Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
File: guOWgcWq77NeVPStivpCjU_94Go.mft (raw, json)
Hash identifier: T+Rf+xIPXLnV8REzs/uYk52i4wmNtZ+ckb9XiEhq8Ag=
Subject key identifier: 38:BE:DD:D6:EE:86:4B:38:AC:F7:0B:12:33:5A:41:64:55:EF:1D:12
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Certificate issuer: /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial: 0196B4EB232C19744C0F31E9669C3A7BF054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
Manifest number: 0D2C
Signing time: Fri 09 May 2025 12:00:30 +0000
Manifest this update: Fri 09 May 2025 12:00:30 +0000
Manifest next update: Sat 10 May 2025 12:00:30 +0000
Files and hashes: 1: FqQHS5x0K7fb3ABv-R1O2rQGEvc.roa (hash: 2VetqHsWLuCtCZQI5pXnNL52eNemAp797/ha4XRoM7M=)
2: _FNnAfXHIK3mS0z3F15N5D4m-eE.roa (hash: AzmbPxnJj3q2Pp6UGPDbM97rM3z/NgrygHufcP5z/7g=)
3: guOWgcWq77NeVPStivpCjU_94Go.crl (hash: s1/9u1kDi4Jhay/4vi9dhtETiLxJpiJUvGCZdZtF3XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:eb:23:2c:19:74:4c:0f:31:e9:66:9c:3a:7b:f0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Validity
Not Before: May 9 12:00:30 2025 GMT
Not After : May 10 12:00:30 2025 GMT
Subject: CN=38beddd6ee864b38acf70b12335a416455ef1d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:d4:b2:6b:12:d6:c4:98:5a:c5:7f:c8:02:
50:77:c2:e4:6c:51:85:af:a1:07:17:00:db:0e:bb:
ac:2a:68:a1:40:9e:e1:94:f4:a5:e6:62:e7:c6:c0:
a9:fc:9b:21:25:c9:e2:08:53:b5:65:90:27:6d:2c:
f0:a7:e7:27:5c:82:a3:7d:50:9a:57:67:db:05:41:
05:6a:d6:16:8d:4f:a7:8b:2f:52:46:8f:d3:a3:d1:
0e:dc:d0:c8:e9:95:83:dd:94:b8:ad:de:e2:1e:f9:
9f:56:6d:f6:55:e1:d4:5e:6d:1f:7b:d9:7c:ee:af:
6c:1a:82:b9:ec:0a:9d:7c:00:1d:d8:5f:72:bf:ae:
b4:7e:c5:71:b2:14:8d:49:42:31:c9:0f:48:4f:92:
32:8a:d5:d3:85:4a:67:f6:9e:6c:6b:db:dd:9e:85:
56:fe:c8:69:c2:10:7b:81:65:31:9c:f5:30:69:fd:
09:92:76:26:ff:47:a7:2d:3f:2f:48:c0:f6:21:f0:
68:d7:f2:31:35:16:f9:d1:b1:9e:92:bc:a2:f2:c7:
2e:75:c8:77:95:9e:dd:6a:de:22:06:0d:67:1f:3d:
18:93:8f:fe:c7:da:4d:5e:49:16:f5:8d:2a:3c:82:
88:81:f6:63:23:d0:e3:3f:02:86:65:c7:f3:d7:63:
f5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BE:DD:D6:EE:86:4B:38:AC:F7:0B:12:33:5A:41:64:55:EF:1D:12
X509v3 Authority Key Identifier:
keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:31:75:38:b3:a3:8e:f9:22:0a:7c:b9:07:ff:ff:b0:cc:4b:
4d:25:dd:80:36:cd:95:6b:43:68:8f:a1:a0:4b:a5:21:23:fa:
54:6c:5f:9d:32:12:f5:17:8a:ad:88:ef:80:6f:07:31:13:54:
a2:dd:bd:55:63:e7:43:2b:12:15:2d:20:c1:2a:42:1b:bc:46:
4b:41:e9:14:56:ba:5f:6a:10:8e:94:9a:92:88:63:1d:27:97:
57:4e:46:09:7b:5f:5d:c6:6f:3a:22:4e:18:bb:4c:d2:32:30:
97:0c:a3:8e:40:ae:32:90:e8:66:f0:2c:17:41:50:dc:43:dd:
0e:20:24:21:f7:d4:a5:30:dc:16:49:d1:cf:67:71:8a:18:cb:
86:2a:8f:4c:88:e7:68:56:f5:c8:83:1e:fb:18:08:c2:f5:58:
93:d3:6a:55:e7:5b:42:e4:62:56:b7:af:2d:7e:6d:e8:b4:b5:
3c:e9:7b:a0:d8:05:04:d5:2d:46:8d:e3:2a:7b:41:27:65:50:
94:b1:4f:fe:41:ac:5d:bd:51:65:6a:a4:49:ad:9a:26:6a:2f:
02:d8:2a:33:63:98:a3:c2:ad:80:58:b7:a9:6d:2d:70:71:97:
88:fc:99:40:04:1d:b6:38:e4:55:cf:71:19:20:35:1e:1e:54:
e8:7e:0b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:37:34 2025 by rpki-client