Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
File: guItqb8KdBce67TNmPwl8wQa3S8.mft (raw, json)
Hash identifier: lCtj88++khlxiLYXXl3K7jDwccspyKdXYRvU+gnvHK0=
Subject key identifier: 69:05:19:01:41:19:19:F6:CE:4F:35:A9:20:0A:DF:02:CC:B4:F4:4E
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Certificate issuer: /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial: 0197469EA615CEB6EF7AEE66A41867ED00B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 19:01:31 +0000
Manifest this update: Fri 06 Jun 2025 19:01:31 +0000
Manifest next update: Sat 07 Jun 2025 19:01:31 +0000
Files and hashes: 1: guItqb8KdBce67TNmPwl8wQa3S8.crl (hash: 5A6Kr/Ldoh61/kCerDiUth8WOtM+GYzNXXvlbGyL+cY=)
2: st7UugSXha_zumczLwSMs_JMMGo.roa (hash: zW6BjWFPz0O6Tl0aYcPhSf3EE25VQRz5yPeKPIedYY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:a6:15:ce:b6:ef:7a:ee:66:a4:18:67:ed:00:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Validity
Not Before: Jun 6 19:01:31 2025 GMT
Not After : Jun 7 19:01:31 2025 GMT
Subject: CN=69051901411919f6ce4f35a9200adf02ccb4f44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:56:26:93:dd:35:24:47:57:9b:e4:86:f7:
07:ea:22:f4:90:97:bc:3d:59:20:4c:36:83:0f:cf:
47:3a:cc:2d:49:9d:81:48:43:29:1f:ec:aa:d3:8d:
0f:f1:6a:28:cc:4d:17:36:f0:3b:67:89:98:52:f2:
bc:8e:ef:9a:a0:3a:80:bb:da:f4:33:72:ae:a5:9a:
ec:82:c2:02:41:88:93:83:6c:dc:02:ef:c7:c8:88:
9b:34:17:8f:25:27:3e:8d:06:9c:44:08:6c:41:e0:
b9:1d:30:6e:75:02:0f:e7:ad:7f:05:da:d1:35:c9:
c7:51:ea:1a:4b:4c:db:4e:a9:5e:f6:80:d9:62:47:
92:70:6d:8f:e8:2e:2b:e2:51:8a:3e:ae:bf:b0:9b:
96:68:12:16:e1:8a:85:7b:14:ce:d7:77:d3:b7:ff:
bb:38:d7:05:4f:74:96:57:da:8c:54:4a:6c:bb:de:
89:95:61:d4:03:a7:ba:96:90:9b:14:b4:03:fa:bd:
60:31:cc:d4:ef:02:76:4b:d3:72:27:ba:09:75:fc:
6a:ac:82:f1:e3:80:20:40:5a:50:f7:ef:6a:32:a2:
24:e5:e4:ff:b9:fe:9f:dc:9d:5d:bb:7f:87:04:6b:
7d:e7:38:79:c7:25:e5:b3:ad:f1:4f:b3:83:52:de:
b1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:05:19:01:41:19:19:F6:CE:4F:35:A9:20:0A:DF:02:CC:B4:F4:4E
X509v3 Authority Key Identifier:
keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2d:e6:48:a0:65:96:c7:8e:24:c4:c8:5e:d0:c9:44:9b:dc:
cb:b9:30:7e:21:3d:6f:b3:44:31:1c:de:65:c0:4c:3b:9a:51:
33:2c:6f:3f:37:2f:68:b2:7c:f5:49:16:81:75:85:96:ec:3d:
46:91:a4:30:89:6c:c2:48:2b:ac:bd:72:7d:6e:2b:4f:1c:d1:
39:b8:6f:4c:7b:3d:25:8a:6f:8f:aa:73:42:64:4f:1e:c6:2c:
8f:b5:7c:9b:45:3d:bf:8d:9e:79:e5:97:51:e9:cd:19:2f:a3:
68:34:0f:ca:03:4a:8e:b0:54:3d:45:69:34:ca:ff:96:26:ff:
68:a7:6d:bd:7b:19:82:3e:98:8c:c9:0e:85:c9:09:3b:ba:c2:
31:79:be:c1:ad:a4:cd:41:23:35:f9:a2:5d:a8:c5:76:9e:af:
2a:0c:59:5e:f5:93:b2:9f:1e:a5:9a:59:47:a0:ec:a8:e6:aa:
ee:6f:d6:11:a0:63:9a:a0:9d:d7:ce:e7:50:27:ae:20:93:4c:
6d:91:3c:10:dd:ec:57:f2:5c:87:b5:c5:bf:d8:70:aa:f2:18:
4d:5b:cb:86:7d:04:91:34:f3:9f:66:42:34:f6:e5:ac:fd:8a:
63:55:8d:44:f3:2a:20:99:bb:8e:a9:25:84:00:4f:f3:a5:53:
1d:a0:82:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnqYVzrbveu5mpBhn7QC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTIyZGE5YmYwYTc0MTcxZWViYjRjZDk4ZmMyNWYzMDQx
YWRkMmYwHhcNMjUwNjA2MTkwMTMxWhcNMjUwNjA3MTkwMTMxWjAzMTEwLwYDVQQD
Eyg2OTA1MTkwMTQxMTkxOWY2Y2U0ZjM1YTkyMDBhZGYwMmNjYjRmNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QJWJpPdNSRHV5vkhvcH6iL0kJe8
PVkgTDaDD89HOswtSZ2BSEMpH+yq040P8WoozE0XNvA7Z4mYUvK8ju+aoDqAu9r0
M3KupZrsgsICQYiTg2zcAu/HyIibNBePJSc+jQacRAhsQeC5HTBudQIP561/BdrR
NcnHUeoaS0zbTqle9oDZYkeScG2P6C4r4lGKPq6/sJuWaBIW4YqFexTO13fTt/+7
ONcFT3SWV9qMVEpsu96JlWHUA6e6lpCbFLQD+r1gMczU7wJ2S9NyJ7oJdfxqrILx
44AgQFpQ9+9qMqIk5eT/uf6f3J1du3+HBGt95zh5xyXls63xT7ODUt6xQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkFGQFBGRn2zk81qSAK3wLMtPROMB8GA1UdIwQY
MBaAFILiLam/CnQXHuu0zZj8JfMEGt0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hODliM2MtOTcyYy00YmVlLTgwZjIt
NWMyOTE5ZGE4ZGYzLzEvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hODliM2MtOTcyYy00YmVlLTgwZjItNWMyOTE5ZGE4ZGYz
LzEvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUy3mSKBl
lseOJMTIXtDJRJvcy7kwfiE9b7NEMRzeZcBMO5pRMyxvPzcvaLJ89UkWgXWFluw9
RpGkMIlswkgrrL1yfW4rTxzRObhvTHs9JYpvj6pzQmRPHsYsj7V8m0U9v42eeeWX
UenNGS+jaDQPygNKjrBUPUVpNMr/lib/aKdtvXsZgj6YjMkOhckJO7rCMXm+wa2k
zUEjNfmiXajFdp6vKgxZXvWTsp8epZpZR6DsqOaq7m/WEaBjmqCd187nUCeuIJNM
bZE8EN3sV/Jch7XFv9hwqvIYTVvLhn0EkTTzn2ZCNPblrP2KY1WNRPMqIJm7jqkl
hABP86VTHaCCKw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:07 2025 by rpki-client