Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
File: guOWgcWq77NeVPStivpCjU_94Go.mft (raw, json)
Hash identifier: P4fFMYodqzADvGuik6vdOG0Y1HbHkuDOHtW2KXc+xFo=
Subject key identifier: 14:80:BB:21:68:78:8D:D6:8F:24:03:D6:62:19:0E:EC:09:91:38:AF
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Certificate issuer: /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial: 0199FB0F326FF82DCFF2556FBA1447A502BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
Manifest number: 0EDE
Signing time: Sun 19 Oct 2025 06:01:41 +0000
Manifest this update: Sun 19 Oct 2025 06:01:41 +0000
Manifest next update: Mon 20 Oct 2025 06:01:41 +0000
Files and hashes: 1: FqQHS5x0K7fb3ABv-R1O2rQGEvc.roa (hash: 2VetqHsWLuCtCZQI5pXnNL52eNemAp797/ha4XRoM7M=)
2: _FNnAfXHIK3mS0z3F15N5D4m-eE.roa (hash: AzmbPxnJj3q2Pp6UGPDbM97rM3z/NgrygHufcP5z/7g=)
3: guOWgcWq77NeVPStivpCjU_94Go.crl (hash: Q0bcWNddCRLvUN637RHe5V+Y6noTl9yyMdayChC7i+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:32:6f:f8:2d:cf:f2:55:6f:ba:14:47:a5:02:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Validity
Not Before: Oct 19 06:01:41 2025 GMT
Not After : Oct 20 06:01:41 2025 GMT
Subject: CN=1480bb2168788dd68f2403d662190eec099138af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:eb:b9:93:91:dc:4b:b4:46:f8:33:a5:60:
57:33:14:b8:2c:0d:cc:0b:01:b7:be:6c:2d:d5:87:
56:6d:1c:a7:37:29:6b:32:54:4a:c3:31:50:c2:d1:
63:5c:d0:d2:22:ed:ba:ae:79:17:ea:7d:a5:55:ee:
41:dd:32:8f:99:32:ba:92:8b:d5:6b:b0:e1:83:2c:
86:f0:1d:c7:09:8b:89:88:81:89:62:2f:c7:9a:c6:
ae:28:16:7e:95:43:dc:65:d2:91:92:cf:25:e5:cd:
0f:c3:4e:c6:f4:f4:c2:16:83:f9:8e:99:2d:98:51:
c8:b0:78:b0:64:2c:88:0e:83:e7:cb:23:50:2e:3a:
e0:4d:e9:ab:ac:4d:9a:4c:46:3b:97:5e:cf:d3:63:
ba:a9:1e:33:74:0b:59:8b:58:34:f9:71:3d:fd:79:
22:4f:c8:b0:37:30:29:c0:39:f5:23:cd:15:61:2a:
a3:dd:d6:10:a3:49:9d:f6:fd:ce:6a:54:0b:d1:2e:
9e:6c:ea:c1:8d:0b:cf:dd:d6:3b:2c:31:15:4e:ea:
3a:8b:33:fb:73:2a:a5:2f:36:33:78:3c:4a:73:f6:
26:7c:84:ff:7b:4c:42:65:df:d6:5b:56:d7:9e:24:
4a:d7:64:f1:68:c2:18:e7:1b:3c:ca:80:95:4b:a8:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:80:BB:21:68:78:8D:D6:8F:24:03:D6:62:19:0E:EC:09:91:38:AF
X509v3 Authority Key Identifier:
keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1b:c3:2b:1e:08:c3:2b:74:d1:28:9c:b1:db:d2:f9:a8:0f:
b0:88:f2:8c:fc:bb:2f:a4:94:af:d7:6f:20:2b:4f:1e:3b:c8:
38:cf:df:e0:32:18:9b:39:c8:f1:fe:2a:b9:b7:e5:96:b1:16:
be:f4:dc:1e:3c:16:09:5e:b2:1e:4a:19:ff:5b:f4:bd:9f:d1:
e3:2b:11:fb:4b:7a:ef:1c:98:d9:e3:b2:74:23:25:47:3e:40:
96:4f:d4:5b:cf:0c:7a:12:cd:19:e6:e2:7f:10:47:52:54:98:
24:77:8a:70:2b:93:1c:7f:86:49:d1:bc:a9:cc:5c:2a:0d:e6:
e2:a3:e0:4a:71:71:f2:ff:ba:25:89:73:72:42:8b:21:af:a8:
ef:dc:d2:dd:d7:4e:34:bc:df:29:35:c1:e2:1d:1e:1a:b7:fb:
bf:08:fe:3a:6d:73:fd:dd:7a:75:ff:a0:5e:21:f1:49:e4:cd:
3c:de:e9:99:02:69:22:70:50:cb:fd:01:bc:af:02:68:3f:00:
1b:31:29:19:a6:13:6c:9f:08:85:e4:6b:ae:91:f6:f2:84:82:
99:0f:0b:3d:bc:b9:8a:91:1d:16:bb:ae:fe:fb:0a:5a:12:00:
b7:95:9c:c9:31:b9:ae:a1:bb:a7:88:6e:c3:b3:40:cb:b3:6f:
1a:4a:0d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:43 2025 by rpki-client