Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: yb6mQWCRdU7c9zMt56fLZhps/oNSKGqjMfqy7Cqz0T4=
Subject key identifier: 9B:B7:EA:8A:6E:F4:2A:F2:AF:F6:82:27:FD:E1:9E:15:25:28:E4:3F
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 01974931179FC0203A914B16AAB35FF325FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 07:00:43 +0000
Manifest this update: Sat 07 Jun 2025 07:00:43 +0000
Manifest next update: Sun 08 Jun 2025 07:00:43 +0000
Files and hashes: 1: ZBzIfVthsK0IsXsJf3cg7sZHKWM.roa (hash: QAbyT2QSC2brj0n8JNXKmo27qkYMllHPEba5ZlKG1ys=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: pGdctDTUTbzubHr1C1m6lAJM9iK5qB7E9rwl9UZVd8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:17:9f:c0:20:3a:91:4b:16:aa:b3:5f:f3:25:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Jun 7 07:00:43 2025 GMT
Not After : Jun 8 07:00:43 2025 GMT
Subject: CN=9bb7ea8a6ef42af2aff68227fde19e152528e43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:01:3c:5e:41:1e:65:85:3d:f2:3e:ea:f7:
9f:e8:da:84:35:c8:86:b0:7d:d8:bc:79:58:45:42:
54:71:ae:ec:99:06:2b:a0:53:5c:ce:e6:71:9b:d9:
f6:0a:e0:96:ba:3f:b9:e6:a0:19:79:3f:ca:44:a7:
a1:b8:84:bf:7c:eb:b7:68:cd:bb:65:05:5a:ac:ca:
f6:fa:60:fb:7b:f7:59:db:bc:55:a1:d0:00:3b:00:
ea:d9:98:6e:41:1d:d4:54:8a:e1:64:f9:f0:06:2d:
eb:d6:02:47:2d:80:b3:0d:f8:ca:b9:66:21:3f:1c:
3a:e2:3f:17:11:35:93:4e:9c:af:99:61:4b:4c:2d:
d5:10:94:4f:2c:df:f7:76:e9:51:b5:8d:40:71:19:
07:35:30:02:38:66:8f:b0:ce:72:db:6c:81:b3:5d:
49:0e:f5:96:90:a1:75:5d:4a:6d:35:44:d7:79:63:
eb:05:d4:36:0f:37:7f:1f:e1:2e:33:7d:9f:80:1e:
b4:52:37:56:d4:13:a3:6b:25:90:d2:b8:10:a7:45:
16:07:26:89:d6:99:e2:0f:4f:ef:f0:77:87:b2:6f:
0c:ad:19:a1:25:cc:27:9b:8a:f6:2e:27:d9:c5:61:
32:30:5f:ef:b8:02:d3:14:0f:c4:42:e6:3e:58:19:
a1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B7:EA:8A:6E:F4:2A:F2:AF:F6:82:27:FD:E1:9E:15:25:28:E4:3F
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:84:b3:7a:94:1a:9b:c4:7e:e8:fb:1d:59:e3:df:43:eb:97:
a9:25:00:37:6d:ac:da:a4:d1:2b:8e:92:89:98:a9:7d:88:bc:
09:aa:07:45:14:a6:4a:87:f5:c8:1d:9b:61:bd:08:ff:ea:fe:
e7:9a:4f:40:96:44:9c:62:75:fb:6f:48:43:86:39:20:59:79:
dc:c7:64:cb:6a:74:ed:6c:40:c4:ae:02:61:4b:2d:08:13:68:
bd:95:9c:90:26:6a:04:44:38:7a:f7:3e:e0:0f:3e:32:1b:78:
ee:3b:53:8d:9e:f3:8d:3a:32:95:d8:3d:c6:fc:46:72:96:23:
bf:1e:a8:c0:4f:69:a5:a4:f9:41:2f:bf:1a:de:bd:cc:c5:1c:
e2:25:ed:91:79:66:17:de:b0:34:58:8f:2f:14:62:63:c9:2b:
51:ba:06:dc:06:07:84:da:31:56:c8:51:f2:11:53:b6:cc:b6:
1f:fd:af:b9:58:e7:b4:0e:c5:ed:1d:71:b6:da:f4:b3:f0:45:
5c:dc:6c:a2:6d:2f:45:fd:ae:48:86:17:66:36:14:43:19:1c:
4c:f2:6b:a3:d4:e3:e5:c3:9b:64:e6:af:87:6b:8c:17:8c:91:
b6:c6:5c:eb:69:29:67:35:0b:a3:b9:0d:2a:c0:c7:9e:7c:5b:
9e:f8:ed:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMRefwCA6kUsWqrNf8yX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTYzNWZlY2VmMTcxMDllMWFjNzhiMmZiNzIyNDEwZDg0
NzdhOWMwHhcNMjUwNjA3MDcwMDQzWhcNMjUwNjA4MDcwMDQzWjAzMTEwLwYDVQQD
Eyg5YmI3ZWE4YTZlZjQyYWYyYWZmNjgyMjdmZGUxOWUxNTI1MjhlNDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzIBPF5BHmWFPfI+6vef6NqENciG
sH3YvHlYRUJUca7smQYroFNczuZxm9n2CuCWuj+55qAZeT/KRKehuIS/fOu3aM27
ZQVarMr2+mD7e/dZ27xVodAAOwDq2ZhuQR3UVIrhZPnwBi3r1gJHLYCzDfjKuWYh
Pxw64j8XETWTTpyvmWFLTC3VEJRPLN/3dulRtY1AcRkHNTACOGaPsM5y22yBs11J
DvWWkKF1XUptNUTXeWPrBdQ2Dzd/H+EuM32fgB60UjdW1BOjayWQ0rgQp0UWByaJ
1pniD0/v8HeHsm8MrRmhJcwnm4r2LifZxWEyMF/vuALTFA/EQuY+WBmhzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJu36opu9Cryr/aCJ/3hnhUlKOQ/MB8GA1UdIwQY
MBaAFILmNf7O8XEJ4ax4svtyJBDYR3qcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VZMV9zN3hjUW5ockhpeS0zSWtFTmhIZXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85Zjk4NTgtNjIwOS00Y2Y1LWI1NDEt
YTI2MDUwZWYwNDdlLzEvZ3VZMV9zN3hjUW5ockhpeS0zSWtFTmhIZXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85Zjk4NTgtNjIwOS00Y2Y1LWI1NDEtYTI2MDUwZWYwNDdl
LzEvZ3VZMV9zN3hjUW5ockhpeS0zSWtFTmhIZXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYSzepQa
m8R+6PsdWePfQ+uXqSUAN22s2qTRK46SiZipfYi8CaoHRRSmSof1yB2bYb0I/+r+
55pPQJZEnGJ1+29IQ4Y5IFl53Mdky2p07WxAxK4CYUstCBNovZWckCZqBEQ4evc+
4A8+Mht47jtTjZ7zjToyldg9xvxGcpYjvx6owE9ppaT5QS+/Gt69zMUc4iXtkXlm
F96wNFiPLxRiY8krUboG3AYHhNoxVshR8hFTtsy2H/2vuVjntA7F7R1xttr0s/BF
XNxsom0vRf2uSIYXZjYUQxkcTPJro9Tj5cObZOavh2uMF4yRtsZc62kpZzULo7kN
KsDHnnxbnvjtww==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:51:16 2025 by rpki-client