Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: FdPh0OS45kaJzW1Yz7A8uHbkztsAJh3t8RZE/JQJ0k4=
Subject key identifier: 52:0B:44:93:24:AB:25:DE:05:61:7F:B4:5E:DD:92:F8:25:43:FC:79
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 0199FBEC1562A5D024F8AF76EB52AE2FBAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0B0B
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: XTZ-6WhmzXiDDwFWajhChN4966c.roa (hash: 76eYyVPhyFyHfOEPHeaphAj0SWfwnKjZwUHP7osL/Jg=)
2: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: PPAiSlBlva8BplW7V7KVRIx2JHE/RZ3bm7uiYGvwf3Q=)
3: kTc3tdsyRqEwIQUrDzGOak8nANc.roa (hash: 7cesO8GKLYeXhtn4E2bVxqR/wKRQ+h04HAytGr5/XYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:15:62:a5:d0:24:f8:af:76:eb:52:ae:2f:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=520b449324ab25de05617fb45edd92f82543fc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:b7:d3:15:be:0f:36:6d:a9:05:bc:9e:67:
bc:88:9b:01:34:0c:d4:ae:7f:be:df:de:3c:9c:c3:
75:3b:16:00:46:82:b7:8d:8f:fb:e9:75:a6:fa:be:
01:b2:38:20:32:8c:9d:85:4a:a3:f2:aa:de:ca:b8:
e2:d0:00:fc:5f:6b:ba:3b:74:70:e1:f4:f8:52:84:
7c:5a:3e:5e:25:a3:80:f5:9f:b4:04:d4:7d:3c:2b:
b3:41:1c:e0:da:45:d9:73:dd:03:b8:18:da:70:97:
b2:40:c1:b7:36:db:fb:95:5b:f7:f0:66:98:95:18:
4f:fa:b7:ed:6c:c0:5c:00:40:46:1c:28:73:bf:69:
ef:df:d6:88:e2:0f:5b:78:98:49:60:56:46:93:83:
35:f2:24:68:a2:a9:37:7c:21:39:42:68:87:4d:a3:
4c:9e:d6:6d:7a:51:1e:d6:04:c0:d8:52:6b:b8:ed:
74:07:f2:20:78:4c:07:5a:7e:4c:b1:c5:f7:15:05:
63:f7:bb:35:7b:8b:66:2f:c4:2c:9b:6d:d7:c4:34:
02:57:d2:dd:f5:da:b2:55:fc:a7:ef:7b:10:f9:af:
3b:19:82:ac:7e:06:48:09:86:cc:d1:b9:02:d9:d4:
2e:1b:a5:ec:da:f6:72:48:14:7b:a4:4c:6c:fb:e4:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0B:44:93:24:AB:25:DE:05:61:7F:B4:5E:DD:92:F8:25:43:FC:79
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d3:ec:44:b0:52:58:af:1e:7b:4b:38:4f:2a:e3:24:a2:07:
15:9b:2b:b4:41:28:8c:d9:6f:55:44:f2:6b:71:7b:de:55:38:
9e:13:a7:32:c0:db:d9:31:42:7f:c1:bc:b6:e8:1b:5e:2b:20:
5a:e2:78:bd:a1:7a:51:90:2c:a4:e9:b1:62:f9:ad:9e:3a:86:
71:fb:99:d2:4a:2d:01:79:7d:ed:77:81:40:13:ca:6d:10:f7:
46:c0:17:6f:ff:78:02:0f:ef:8c:34:d7:11:e9:a6:62:68:38:
51:92:e5:96:16:74:e5:21:26:53:b5:31:43:1d:ff:2e:11:67:
cb:04:07:f4:68:3d:3f:4b:5f:10:7f:17:42:44:77:c6:1a:51:
4a:d5:ec:ed:d4:ce:ef:9a:d6:a0:87:7c:fd:75:a2:5b:38:b5:
f5:91:40:3f:df:d0:16:5c:a6:10:ac:b5:93:0e:3f:f4:2d:61:
7b:67:70:5c:5c:98:2f:4c:fd:f6:a3:f2:5b:c6:28:b2:fd:01:
ff:23:45:a5:65:c8:c3:bc:7c:b5:24:dd:bc:6b:44:0a:e1:21:
5f:fd:6d:05:e2:f7:d0:49:04:f1:42:4d:3d:6d:ab:f0:3c:74:
ce:dc:0f:2a:d7:4e:ea:ed:6b:7c:88:1d:06:54:e9:81:da:e6:
08:92:74:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:29 2025 by rpki-client