Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: dGrLj+JS1cR6ojsVbeqp6LHhzfpSYK5PpFOYpS34/Zk=
Subject key identifier: 6F:EA:60:0C:C0:98:B4:0A:53:56:70:AA:F6:7E:F1:00:14:9E:5A:D2
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 019868F074284BA3BDCFD9B1CC5AE5E64F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 1612
Signing time: Sat 02 Aug 2025 04:00:45 +0000
Manifest this update: Sat 02 Aug 2025 04:00:45 +0000
Manifest next update: Sun 03 Aug 2025 04:00:45 +0000
Files and hashes: 1: ZBzIfVthsK0IsXsJf3cg7sZHKWM.roa (hash: QAbyT2QSC2brj0n8JNXKmo27qkYMllHPEba5ZlKG1ys=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: AnlWZYMbCnngbVVn2gEqZSJ7w764WkYigOIt/2RfjR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:68:f0:74:28:4b:a3:bd:cf:d9:b1:cc:5a:e5:e6:4f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Aug 2 04:00:45 2025 GMT
Not After : Aug 3 04:00:45 2025 GMT
Subject: CN=6fea600cc098b40a535670aaf67ef100149e5ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:ab:d3:84:5d:14:23:8d:f8:e1:d0:32:f7:
87:0f:7f:61:ba:b3:3d:e3:10:c8:88:32:cf:6e:88:
f8:25:37:af:ce:e7:e5:0d:91:15:14:6c:ec:e3:b7:
89:1c:9e:44:3b:06:7d:a7:28:a2:88:79:15:35:ee:
89:e0:47:d1:b5:25:1d:eb:81:42:dc:1e:e7:4c:42:
b5:b3:c4:c1:79:0a:3d:22:00:fa:04:1d:32:d3:1f:
36:8a:7e:04:58:e1:0c:50:f5:de:fb:4c:99:86:53:
a6:14:89:28:ef:1c:96:81:54:9f:51:d4:e1:4c:b3:
d9:7a:1f:f5:ad:6c:8c:d5:97:95:60:40:1e:a6:60:
86:0b:f8:88:02:29:8f:08:0c:49:88:e4:d4:0f:53:
d1:79:04:2c:f1:20:81:68:8a:de:1b:a3:ea:07:09:
92:f0:49:a8:be:e7:8c:6e:fd:b8:48:28:68:7e:aa:
56:68:00:cf:25:45:ad:dd:62:79:53:d1:67:31:df:
7e:62:48:41:46:73:7a:84:55:10:10:57:42:4b:eb:
b8:4c:c2:39:f3:d6:b4:bb:29:b2:ef:42:d7:35:67:
18:98:16:35:83:8d:08:b3:77:54:67:3d:a5:f2:8b:
7d:35:7a:90:5d:79:3d:94:f4:00:94:17:1c:fa:92:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EA:60:0C:C0:98:B4:0A:53:56:70:AA:F6:7E:F1:00:14:9E:5A:D2
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0d:ee:73:f6:11:de:dd:78:e6:13:79:9f:b8:3c:73:50:f3:
99:a2:3f:92:59:45:5b:99:76:0a:4b:cd:1c:f6:34:c3:eb:dd:
b6:fd:f1:2c:65:27:91:7f:8f:71:8d:cb:65:67:ba:ed:68:4d:
22:70:da:fc:8c:6c:68:bc:7b:b5:1d:3f:1a:cc:19:88:f2:da:
89:c4:f6:03:6c:14:05:0c:84:07:da:47:b8:7f:ab:97:1a:7a:
32:e1:95:43:c5:19:6a:e1:85:3a:27:36:2c:4a:b5:c3:ba:64:
ef:ed:ae:19:ad:4d:06:dc:de:25:2c:63:73:1b:f0:ca:d7:86:
0d:fa:80:3c:97:48:88:2e:69:47:8b:35:7e:54:60:37:87:38:
c3:4b:ce:aa:50:fa:6e:1d:fa:92:3d:11:00:28:75:e8:45:9b:
6e:5f:ee:42:c9:ec:93:8f:78:46:b4:1e:83:4e:56:2c:af:81:
c7:22:11:72:b0:56:08:03:02:06:08:22:a5:b8:7a:8c:a0:d8:
f1:33:66:e5:9c:cb:74:ca:80:0e:1b:a9:2f:2b:3b:c3:61:c3:
f3:d1:f4:ae:54:45:26:00:08:14:f5:63:70:15:52:0e:c1:86:
49:3e:3a:9f:da:93:02:58:3f:6e:a0:a0:97:49:b4:cc:cf:81:
a5:a3:b6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 06:44:00 2025 by rpki-client