Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: f5j2tLjO/uvKJs17IJMSW84k+CiDOnBnuticF327J+k=
Subject key identifier: A1:55:10:DB:D7:8B:4D:4C:8D:9D:39:C7:4B:28:BF:D2:9A:2B:11:F3
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 0199FC8F49A2EC5ECB09A424573860406BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: ZBzIfVthsK0IsXsJf3cg7sZHKWM.roa (hash: QAbyT2QSC2brj0n8JNXKmo27qkYMllHPEba5ZlKG1ys=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: 8DqtF28bd/jNFCwhhWsoav3NWtVpnt74PhttxEWRNKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:49:a2:ec:5e:cb:09:a4:24:57:38:60:40:6b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=a15510dbd78b4d4c8d9d39c74b28bfd29a2b11f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:23:2e:62:03:12:2e:f8:e9:68:5e:d8:da:
cf:8b:13:2f:5f:54:d0:98:f5:46:27:72:2a:c0:81:
6b:5d:07:89:e9:a5:16:b8:fb:db:d0:07:72:b1:82:
e8:a2:97:ca:d1:a9:d9:6e:27:53:a4:1e:17:b4:a3:
74:3e:d6:fc:ca:53:6c:bc:e1:b6:a9:a0:c0:af:59:
88:32:c2:cc:cd:1f:df:c8:36:e1:3c:20:30:9f:a0:
8f:a2:e0:83:6e:74:a4:f0:43:3a:78:06:5e:2a:86:
57:d9:73:d5:35:a0:7a:bb:39:ca:43:c3:60:01:b8:
41:9b:f7:9f:51:48:bf:4c:56:6c:aa:dd:af:1d:39:
f6:b0:d7:01:62:52:49:76:4b:de:29:12:cb:99:3b:
49:f9:fd:11:e8:61:4d:67:db:4c:ae:5a:28:6e:d8:
b2:a9:41:f8:47:b8:7c:3d:ee:20:ca:ba:e8:ab:86:
0a:22:eb:63:4e:f1:dd:59:4b:5d:4e:40:58:dd:11:
be:7e:ad:f5:23:52:68:15:24:b1:31:86:52:0f:a0:
61:e7:fe:76:e3:11:f3:7a:02:aa:dd:36:b2:fc:8a:
7f:0c:32:08:c9:2f:93:6b:d8:76:3c:4b:c9:15:78:
14:75:f1:43:15:7f:50:46:4f:57:65:6a:ef:47:55:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:55:10:DB:D7:8B:4D:4C:8D:9D:39:C7:4B:28:BF:D2:9A:2B:11:F3
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0f:a5:82:53:f0:70:6b:6d:40:95:93:f5:be:a9:d5:15:c4:
b6:66:46:e3:23:8b:7d:5e:1c:e0:00:b9:ff:dc:3a:84:7d:05:
c3:2e:22:1f:7c:79:5d:e4:29:f8:38:e3:84:3e:7b:2f:92:ce:
3f:9d:e9:bb:4a:d0:da:7b:d1:9b:06:74:5f:91:3b:88:a1:4a:
79:10:aa:c2:8e:d9:e6:70:d0:50:07:91:a1:d4:70:9d:28:63:
5b:76:8b:23:9f:82:5a:48:49:18:9c:2e:72:c9:d9:57:2b:43:
9f:39:6b:25:3c:29:0b:00:2a:bb:b4:94:bb:7e:91:53:5e:4a:
ae:c8:eb:69:90:16:39:69:9a:bb:6c:f9:a6:3b:27:82:22:1e:
f7:1f:17:d5:d5:9b:4c:ba:bc:b5:3f:94:a9:18:ad:96:3d:96:
f7:ca:4d:65:14:6f:87:93:81:ff:90:41:7a:f9:66:ae:3d:e8:
f5:b9:13:06:25:bb:cd:bb:27:75:f3:9f:81:ca:81:ed:a1:f5:
d8:95:83:55:56:3e:d1:e0:c2:34:67:cd:4f:59:a1:a0:a0:24:
f0:23:c9:5d:f1:e5:1c:09:5b:32:10:21:a8:a4:de:40:3e:29:
60:53:21:dc:a1:32:ad:21:03:15:68:70:bd:45:4f:8c:b1:b8:
8c:cf:57:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:26 2025 by rpki-client