Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
File: guItqb8KdBce67TNmPwl8wQa3S8.mft (raw, json)
Hash identifier: YoezRi77OqCaW+/zaxWIsuQZzHxUAmzS+Oz2DxcqEVw=
Subject key identifier: 81:F8:FF:27:37:29:49:C1:E4:BC:42:37:F1:FF:29:C9:75:5A:B2:92
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Certificate issuer: /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial: 0199FFC79C52EC8ED9F0E28CC69C6D84F16A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:01:35 +0000
Manifest this update: Mon 20 Oct 2025 04:01:35 +0000
Manifest next update: Tue 21 Oct 2025 04:01:35 +0000
Files and hashes: 1: guItqb8KdBce67TNmPwl8wQa3S8.crl (hash: pqP14X6uSOx/CN1nKCBjrTMpsIAuyuBJGv402B/2+8w=)
2: st7UugSXha_zumczLwSMs_JMMGo.roa (hash: zW6BjWFPz0O6Tl0aYcPhSf3EE25VQRz5yPeKPIedYY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:9c:52:ec:8e:d9:f0:e2:8c:c6:9c:6d:84:f1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Validity
Not Before: Oct 20 04:01:35 2025 GMT
Not After : Oct 21 04:01:35 2025 GMT
Subject: CN=81f8ff27372949c1e4bc4237f1ff29c9755ab292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:84:3f:c2:c3:4a:60:25:f2:90:80:b0:8c:
23:1c:29:1c:fc:96:84:40:e4:ad:c8:bf:8c:14:40:
51:32:2d:19:06:88:6d:4d:65:c1:df:f5:a8:0e:cf:
2d:b8:a3:87:8e:39:06:ed:22:1c:d1:70:0a:72:e4:
ec:d5:06:76:08:da:99:0b:67:04:e9:63:6f:91:57:
89:93:7a:c4:de:34:6e:af:44:0c:97:aa:1a:b0:66:
f3:42:1c:19:30:4e:a2:41:63:3d:cd:ff:e1:30:9b:
94:93:63:c9:09:59:44:1c:d6:57:ae:14:a3:44:3a:
89:fc:02:76:37:87:b1:99:93:98:17:a5:96:95:26:
6b:ea:d8:42:23:48:4e:11:b5:2b:ce:8d:89:10:b5:
6f:ed:15:40:ae:02:c2:6a:1b:df:8b:f9:7e:73:18:
7e:da:39:95:1a:f1:fc:01:1b:e9:c1:ff:d9:2f:50:
ff:7d:7b:25:e9:7b:3d:75:d9:15:61:cd:0a:d8:22:
78:47:12:14:f2:75:8d:83:30:dc:f0:f9:a9:db:32:
67:69:0a:d1:9c:5f:f6:78:89:06:71:71:ea:ba:db:
c0:33:e8:f5:3c:32:88:a4:16:7f:b4:2f:f5:30:e6:
af:ff:79:19:ef:af:6a:be:b4:d8:7c:12:e5:3f:f5:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F8:FF:27:37:29:49:C1:E4:BC:42:37:F1:FF:29:C9:75:5A:B2:92
X509v3 Authority Key Identifier:
keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:93:cc:27:e0:e5:da:b7:eb:58:ab:4f:3c:a7:a6:19:74:de:
36:bd:e3:e2:7e:61:5c:71:72:75:31:8b:94:8b:95:0f:fe:0b:
f1:c4:cd:d0:be:cc:dc:c1:a1:3b:96:5d:46:81:b2:c4:6a:37:
9f:bd:a1:76:e8:71:79:6b:25:83:72:5b:3d:e3:50:44:55:fa:
a0:3f:af:57:41:57:0e:72:3e:91:49:e8:69:61:a7:5e:a9:1a:
4d:86:df:e7:9a:81:fc:3b:80:30:83:88:a2:0f:d1:4b:cf:8b:
c9:80:c8:69:8d:eb:0a:60:5f:c3:fa:0d:f8:f2:c5:a6:8a:67:
f6:9c:0b:5e:7b:89:de:62:99:30:e7:0f:95:95:a5:b8:11:d1:
26:08:2b:96:f4:9c:6d:ee:ed:e6:35:5a:76:6a:25:d4:39:69:
a7:0e:cf:c4:56:a4:36:70:b2:ab:95:53:59:14:f8:05:b5:cf:
0d:1c:35:29:f3:24:9b:6a:7f:30:51:6f:50:a7:d0:21:ce:4a:
2e:c5:aa:75:47:46:ca:9e:5f:23:0e:ce:c1:64:2a:3a:54:29:
8f:cd:2e:71:7e:23:a2:f6:4d:61:7c:83:60:b5:60:07:3f:ff:
70:66:21:d2:5d:b5:4a:c4:4f:6d:80:11:f2:46:cd:9e:28:51:
f5:df:01:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:08 2025 by rpki-client