Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
File: guaSFNb9VedQULqBG_fBJDkQn-4.mft (raw, json)
Hash identifier: 0PW1/aqagxsyatrgKEyqEZcFq2xop7dUd+zc4hp0dW8=
Subject key identifier: 6B:CC:B6:AB:A0:04:D7:6B:A8:D5:13:53:FB:CD:56:BF:51:34:C5:26
Authority key identifier: 82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
Certificate issuer: /CN=82e69214d6fd55e75050ba811bf7c12439109fee
Certificate serial: 0197BB9012DFC3E9956D3A52CC280611412A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
Manifest number: 0C9F
Signing time: Sun 29 Jun 2025 12:01:10 +0000
Manifest this update: Sun 29 Jun 2025 12:01:10 +0000
Manifest next update: Mon 30 Jun 2025 12:01:10 +0000
Files and hashes: 1: Yf8xLh6ONOE-LcHsXkQWHpv_Qbs.roa (hash: w0wC5FwQryxr68NY97Vqd4lkkn8kQ9lhz7BZtY1f10I=)
2: guaSFNb9VedQULqBG_fBJDkQn-4.crl (hash: plQkbIyiemiHxsBzh1JEbM7R0RO+qFQbbPBAHgagRPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:90:12:df:c3:e9:95:6d:3a:52:cc:28:06:11:41:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e69214d6fd55e75050ba811bf7c12439109fee
Validity
Not Before: Jun 29 12:01:10 2025 GMT
Not After : Jun 30 12:01:10 2025 GMT
Subject: CN=6bccb6aba004d76ba8d51353fbcd56bf5134c526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:27:4a:d5:77:ef:4a:a7:dd:6e:fd:3e:c1:
3b:2d:68:0b:91:b8:46:74:84:c6:e9:2e:b2:86:0f:
8d:ba:6e:74:50:54:e0:b8:99:ef:84:a8:9b:18:88:
67:b7:c8:10:4a:6e:82:c8:ea:d7:0b:16:c0:24:a8:
e4:c7:35:05:f5:59:f3:3c:a5:e6:b4:6c:9b:12:e9:
04:6d:6e:d3:2a:44:55:53:68:f1:9e:65:72:bc:35:
df:bb:7e:df:d3:c6:af:fe:a7:fc:d2:08:31:85:4f:
ac:47:e0:6e:14:8f:f7:7d:2e:0c:b9:60:29:10:f9:
7e:90:4c:0e:54:c7:c9:36:0d:29:3c:fd:8c:0b:b3:
6b:8f:47:4b:4c:ac:66:87:e9:c4:db:60:78:06:39:
ef:03:5a:9c:8b:b3:cc:0d:ba:82:aa:a6:5f:8f:41:
64:3e:a7:4a:7a:df:5f:5f:de:50:d3:21:55:e6:92:
a0:26:9c:d7:89:10:68:f8:89:93:c3:0e:29:19:9b:
41:aa:24:9c:c2:ef:57:52:11:52:4b:da:03:33:e0:
66:67:d2:28:29:c6:ff:ad:76:25:f9:7b:ec:cb:de:
bc:a5:12:6b:a0:b5:45:00:89:9a:e3:02:a2:50:52:
8b:63:19:95:70:5c:22:fc:a4:db:50:68:21:3d:39:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CC:B6:AB:A0:04:D7:6B:A8:D5:13:53:FB:CD:56:BF:51:34:C5:26
X509v3 Authority Key Identifier:
keyid:82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:83:bf:0a:af:b6:a3:85:47:f7:61:0b:ee:f0:cf:2a:02:91:
25:3a:0d:fe:47:02:73:db:a8:4b:e0:68:b6:f4:a8:01:38:11:
41:8f:e9:fa:a9:15:c0:81:60:c1:10:d0:10:15:66:0d:51:f4:
01:e6:ea:98:a1:bf:15:60:1c:40:31:36:5e:fa:a6:94:15:63:
c9:fc:b8:00:db:33:f8:06:e5:b9:f0:e7:69:2a:23:3c:1d:12:
9b:16:aa:38:5b:3f:d2:c5:79:3d:a3:68:69:90:3a:cd:93:56:
97:26:99:9c:61:e0:8a:9f:48:3c:89:b5:e9:de:ec:15:37:e3:
ec:c4:4d:f3:20:e8:c5:4d:6a:59:6f:f7:09:18:05:8b:f5:a5:
ea:90:51:96:59:62:ea:a4:e8:9f:cd:63:24:67:31:f7:b2:a2:
8c:1b:84:0f:b4:7f:ed:b4:3f:95:eb:7d:98:36:21:d7:d2:ec:
74:53:5a:78:b2:e5:c6:4c:12:e2:8b:f4:1c:3a:7f:95:72:9c:
98:38:c3:07:66:79:9b:f3:12:14:6e:18:6d:1b:d5:fd:a6:9d:
3c:b8:01:32:ab:00:7d:cb:b6:53:13:81:4c:f5:60:4d:3f:45:
80:99:e3:bd:ac:0a:0f:b6:6c:81:9a:d0:03:e6:05:70:fc:99:
71:05:ec:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:58:27 2025 by rpki-client