Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: n89KCdE539J4IQFXSd/E4ruSpawjk3li+2VZYB1f5nE=
Subject key identifier: 19:7E:A0:B1:1D:EB:29:60:79:52:FB:AB:CB:15:0D:53:E5:12:2E:61
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 0198D660B49CCE5FACDC249AD3D66C591580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0A73
Signing time: Sat 23 Aug 2025 10:01:58 +0000
Manifest this update: Sat 23 Aug 2025 10:01:58 +0000
Manifest next update: Sun 24 Aug 2025 10:01:58 +0000
Files and hashes: 1: XTZ-6WhmzXiDDwFWajhChN4966c.roa (hash: 76eYyVPhyFyHfOEPHeaphAj0SWfwnKjZwUHP7osL/Jg=)
2: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: F6DU3a1Li3sL/b3QjSxkHUxwQLGw1ScHtizMYS8s6Mg=)
3: kTc3tdsyRqEwIQUrDzGOak8nANc.roa (hash: 7cesO8GKLYeXhtn4E2bVxqR/wKRQ+h04HAytGr5/XYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b4:9c:ce:5f:ac:dc:24:9a:d3:d6:6c:59:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Aug 23 10:01:58 2025 GMT
Not After : Aug 24 10:01:58 2025 GMT
Subject: CN=197ea0b11deb29607952fbabcb150d53e5122e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:88:84:17:5a:ea:d4:4a:e7:f3:23:8b:8d:
10:a1:b7:02:d7:98:ed:94:ff:8b:2d:79:55:1c:7c:
a6:c7:c7:b4:77:cb:5f:1d:39:e2:37:e3:4b:31:db:
70:bf:63:8a:71:3d:f0:61:84:c9:0f:6e:03:c4:fc:
a9:9b:8b:f8:6f:9f:88:82:39:e8:d2:65:55:74:05:
49:49:b0:e7:e3:77:79:f6:f6:6e:6e:27:75:69:38:
64:ad:7e:d6:8b:c5:bb:a1:9a:40:d3:74:fe:da:13:
d4:9a:d5:3f:35:ed:68:da:80:50:5d:6d:cc:f5:2f:
6a:0c:d7:27:82:f6:1b:e6:25:15:39:8d:de:ad:78:
1b:e6:c8:f9:dc:dc:71:5d:37:de:c2:4e:0e:d0:5c:
be:97:77:55:ec:08:5b:3e:36:df:fe:6e:b9:a1:d1:
f4:0a:34:3c:7e:dd:e5:0c:16:5c:11:a2:9b:e9:40:
b1:2e:28:81:84:72:6b:5c:6c:8f:a6:2f:57:d7:2a:
b1:d8:79:c4:84:97:22:07:a7:21:1d:15:db:04:28:
d3:1c:a5:e8:45:a8:4d:c4:e5:25:5c:ff:84:b4:86:
f9:47:54:57:3c:04:a8:2c:37:3f:9b:b2:2d:77:68:
4d:cd:5f:39:dc:d6:e7:4b:1d:ef:b6:6d:17:ca:13:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7E:A0:B1:1D:EB:29:60:79:52:FB:AB:CB:15:0D:53:E5:12:2E:61
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3c:f3:46:e1:aa:21:0e:36:17:4d:0c:ca:cf:7c:b8:b9:a3:
92:02:74:1c:10:21:c7:9f:6c:fc:4b:42:2d:2e:0b:1f:6c:38:
78:9d:25:75:29:11:f2:36:56:6b:8f:f6:4b:4c:72:b1:10:c2:
b0:3b:75:3f:5f:e4:3c:15:f5:25:e1:d6:79:3f:91:00:3d:9c:
af:cb:1e:f2:8a:38:82:3c:32:56:69:77:47:18:b1:c0:19:24:
63:c8:b8:30:17:b1:55:b7:42:6d:d7:91:94:70:b4:ca:e2:f2:
b6:9d:c7:05:6c:61:f5:1c:18:b8:dc:b9:e1:96:2b:a6:14:75:
86:5a:a5:44:04:38:39:06:5d:b3:bc:e5:7e:a2:e4:80:64:56:
01:1e:8f:ae:df:a5:e3:b3:2d:5d:7a:e1:ab:7e:0f:ed:03:ff:
08:a3:a4:ed:a5:da:54:12:40:a2:8d:80:6c:a3:80:af:4b:36:
e5:2d:bb:94:25:ef:20:da:40:58:01:1a:7e:ec:ce:fc:51:7f:
a7:63:79:ef:69:93:cf:8f:bb:3a:04:e9:e9:cb:52:ad:73:97:
6c:b0:88:1d:b9:d7:e4:6a:8e:e9:52:ce:e8:72:ee:f2:e1:e8:
9f:7c:2d:de:5b:01:3f:13:44:34:8f:52:4a:ab:fe:f4:94:a5:
6d:3e:74:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:24 2025 by rpki-client