Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: xVkVEitz8UtN9y0CB7ugWWYwSLsdUxMbWsK2muO6ogE=
Subject key identifier: 75:18:14:B9:B3:8A:1E:33:9C:A4:D3:2B:B0:76:06:96:B8:8D:D0:3E
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 019963FE270B5977D3937A8577D919563EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 1694
Signing time: Fri 19 Sep 2025 22:00:24 +0000
Manifest this update: Fri 19 Sep 2025 22:00:24 +0000
Manifest next update: Sat 20 Sep 2025 22:00:24 +0000
Files and hashes: 1: ZBzIfVthsK0IsXsJf3cg7sZHKWM.roa (hash: QAbyT2QSC2brj0n8JNXKmo27qkYMllHPEba5ZlKG1ys=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: lwHtpi3rymjWZ+00qpicJ56yBFf3tHm54zei/2j/2Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:fe:27:0b:59:77:d3:93:7a:85:77:d9:19:56:3e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Sep 19 22:00:24 2025 GMT
Not After : Sep 20 22:00:24 2025 GMT
Subject: CN=751814b9b38a1e339ca4d32bb0760696b88dd03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:9d:f0:84:a5:41:8e:6d:11:f3:c0:52:e8:
09:ba:18:34:86:a1:74:6a:bb:b3:58:b2:72:4a:f0:
d7:c4:da:7a:3f:78:4f:b1:af:18:48:35:47:4b:bc:
c6:11:43:56:88:fa:43:99:68:38:1e:a2:00:9d:50:
f3:26:7c:c3:25:fa:76:0f:7b:1a:69:0f:7b:c2:9d:
2c:20:bd:f0:54:c1:68:44:bc:42:ed:04:c3:33:87:
07:fc:00:bd:d5:5e:f7:18:51:a2:c4:d3:01:a5:08:
a4:fc:23:97:af:9d:86:43:41:7b:ed:f8:fe:d0:c5:
3e:ec:89:63:77:46:21:46:2a:65:a1:b9:9a:48:d8:
e2:ab:e7:63:2c:1e:24:e3:24:9c:71:86:c9:d5:41:
a5:78:86:33:d0:ef:a7:07:ae:81:55:1c:ac:25:5a:
82:de:2b:db:22:b7:21:86:18:ca:ee:52:a3:a1:cb:
6f:59:0c:fc:6d:1b:d0:f4:8c:6d:09:8c:f7:26:34:
e3:07:c1:15:fb:81:f6:60:04:16:cd:28:39:f7:ec:
b7:1c:d6:7c:e9:31:86:fc:31:00:44:97:ff:97:02:
0e:01:6d:ac:05:40:08:d8:1b:c9:34:a7:7c:4c:fa:
eb:df:20:14:2c:3b:d2:54:b2:4b:ff:e4:ae:61:cb:
ce:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:18:14:B9:B3:8A:1E:33:9C:A4:D3:2B:B0:76:06:96:B8:8D:D0:3E
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4e:14:b1:7c:44:4a:f9:e2:75:b6:c0:91:d6:f3:c7:34:f0:
0e:76:88:35:f2:b2:9c:b4:5d:7b:4a:3e:09:c0:7d:f4:01:b5:
b9:12:49:29:9c:5c:49:35:90:b3:cd:36:ea:e2:5a:37:cf:be:
9e:1e:96:36:37:40:17:00:19:06:3b:9f:65:c5:a4:ad:26:ac:
30:dc:82:97:87:3a:86:98:dd:2d:e5:f8:4b:f7:37:6f:c7:70:
f9:2e:a6:e3:d9:68:af:e4:e7:22:cb:6c:62:df:2c:ea:24:3a:
cc:c9:33:35:73:86:4d:fd:79:17:81:b1:1b:93:4f:69:b7:5c:
0e:bc:14:1d:a3:63:f8:38:ef:7d:cf:ca:de:4a:f2:04:48:d1:
4f:2f:e5:bf:9d:16:4b:e4:44:6a:21:c5:f4:ce:7d:ed:45:41:
37:c4:47:cc:c5:ba:cc:94:b1:5d:b7:ae:c7:20:19:23:19:77:
68:b3:6e:9e:c3:93:84:5d:27:90:2a:f1:b2:e0:48:eb:ec:97:
d5:ec:05:50:77:67:7d:03:aa:1b:55:fd:7c:e4:f9:a8:7f:5c:
ab:fe:43:da:df:1f:a3:18:a1:1d:45:88:49:5a:9c:9e:fb:b4:
52:d1:54:1f:07:ca:83:4d:bc:6a:d5:dd:c4:e8:e8:47:39:57:
f2:60:69:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:36:21 2025 by rpki-client