Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: CsgHgUuuqAaS5L4FprqhCW4qsDAJYXfExWPdpVFRYT4=
Subject key identifier: E6:19:D1:2A:11:E5:D3:12:47:1C:39:2C:65:3A:13:C9:CB:90:0B:1C
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 0197B9337F181CD90A6E200CCD5BE5FB52C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 01:00:49 +0000
Manifest this update: Sun 29 Jun 2025 01:00:49 +0000
Manifest next update: Mon 30 Jun 2025 01:00:49 +0000
Files and hashes: 1: ZBzIfVthsK0IsXsJf3cg7sZHKWM.roa (hash: QAbyT2QSC2brj0n8JNXKmo27qkYMllHPEba5ZlKG1ys=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: u/vU6alHwsViZ5WzQaGOVkuWKuKihstFFgtzPWj6SaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:7f:18:1c:d9:0a:6e:20:0c:cd:5b:e5:fb:52:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Jun 29 01:00:49 2025 GMT
Not After : Jun 30 01:00:49 2025 GMT
Subject: CN=e619d12a11e5d312471c392c653a13c9cb900b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:6c:55:d3:d7:2e:b7:36:a8:15:8c:7f:f4:
ec:e1:66:06:99:fe:00:9c:19:d8:19:eb:92:31:5c:
4f:df:d2:a9:4e:8e:fe:3e:7d:c4:9d:e8:01:ba:c0:
0a:9c:05:3d:08:1d:7e:20:c2:2f:74:55:79:f2:84:
d6:53:d5:72:8d:00:c2:d0:2b:f7:83:86:70:0e:8c:
44:7a:82:2a:35:50:e4:37:75:b4:33:32:9f:01:bd:
36:43:93:80:ae:be:09:5f:3d:ad:3f:1d:e7:7b:e3:
63:50:08:bd:d7:6f:ae:6b:8a:bf:b1:b5:f3:e3:fb:
b7:e5:e2:09:91:ae:cc:2f:6e:ba:b1:1d:85:ab:a2:
34:eb:ad:14:2d:41:08:4c:76:ca:fe:cd:a8:98:b6:
f2:e2:fb:71:62:95:c2:dc:ac:19:94:53:25:75:76:
84:41:93:fd:34:26:98:68:b4:2d:8d:44:26:3b:1c:
4d:cb:0b:20:7a:a4:a6:12:38:6c:d4:f8:5e:71:47:
30:63:a4:88:1b:7a:17:f8:8b:20:2a:4b:7e:10:88:
3f:2a:8c:54:fa:41:9b:30:5c:06:41:9b:3c:6e:8a:
dd:9b:4f:c5:ed:29:29:c8:38:f9:12:1f:c8:1b:ba:
7c:86:a9:03:db:78:07:72:fb:5a:c5:5d:3c:24:33:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:19:D1:2A:11:E5:D3:12:47:1C:39:2C:65:3A:13:C9:CB:90:0B:1C
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4c:45:0a:e0:53:ed:71:15:4e:bd:b9:5b:30:4e:d7:a1:1d:
12:97:bf:10:87:f0:02:50:f3:ab:c2:f8:37:7f:42:e9:b2:eb:
de:7f:22:54:ec:20:a3:6b:23:25:06:ce:61:f8:d0:6a:11:34:
09:3d:6f:fd:f9:8a:8d:47:ab:fb:29:de:50:13:c3:8d:32:ff:
16:92:5a:46:07:fd:c0:92:99:89:b1:3c:3d:fa:43:b9:82:bb:
32:93:d3:da:ba:1a:7b:2c:7c:11:d0:8e:ad:5d:67:d9:52:f9:
75:4e:8a:63:fe:42:a1:25:59:9a:42:a0:4f:b6:7a:7b:b4:50:
56:84:93:3e:58:0c:4b:9c:c1:8c:73:82:1b:f8:b1:71:32:b1:
54:8e:a5:fe:42:98:1f:3f:66:05:9a:ef:01:20:64:12:d4:90:
74:4b:cc:68:57:26:d2:bb:be:7e:e8:1c:ea:6c:69:08:02:e6:
fa:66:a8:27:0a:93:a7:6e:8e:a8:ab:0f:4e:47:29:5c:35:07:
fe:5a:be:2e:1c:11:0d:36:f8:d9:80:8d:6d:85:c3:5b:19:86:
38:9a:8c:27:b2:47:5e:1b:30:be:7d:f8:dd:6b:11:30:e8:2e:
68:ca:5e:b9:d8:bb:c2:80:44:68:1c:89:73:8f:59:f1:33:ed:
c9:2b:f6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:58:54 2025 by rpki-client