Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: F9zn0NhRDBFlHTQ0ldwvYEdiKpZjzjPF1UBpTqa11Us=
Subject key identifier: DA:F3:33:69:A4:56:50:FD:A1:36:1B:2A:14:43:26:0E:B3:17:0D:DA
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 019A4DAAF2A6E911E247FCB32836311BC291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 07:00:40 +0000
Manifest this update: Tue 04 Nov 2025 07:00:40 +0000
Manifest next update: Wed 05 Nov 2025 07:00:40 +0000
Files and hashes: 1: ZBzIfVthsK0IsXsJf3cg7sZHKWM.roa (hash: QAbyT2QSC2brj0n8JNXKmo27qkYMllHPEba5ZlKG1ys=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: //QwEcZAmoC6MMbsDwMvbQWATgMKgst/y4x8L7XWPEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:f2:a6:e9:11:e2:47:fc:b3:28:36:31:1b:c2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Nov 4 07:00:40 2025 GMT
Not After : Nov 5 07:00:40 2025 GMT
Subject: CN=daf33369a45650fda1361b2a1443260eb3170dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:68:be:ee:84:e5:84:85:0e:df:ac:df:19:
f2:fb:0d:e9:67:1f:66:35:80:bb:5a:60:4b:de:ed:
c1:c8:3a:10:c1:9a:52:6c:e4:a4:4f:04:8b:d7:91:
93:8f:d8:fa:15:17:00:54:96:d7:71:32:f3:b0:60:
89:99:9c:78:fb:8d:da:be:ba:9d:49:c5:1e:0d:9c:
72:29:87:47:a2:ef:79:e5:fc:40:30:ad:4b:78:50:
ab:d0:4c:de:28:64:78:8e:87:4b:4c:71:09:31:c4:
9b:97:61:5d:90:50:22:2f:ea:52:e5:7e:57:c5:12:
85:72:cf:27:a3:2b:4d:e7:ca:d6:77:d3:a7:88:7b:
38:3e:a7:f2:f2:44:e8:49:3e:1d:4e:74:51:34:3a:
75:b1:2e:01:0e:44:72:75:1c:6b:44:0f:65:ba:c8:
8f:6c:b8:ff:72:b5:73:af:b3:4d:a5:bc:c8:54:f4:
f9:90:5f:2c:c1:ff:a2:46:2f:a6:09:a2:6e:cf:ab:
be:09:34:86:c2:c9:f0:13:c5:de:28:a3:e4:42:5b:
d5:07:a9:8d:29:63:51:57:d1:f3:10:de:d7:a2:92:
4d:99:b0:7e:2f:ae:11:7c:4d:fa:24:1e:ce:7e:b7:
50:6e:81:d0:6c:e2:04:0e:2a:3c:80:78:8d:b9:02:
fa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F3:33:69:A4:56:50:FD:A1:36:1B:2A:14:43:26:0E:B3:17:0D:DA
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e2:b1:78:7a:89:16:67:4d:64:f9:39:a5:d8:9e:0d:78:93:
09:73:62:2b:37:46:ca:0d:6b:89:f2:63:fc:af:ea:8f:a2:58:
a0:86:c0:6f:be:87:b6:bc:eb:a2:ba:53:50:e0:49:69:1a:60:
0d:b3:88:4a:d0:27:2d:68:d0:e4:61:05:f4:57:ac:03:8e:7c:
17:15:df:5a:b7:95:be:4f:71:b2:16:2f:cd:07:cb:85:da:d7:
54:39:78:6d:78:93:28:ca:aa:b4:d6:f4:cc:b3:e7:31:26:43:
3e:f6:d5:ce:80:63:31:f4:c6:7b:ad:d8:c6:ee:2e:9f:ce:6a:
58:90:60:62:81:ba:60:47:20:de:44:8c:00:0b:2b:96:96:b6:
89:48:82:7b:45:33:46:88:bf:95:df:b6:7b:5e:16:bc:29:40:
6a:ba:8b:9c:83:82:5b:b7:88:98:64:74:3f:6e:73:b4:8b:03:
3b:e2:bb:c0:c3:5f:27:6e:8d:8e:f6:a1:b3:c3:c8:8e:03:92:
ef:0c:50:2b:76:1f:2c:b6:94:5a:1d:43:ac:58:b2:b9:b7:0a:
6e:ca:72:f2:61:02:1e:22:06:3a:3d:51:60:b9:3b:68:1a:7f:
02:7e:3a:5a:56:2f:4e:b4:d3:7d:d8:b5:27:a3:61:6b:c2:a2:
7f:52:59:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:20:12 2025 by rpki-client