Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: Wh4CF97OhzeZICSwiBC1cyi8vKQUA8Rtx2+j3LMRr7o=
Subject key identifier: 12:23:47:DF:7B:9E:4E:FD:18:DC:73:27:CE:3D:08:B1:C0:5E:FF:26
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 0197B6A1B33C83EA801CBE756C857EBFB20D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 09DE
Signing time: Sat 28 Jun 2025 13:02:19 +0000
Manifest this update: Sat 28 Jun 2025 13:02:19 +0000
Manifest next update: Sun 29 Jun 2025 13:02:19 +0000
Files and hashes: 1: XTZ-6WhmzXiDDwFWajhChN4966c.roa (hash: 76eYyVPhyFyHfOEPHeaphAj0SWfwnKjZwUHP7osL/Jg=)
2: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: LapLhWPB5cphBmMiwrhzKC+AsEmoXfTFMA+oltGwwNM=)
3: kTc3tdsyRqEwIQUrDzGOak8nANc.roa (hash: 7cesO8GKLYeXhtn4E2bVxqR/wKRQ+h04HAytGr5/XYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b3:3c:83:ea:80:1c:be:75:6c:85:7e:bf:b2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Jun 28 13:02:19 2025 GMT
Not After : Jun 29 13:02:19 2025 GMT
Subject: CN=122347df7b9e4efd18dc7327ce3d08b1c05eff26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:32:49:bf:c7:04:c5:f0:93:4a:7c:d5:e0:
5e:61:56:28:cf:c9:88:63:2d:dc:93:0e:77:24:a0:
26:60:60:cf:da:c9:02:8c:07:b7:a3:a8:c7:33:aa:
c7:61:05:72:24:b8:47:ee:35:78:4d:0e:62:20:28:
31:13:14:33:59:04:f0:47:a2:8e:2f:dc:43:a9:bc:
ec:2d:d1:ae:71:50:59:53:d1:d4:d1:7f:fb:24:b6:
b7:bf:4f:dd:95:8d:34:01:0c:f0:9c:21:2a:85:42:
aa:5c:24:d1:c9:4c:e9:06:be:f5:0d:07:c6:0d:ab:
72:6e:90:8f:af:3a:79:9c:c7:55:b7:08:e0:18:7e:
50:63:1e:64:3a:20:0f:df:c6:49:24:b2:74:c2:bb:
84:47:da:c4:2d:c8:57:c0:5c:0c:67:5a:9c:79:ca:
04:04:d4:01:1b:24:d4:4c:32:e4:d9:d8:34:e4:65:
bd:a6:e6:be:54:ab:63:88:1e:ba:6e:64:37:1a:99:
a2:0a:4a:ae:1e:a5:ba:57:d9:57:c3:6a:b4:2c:d2:
54:76:5d:95:b2:a8:db:a6:0d:93:76:d9:16:a4:c9:
5d:3a:90:a6:ad:c7:e8:70:7d:b9:28:23:4b:69:2e:
b5:d3:fa:db:39:bf:1c:09:de:d4:b8:42:d4:62:f1:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:23:47:DF:7B:9E:4E:FD:18:DC:73:27:CE:3D:08:B1:C0:5E:FF:26
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fa:93:0f:2e:43:c8:48:25:ca:5a:a7:52:d5:9d:4d:6d:20:
42:c3:78:41:65:f4:7e:42:61:06:f5:e0:05:fe:13:e8:a3:19:
c9:d2:4f:f0:12:15:77:c1:f0:9c:c8:2b:dc:70:00:03:59:25:
8e:4a:84:6d:f4:32:0e:cb:5c:04:0c:b0:ff:93:be:df:07:a2:
13:27:ff:f2:39:0d:1e:3f:04:41:43:65:f8:d3:f9:36:ce:8a:
f4:a5:71:e5:1b:d1:b4:fb:14:7a:63:1d:5f:04:1e:a3:16:5b:
0a:ba:53:4a:37:6f:cb:c6:a5:d0:4b:53:2f:d1:5f:2f:a6:3d:
5c:8f:7e:7e:56:2d:19:b2:45:dd:d4:99:db:5e:b8:87:52:81:
d2:5c:26:6c:1f:74:b9:65:35:5c:16:9b:52:a4:18:24:fd:a6:
29:e6:04:bc:97:2c:22:11:02:96:50:05:72:5e:b7:53:d2:85:
57:0c:98:46:0f:98:84:f5:99:2b:8a:8b:02:e0:e4:c1:66:71:
8b:80:86:35:26:31:b8:5f:9e:78:31:cd:44:97:b9:17:66:41:
b4:30:0b:30:fc:51:60:61:bc:7b:cc:a9:4d:8b:ae:28:f3:13:
fd:1b:3b:da:a1:8b:de:29:87:62:d8:49:a3:dc:d9:2d:da:8e:
8e:dd:29:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2obM8g+qAHL51bIV+v7INMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTAxNGYxYzhjYTM5NjZhOTNlZjM5ZGJjNjEyZGFhYzBk
ODNkYzAwHhcNMjUwNjI4MTMwMjE5WhcNMjUwNjI5MTMwMjE5WjAzMTEwLwYDVQQD
EygxMjIzNDdkZjdiOWU0ZWZkMThkYzczMjdjZTNkMDhiMWMwNWVmZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoIySb/HBMXwk0p81eBeYVYoz8mI
Yy3ckw53JKAmYGDP2skCjAe3o6jHM6rHYQVyJLhH7jV4TQ5iICgxExQzWQTwR6KO
L9xDqbzsLdGucVBZU9HU0X/7JLa3v0/dlY00AQzwnCEqhUKqXCTRyUzpBr71DQfG
DatybpCPrzp5nMdVtwjgGH5QYx5kOiAP38ZJJLJ0wruER9rELchXwFwMZ1qcecoE
BNQBGyTUTDLk2dg05GW9pua+VKtjiB66bmQ3GpmiCkquHqW6V9lXw2q0LNJUdl2V
sqjbpg2TdtkWpMldOpCmrcfocH25KCNLaS610/rbOb8cCd7UuELUYvHn0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIjR997nk79GNxzJ849CLHAXv8mMB8GA1UdIwQY
MBaAFILgFPHIyjlmqT7znbxhLarA2D3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGIt
NjZkODBlZDA5YmM3LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84ZmE3OGYtMWQ3My00YzVhLTllMGItNjZkODBlZDA5YmM3
LzEvZ3VBVThjaktPV2FwUHZPZHZHRXRxc0RZUGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPqTDy5D
yEglylqnUtWdTW0gQsN4QWX0fkJhBvXgBf4T6KMZydJP8BIVd8HwnMgr3HAAA1kl
jkqEbfQyDstcBAyw/5O+3weiEyf/8jkNHj8EQUNl+NP5Ns6K9KVx5RvRtPsUemMd
XwQeoxZbCrpTSjdvy8al0EtTL9FfL6Y9XI9+flYtGbJF3dSZ2164h1KB0lwmbB90
uWU1XBabUqQYJP2mKeYEvJcsIhECllAFcl63U9KFVwyYRg+YhPWZK4qLAuDkwWZx
i4CGNSYxuF+eeDHNRJe5F2ZBtDALMPxRYGG8e8ypTYuuKPMT/Rs72qGL3imHYthJ
o9zZLdqOjt0pdQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:51 2025 by rpki-client