Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: Zi0ZLT2mya2oABuS0bj8dRE2EkBpR7+opKIdKMij3dA=
Subject key identifier: 59:EB:93:9B:08:03:CB:57:FA:E1:A2:A6:9E:CC:57:25:78:48:4B:29
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 0198D51617958AA6F03714F128D103EB89CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 04:00:51 +0000
Manifest this update: Sat 23 Aug 2025 04:00:51 +0000
Manifest next update: Sun 24 Aug 2025 04:00:51 +0000
Files and hashes: 1: ZBzIfVthsK0IsXsJf3cg7sZHKWM.roa (hash: QAbyT2QSC2brj0n8JNXKmo27qkYMllHPEba5ZlKG1ys=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: wMHBuigUZFTO6E9IboT2UQVh0/jg9DE7xGrIKET83zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:17:95:8a:a6:f0:37:14:f1:28:d1:03:eb:89:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Aug 23 04:00:51 2025 GMT
Not After : Aug 24 04:00:51 2025 GMT
Subject: CN=59eb939b0803cb57fae1a2a69ecc572578484b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:22:cf:be:09:3c:0e:03:36:ab:cf:dc:61:
a2:f5:b6:8b:d4:87:af:a6:fa:b7:b1:2b:e7:f8:80:
6a:c2:ac:f9:6a:76:00:c3:3c:ef:03:7f:e1:22:1f:
1c:af:fa:3b:07:27:41:19:18:d9:85:06:9f:1a:c2:
6f:10:4e:d1:62:9f:66:b6:17:b5:54:40:7c:36:4f:
91:d3:c5:e2:07:4d:9e:63:0b:27:72:ab:77:53:e6:
59:1a:fa:e5:be:88:59:76:31:02:b4:5b:7d:49:a5:
9f:e4:2f:82:b5:60:06:ad:e2:99:79:fa:c3:84:61:
6d:c5:a5:a3:83:67:bb:9e:8d:75:08:6c:dc:ee:7b:
5f:94:13:bb:f7:df:32:57:a7:fe:3a:5c:eb:ee:6c:
eb:a1:63:02:c9:0b:0e:e2:53:0c:6f:06:49:02:72:
b2:fd:3a:26:39:fa:ec:63:ba:67:fe:4a:96:b1:92:
a1:c1:1a:95:21:c8:e3:38:2d:c8:60:fb:5f:17:81:
4f:c1:3d:3b:78:c4:5b:10:a0:b5:4a:7b:0b:c6:15:
26:56:af:b2:7d:eb:1b:be:86:1e:47:bb:c4:f4:a4:
fb:bf:9c:41:e6:2b:c1:89:cd:f2:6c:f4:10:fd:ae:
c5:66:46:91:54:ce:12:0e:d0:d5:c3:78:ae:28:26:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EB:93:9B:08:03:CB:57:FA:E1:A2:A6:9E:CC:57:25:78:48:4B:29
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4d:d6:29:fc:82:0d:a1:ea:dc:35:e3:31:9d:7d:86:46:9d:
6c:b3:97:d8:c0:cd:0c:be:ed:d8:2d:28:cb:2c:73:a6:1f:5f:
58:d9:47:18:a6:52:c6:b0:4f:8a:72:3d:ec:00:bd:01:3a:9d:
25:79:83:f8:05:26:5d:dc:c2:8b:82:4c:13:57:87:d9:2b:ae:
2e:24:44:26:a5:08:03:f6:cc:eb:1e:be:65:dd:45:de:0b:d4:
c2:06:df:17:2d:e0:a9:2c:51:c1:35:b4:e2:99:6b:85:d5:66:
71:46:bc:f8:c9:b8:fe:52:bc:d6:ff:ea:7a:f2:1b:2f:c4:55:
b9:59:23:49:25:da:e1:33:1a:f8:45:1a:dc:ad:00:b2:1c:a9:
9c:d9:af:10:53:e3:42:c7:4a:2e:a8:af:86:0b:a3:49:3e:ba:
e3:7b:5e:75:56:fe:e2:96:9b:80:a6:51:91:1d:38:b3:66:20:
f8:0f:91:b0:d5:8b:2b:ed:71:f1:5f:f8:5d:77:f9:0c:60:d2:
d3:6b:7e:89:6f:3a:6c:dd:41:6b:5d:12:53:86:73:d3:58:81:
07:be:e2:a7:5e:8a:8e:fb:1f:bf:8b:0e:85:43:94:26:df:dc:
c0:d2:f2:f4:94:81:85:ad:dc:cb:a8:d5:ed:a9:80:6e:ae:66:
82:d8:8e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:21 2025 by rpki-client