: 1: FqQHS5x0K7fb3ABv-R1O2rQGEvc.roa (hash: 2VetqHsWLuCtCZQI5pXnNL52eNemAp797/ha4XRoM7M=)
2: _FNnAfXHIK3mS0z3F15N5D4m-eE.roa (hash: AzmbPxnJj3q2Pp6UGPDbM97rM3z/NgrygHufcP5z/7g=)
3: guOWgcWq77NeVPStivpCjU_94Go.crl (hash: k5OFi2R41jyuW2JGiHnZ9KfUaXzn6stQnMts/t6Vjnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:d9:0d:2a:5e:dd:93:ca:83:07:a5:bf:2d:b3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Validity
Not Before: Oct 26 18:00:32 2025 GMT
Not After : Oct 27 18:00:32 2025 GMT
Subject: CN=f942a42021150a1ed513c0e0286a20266aaee1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:5c:a9:73:04:bb:e0:bb:93:98:b4:fb:31:
aa:72:d2:d2:24:ba:82:7a:24:e8:f1:a8:60:55:0b:
b0:85:88:41:0a:50:24:04:53:29:73:c7:31:30:65:
f8:2f:66:60:b4:8a:5e:34:a3:6f:b6:f6:61:8f:98:
67:9f:66:ea:ab:c2:f6:21:23:2d:fb:77:86:d5:6f:
df:a0:b3:eb:71:f9:77:a3:0d:d2:c6:7b:31:8a:e3:
05:c2:48:57:b3:8f:bc:b0:a6:a3:73:04:a4:7b:6c:
cc:16:a6:0e:a3:09:32:8c:bb:11:dd:5e:2f:df:21:
53:af:57:33:86:da:b0:cb:08:6f:21:b3:2a:e5:d0:
9c:5c:cc:d2:ab:43:e8:33:34:c9:41:2f:fe:04:b3:
7d:b8:8e:35:a7:56:c9:0f:28:21:3b:b5:29:42:7e:
a4:7c:90:f8:58:a4:5b:9b:37:f3:de:d7:58:b5:f8:
c3:85:c8:ef:cc:49:4a:59:3d:c7:fa:81:de:ca:36:
18:1e:9d:e4:3c:11:1a:bb:e0:77:ed:b5:ae:0a:5b:
e2:07:7e:c3:1a:46:99:04:56:af:a4:07:1e:35:03:
8b:b9:a2:ae:bc:1e:cf:92:39:70:b7:1a:16:d6:71:
46:3d:6d:6a:a4:32:86:fb:5f:de:0d:6c:58:0a:85:
6f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:42:A4:20:21:15:0A:1E:D5:13:C0:E0:28:6A:20:26:6A:AE:E1:E6
X509v3 Authority Key Identifier:
keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d7:b1:a9:8a:60:1e:3f:bc:1b:c6:96:1d:9b:8e:32:de:07:
5b:e2:6d:eb:19:62:6d:e2:ba:70:33:b8:c8:2d:a5:61:ed:5e:
49:89:66:78:6c:4b:0f:40:7b:8e:31:05:e2:f0:39:4d:cd:4a:
4d:a2:76:55:b4:53:a7:85:bf:61:31:63:3c:2d:df:e5:89:93:
95:c8:0f:23:85:19:ee:8b:d4:15:9f:fb:67:15:4c:b7:c0:80:
2d:99:71:17:ed:27:f5:63:8b:01:3c:3e:88:2f:32:e1:9d:57:
7d:ed:96:32:5a:78:1f:16:d6:ff:0b:1b:1c:03:b7:1e:ed:8b:
26:75:1e:f0:d9:10:fd:3f:9e:54:94:4a:d1:81:52:48:48:d3:
a1:a1:fd:06:71:14:bd:a3:dc:9d:86:38:46:3c:c8:1f:ff:a4:
49:d4:f8:85:b0:21:87:cb:18:3b:40:80:60:e8:f4:16:d9:2c:
01:ce:f5:5d:dc:b8:61:fe:f3:5e:96:63:96:ca:be:da:e7:69:
c7:1c:61:12:d2:77:b5:ef:d7:89:cd:ac:c8:e1:e2:c8:15:2d:
29:09:73:8e:b4:fb:ef:06:1a:d5:5a:1b:fc:c8:91:0b:31:8f:
3f:30:34:2d:fb:c2:58:20:c4:38:ae:07:06:9c:05:63:0f:f4:
8d:f8:52:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohrdkNKl7dk8qDB6W/LbNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTM5NjgxYzVhYWVmYjM1ZTU0ZjRhZDhhZmE0MjhkNGZm
ZGUwNmEwHhcNMjUxMDI2MTgwMDMyWhcNMjUxMDI3MTgwMDMyWjAzMTEwLwYDVQQD
EyhmOTQyYTQyMDIxMTUwYTFlZDUxM2MwZTAyODZhMjAyNjZhYWVlMWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8dcqXMEu+C7k5i0+zGqctLSJLqC
eiTo8ahgVQuwhYhBClAkBFMpc8cxMGX4L2ZgtIpeNKNvtvZhj5hnn2bqq8L2ISMt
+3eG1W/foLPrcfl3ow3SxnsxiuMFwkhXs4+8sKajcwSke2zMFqYOowkyjLsR3V4v
3yFTr1czhtqwywhvIbMq5dCcXMzSq0PoMzTJQS/+BLN9uI41p1bJDyghO7UpQn6k
fJD4WKRbmzfz3tdYtfjDhcjvzElKWT3H+oHeyjYYHp3kPBEau+B37bWuClviB37D
GkaZBFavpAceNQOLuaKuvB7PkjlwtxoW1nFGPW1qpDKG+1/eDWxYCoVvAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlCpCAhFQoe1RPA4ChqICZqruHmMB8GA1UdIwQY
MBaAFILjloHFqu+zXlT0rYr6Qo1P/eBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81N2I1M2UtMzAwMy00NmE2LTljZTgt
ZmFmZDE0OTZhZTU5LzEvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81N2I1M2UtMzAwMy00NmE2LTljZTgtZmFmZDE0OTZhZTU5
LzEvZ3VPV2djV3E3N05lVlBTdGl2cENqVV85NEdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdexqYpg
Hj+8G8aWHZuOMt4HW+Jt6xlibeK6cDO4yC2lYe1eSYlmeGxLD0B7jjEF4vA5Tc1K
TaJ2VbRTp4W/YTFjPC3f5YmTlcgPI4UZ7ovUFZ/7ZxVMt8CALZlxF+0n9WOLATw+
iC8y4Z1Xfe2WMlp4HxbW/wsbHAO3Hu2LJnUe8NkQ/T+eVJRK0YFSSEjToaH9BnEU
vaPcnYY4RjzIH/+kSdT4hbAhh8sYO0CAYOj0FtksAc71Xdy4Yf7zXpZjlsq+2udp
xxxhEtJ3te/Xic2syOHiyBUtKQlzjrT77wYa1Vob/MiRCzGPPzA0LfvCWCDEOK4H
BpwFYw/0jfhSDw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 22:54:16 2025 by rpki-client