Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
File: guItqb8KdBce67TNmPwl8wQa3S8.mft (raw, json)
Hash identifier: M/ERniTWC+oLotNAe2Ov7MvEbrU5Pp/9hbY1ajabW7U=
Subject key identifier: 72:F9:C5:B8:21:50:1F:87:BF:75:77:37:F0:FE:92:4F:3B:56:02:42
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Certificate issuer: /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial: 0199239F1A7B9F33C22DDB38BBF19CDE060F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:00:53 +0000
Manifest this update: Sun 07 Sep 2025 10:00:53 +0000
Manifest next update: Mon 08 Sep 2025 10:00:53 +0000
Files and hashes: 1: guItqb8KdBce67TNmPwl8wQa3S8.crl (hash: BznA+9KuhTcvjkMSOXjSYWMNQ1Xta6iqOzHtGpm+4Wo=)
2: st7UugSXha_zumczLwSMs_JMMGo.roa (hash: zW6BjWFPz0O6Tl0aYcPhSf3EE25VQRz5yPeKPIedYY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:1a:7b:9f:33:c2:2d:db:38:bb:f1:9c:de:06:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Validity
Not Before: Sep 7 10:00:53 2025 GMT
Not After : Sep 8 10:00:53 2025 GMT
Subject: CN=72f9c5b821501f87bf757737f0fe924f3b560242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e1:9f:d3:e6:5c:6e:de:be:7b:bb:4e:e8:b9:
5c:5e:15:d5:db:cf:de:c0:b6:df:6f:b4:92:cb:3e:
bd:ba:e3:14:3b:b2:c4:92:30:88:70:b7:45:a8:9a:
ef:db:e1:9e:da:38:08:28:28:c3:58:98:e3:3f:29:
af:67:89:8d:e7:84:01:ee:32:66:30:00:dd:f2:a8:
88:64:e6:46:75:f3:51:da:a3:b9:de:ce:9f:5a:24:
5b:14:88:b2:15:f3:88:25:34:4b:ee:75:10:07:2e:
84:91:a3:d1:b1:15:ed:00:58:4c:73:36:d8:b6:ee:
b9:74:f1:ea:78:bc:24:f3:82:71:9a:42:51:b1:0f:
fc:5d:f7:98:cd:79:b5:ef:c3:7f:3f:f3:23:26:d5:
e0:37:03:7c:0f:9d:48:65:a8:07:c4:25:ee:c1:d8:
47:09:5b:3a:b6:08:91:43:c4:42:8f:5f:06:6e:4a:
2f:e0:4b:c4:cf:22:7c:e2:8e:3c:64:c8:fa:c7:b3:
17:d2:fd:74:3b:fb:79:5e:64:a2:28:8b:4d:66:28:
7e:bc:54:91:99:d9:17:77:31:2b:9a:48:84:82:88:
ea:5b:fd:77:69:15:40:40:4e:bd:5f:01:2b:fd:4d:
d3:1e:3f:20:c3:8b:d1:a9:b4:5f:13:dd:74:5b:8d:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F9:C5:B8:21:50:1F:87:BF:75:77:37:F0:FE:92:4F:3B:56:02:42
X509v3 Authority Key Identifier:
keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:67:7b:87:fd:af:3d:2a:1e:31:de:96:22:4d:fb:2d:ab:34:
d3:b0:85:16:6a:c7:41:e2:fd:10:ec:33:bf:49:da:83:e4:32:
18:12:45:cf:c9:f5:08:30:87:60:9d:a1:27:13:0c:2d:54:c4:
57:b0:bb:fe:dd:af:4c:3c:78:03:64:61:6a:68:79:a8:f3:1a:
67:dd:9a:16:65:7c:a2:9b:d7:69:96:2a:45:68:10:1c:ec:c8:
8c:9b:0d:d3:a4:7b:2c:63:e0:5b:2b:f1:74:e0:2f:75:40:bb:
74:01:06:eb:6f:04:62:63:9d:da:cb:72:ce:b6:8f:c9:95:b5:
73:56:d1:1a:de:ce:ae:7c:fe:bf:f1:fc:72:d0:61:51:f8:84:
91:63:25:3c:5a:7d:3d:ca:31:2a:a0:3e:58:a2:f9:0a:57:15:
da:1c:cd:84:a9:61:cc:49:99:cb:01:50:4f:3e:b1:b4:10:51:
73:55:99:01:c8:b4:1e:3d:4d:ab:94:b2:1e:93:6a:69:88:dc:
a4:47:8f:58:86:64:3d:ee:29:00:49:d9:20:b1:be:3c:76:7a:
34:bc:49:74:81:3f:ed:68:44:5e:e8:62:92:b4:dc:21:e2:69:
34:e1:bc:bc:10:5e:f6:98:7c:26:56:98:0c:89:a3:54:02:2b:
ec:05:18:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:38 2025 by rpki-client