Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
File: guX7w-pSWnjGMMTahkuppg4Zm_8.mft (raw, json)
Hash identifier: afI6jZW5ww0QFxhYFSIKpvSzJUqIKRs1KIt8r55AtbE=
Subject key identifier: C5:0E:84:52:41:B8:B0:71:1B:51:7E:B0:2E:54:71:2B:81:12:76:34
Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
Certificate issuer: /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Certificate serial: 0199FC8FBF68DBA299217122CFCC4170D233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:42 +0000
Manifest this update: Sun 19 Oct 2025 13:01:42 +0000
Manifest next update: Mon 20 Oct 2025 13:01:42 +0000
Files and hashes: 1: 1-QG4tCncv0FTtCHqg5B2GIvzr7Y.roa (hash: Y2rS+2UdPK85e7sE5yCklBS//u+UrJBVKAmv+QqSGio=)
2: guX7w-pSWnjGMMTahkuppg4Zm_8.crl (hash: HBVdCfqu04DGGuf+QmlelYxc98kxEZOSdzgv9UXXgwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:bf:68:db:a2:99:21:71:22:cf:cc:41:70:d2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Validity
Not Before: Oct 19 13:01:42 2025 GMT
Not After : Oct 20 13:01:42 2025 GMT
Subject: CN=c50e845241b8b0711b517eb02e54712b81127634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:01:78:e4:77:eb:8c:b5:c4:fc:0a:73:93:
38:e1:60:d2:83:64:8e:2e:6e:31:21:f0:95:2f:f1:
83:27:6c:f4:60:e0:1d:e8:31:d0:fc:d2:8c:60:89:
e0:77:05:77:02:ef:6a:55:ea:0c:4f:0f:75:78:2e:
00:7a:89:45:c2:95:32:07:8f:2a:a0:34:32:d7:30:
dc:26:e1:c4:da:5b:d9:8b:66:a7:09:66:19:ab:27:
d2:5a:35:95:01:73:3f:37:ab:bf:ac:93:a3:c7:3a:
eb:76:29:82:e3:64:6b:42:c7:95:1c:6b:05:89:a6:
a0:87:47:34:9f:15:92:09:0d:49:e9:e7:46:13:46:
b1:f4:d5:a2:06:38:66:b5:cb:e7:07:5e:f8:64:b2:
47:34:cd:40:d7:c9:d7:76:e7:34:95:6b:2f:df:90:
d6:8b:d3:fa:3b:9c:c2:67:c5:54:6c:d1:b3:c0:a9:
33:00:98:c8:ca:90:2c:bd:cc:55:a6:fa:39:8a:1a:
eb:c9:63:42:08:57:a8:56:2b:1c:ec:02:04:46:97:
74:6c:34:38:2e:12:2d:87:85:cb:62:13:58:59:2a:
5d:a4:e6:93:e7:b3:71:15:fb:2d:50:18:76:38:a2:
de:58:8c:84:16:8e:4c:f5:2d:54:cd:94:dd:21:b8:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0E:84:52:41:B8:B0:71:1B:51:7E:B0:2E:54:71:2B:81:12:76:34
X509v3 Authority Key Identifier:
keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2d:0b:4d:59:f5:2a:17:d7:a9:0d:98:37:bf:bd:7a:3b:05:
1d:2d:02:6d:f5:80:8a:7e:d8:22:26:6f:cc:30:62:e2:6d:19:
5b:d5:63:88:c1:8c:02:12:3e:2e:83:cc:44:a4:40:bd:32:36:
77:00:84:f4:da:ab:15:ea:27:03:e6:fe:2e:93:c8:39:02:18:
38:6c:cd:8a:1e:c6:4b:95:09:6c:68:d1:12:b3:cb:1a:4f:8a:
99:41:96:69:cf:1f:40:1e:68:6e:42:4c:98:32:24:0b:22:fd:
93:31:1e:c4:e2:cf:ed:5c:7e:cb:b5:ee:a9:2e:87:f8:08:5a:
f8:e5:b4:45:65:23:07:d9:d5:e6:ac:1f:17:c3:b1:19:68:7e:
d8:67:0c:1f:03:e6:02:7d:96:2f:08:ad:3c:fa:c4:c1:63:11:
e5:64:9c:73:c3:bc:54:46:d2:dc:2e:e0:95:fb:6f:7b:65:11:
94:3f:2b:e3:b6:13:5d:18:d8:3a:66:b5:69:db:02:d3:be:34:
c9:95:62:d2:6e:a4:61:2f:4a:fd:f2:42:02:35:ec:0f:77:97:
ac:20:35:30:9f:75:85:ed:50:fa:36:27:35:d6:0d:e2:05:81:
6e:4f:6b:ad:fe:bd:d1:76:80:19:b1:db:80:5e:e5:9b:91:80:
27:04:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:17 2025 by rpki-client