Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
File: guX7w-pSWnjGMMTahkuppg4Zm_8.mft (raw, json)
Hash identifier: cOZmR59TOU3H+P6JoK4MkFrs7FSYuoAO6zJwyq9dNvw=
Subject key identifier: CD:75:B0:86:53:8A:99:AE:6D:27:04:A9:DA:C8:14:29:A9:3B:A0:4C
Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
Certificate issuer: /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Certificate serial: 0198D5157378F7A3B693DD975459393EE3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 04:00:09 +0000
Manifest this update: Sat 23 Aug 2025 04:00:09 +0000
Manifest next update: Sun 24 Aug 2025 04:00:09 +0000
Files and hashes: 1: 1-QG4tCncv0FTtCHqg5B2GIvzr7Y.roa (hash: Y2rS+2UdPK85e7sE5yCklBS//u+UrJBVKAmv+QqSGio=)
2: guX7w-pSWnjGMMTahkuppg4Zm_8.crl (hash: 8qFsJirLyqQoJpdGPzN/7oQEUjCYxeqqoUrgbDOfEv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:73:78:f7:a3:b6:93:dd:97:54:59:39:3e:e3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Validity
Not Before: Aug 23 04:00:09 2025 GMT
Not After : Aug 24 04:00:09 2025 GMT
Subject: CN=cd75b086538a99ae6d2704a9dac81429a93ba04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:ff:38:ce:e8:8d:99:f0:93:09:e7:63:d3:
d3:14:18:87:88:4c:d4:ea:4c:89:a3:a5:da:80:f6:
f6:01:aa:8e:ea:19:c2:dd:94:5a:ca:79:67:47:6f:
07:cb:31:66:0f:22:17:f9:a2:f3:44:48:1c:b7:57:
ef:1c:02:25:48:94:96:12:2d:5d:bf:55:32:3d:d9:
a9:65:2d:0a:8d:7a:f4:9c:c5:27:ab:44:a9:ca:02:
c6:16:e8:53:d5:e8:cb:2b:6d:40:19:b9:b4:8a:0e:
ca:5e:d1:e5:c2:4c:ed:b6:01:8c:51:da:d6:6e:e0:
a4:3b:3d:87:47:15:ac:58:e1:f4:b0:de:79:66:f5:
6e:7d:ab:93:9a:13:7d:97:e2:cd:a0:10:87:17:a4:
60:78:71:66:ec:2a:cb:1b:ae:35:58:03:4a:38:cf:
4c:bb:c8:2c:4b:f3:8a:97:00:da:1d:2f:a0:82:7f:
ab:d8:fa:ba:46:12:d1:f6:b0:69:52:34:af:c0:53:
4e:60:31:21:69:05:4b:68:60:c2:26:fb:2f:d2:88:
7e:4b:f9:24:f0:24:dd:15:e8:49:8c:a0:52:35:0f:
41:60:f2:96:92:f4:a4:96:9d:00:95:0f:58:0f:2c:
3e:e0:41:4b:f5:91:7e:69:16:5b:7d:70:86:2a:87:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:75:B0:86:53:8A:99:AE:6D:27:04:A9:DA:C8:14:29:A9:3B:A0:4C
X509v3 Authority Key Identifier:
keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:86:5b:dc:fd:a1:0b:d2:d5:23:57:e7:77:b9:55:76:f7:34:
de:f1:d4:1a:ff:97:e3:36:a2:59:b4:b3:d6:e4:37:de:4e:39:
2f:b8:11:87:7a:79:ba:0c:f5:4a:6d:b9:37:ca:7c:b1:8d:8b:
a2:51:32:98:c5:2f:1c:28:63:c4:d6:1f:38:28:3d:35:84:11:
3d:95:c4:06:27:f5:f6:41:01:e3:a9:6e:42:b6:af:73:94:3f:
82:7f:03:7e:07:79:c0:f8:b1:d6:44:53:c8:13:06:ba:d8:dd:
72:59:22:a0:bf:40:e4:ec:be:da:61:ad:64:ae:c8:ca:f0:96:
32:4a:67:5a:66:d0:23:75:f3:9e:f9:cb:0c:88:00:9d:f6:cf:
e8:6f:a9:c0:12:72:c8:9e:06:19:b9:36:89:23:92:85:67:71:
dd:1f:7a:08:7f:67:4e:48:b4:46:10:ae:39:80:e3:86:32:a9:
76:1f:4b:17:4b:be:fd:37:ab:69:70:55:45:8e:2b:1e:10:7e:
cc:9d:a7:74:a4:c4:46:04:5e:37:a7:b6:68:22:f1:60:c0:79:
34:1d:8a:10:a9:0d:09:38:ae:ba:0f:94:6f:10:0c:f8:1f:e7:
b6:27:46:af:cf:63:8e:e9:8a:dd:d2:a7:e6:07:0d:e3:dc:a6:
fa:0b:2a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:28 2025 by rpki-client