Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
File: guItqb8KdBce67TNmPwl8wQa3S8.mft (raw, json)
Hash identifier: 6u+jLtaxKetkB76EbuV1P0wU/vxCO2Cnis5k6Tjy48w=
Subject key identifier: 43:55:0D:E0:0A:CD:BD:0F:81:8B:53:4F:01:FF:A7:C0:EF:CC:49:27
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Certificate issuer: /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial: 0198D6602325AF49D1CEE70B8EEB4BEEBE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:21 +0000
Manifest this update: Sat 23 Aug 2025 10:01:21 +0000
Manifest next update: Sun 24 Aug 2025 10:01:21 +0000
Files and hashes: 1: guItqb8KdBce67TNmPwl8wQa3S8.crl (hash: 3oVdR1adjt+u5AcEKfdFXr0SlBY/iIRxIucrgPpy6lk=)
2: st7UugSXha_zumczLwSMs_JMMGo.roa (hash: zW6BjWFPz0O6Tl0aYcPhSf3EE25VQRz5yPeKPIedYY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:23:25:af:49:d1:ce:e7:0b:8e:eb:4b:ee:be:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Validity
Not Before: Aug 23 10:01:21 2025 GMT
Not After : Aug 24 10:01:21 2025 GMT
Subject: CN=43550de00acdbd0f818b534f01ffa7c0efcc4927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:2c:2b:fb:3d:c2:17:7e:d3:b1:77:d6:f7:
15:e4:39:b1:3e:31:8c:78:0c:34:c1:11:c5:86:84:
f1:af:b3:f8:3b:45:52:13:a1:cd:03:ec:6c:cf:b9:
c0:11:e3:e2:0b:f1:ff:44:ef:73:33:d0:e5:bf:0c:
1a:05:93:28:45:9c:a4:f0:75:e1:b0:ce:38:af:d9:
a2:52:44:ed:3d:b2:ce:10:6a:9a:b7:e4:f1:96:34:
81:0e:74:82:97:74:9f:c2:7e:7c:56:17:87:d5:58:
ca:25:53:25:9c:d0:f8:95:75:09:45:e6:a2:37:e9:
e9:21:e0:3d:c4:6a:fa:21:a1:49:72:79:8f:dd:f1:
10:80:f4:ca:7e:7e:f3:a1:55:b1:d2:0e:9e:5a:88:
3e:df:8b:42:48:e2:c3:bc:5e:3b:5f:c9:46:89:30:
0a:26:9a:3f:51:23:b3:ff:21:02:1e:de:a3:28:50:
80:e4:e4:35:7a:e9:a1:97:82:c1:57:6a:9c:fe:54:
85:70:b2:b0:e0:fe:22:05:ac:86:4f:bf:26:ee:b3:
29:57:50:73:c3:88:a1:08:4c:5f:d5:7c:cb:9e:6f:
19:a2:1b:8c:81:32:a4:a8:5d:dd:b7:b8:69:1a:cc:
98:44:66:03:12:19:bb:5b:42:ad:26:1b:25:af:c9:
56:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:55:0D:E0:0A:CD:BD:0F:81:8B:53:4F:01:FF:A7:C0:EF:CC:49:27
X509v3 Authority Key Identifier:
keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c9:e9:da:d9:f4:5c:f4:cd:03:47:44:07:c2:5e:e9:68:af:
d1:ee:03:45:21:ca:39:35:96:c2:31:c5:31:ab:02:a1:1d:fa:
03:15:dd:16:aa:ef:4f:d5:55:58:29:6f:56:1c:a6:e1:b8:c6:
28:f8:af:af:71:cd:71:15:89:07:37:8e:2b:9b:35:96:4c:80:
a6:d6:9b:49:c0:9f:e5:87:22:a5:fd:09:3a:1d:3d:37:88:a1:
fe:11:c2:0c:4a:41:23:a2:75:14:0f:fa:d3:71:2b:cd:a3:70:
ec:6d:13:0a:b1:87:79:56:07:e1:f6:09:40:7b:bc:e2:11:6f:
87:d7:b1:7d:b1:88:e0:f6:0b:78:df:76:f9:80:e5:5d:35:af:
cd:d4:89:9b:4f:ed:4e:61:d3:1e:56:bf:cd:df:58:07:14:4d:
4f:64:57:7b:47:29:b5:82:71:7e:90:29:39:24:94:0e:3e:de:
cc:30:15:86:fd:8d:c5:34:e1:aa:f3:9f:8f:b3:3e:27:ec:59:
a0:63:2a:b4:33:b7:b6:56:e9:26:40:34:96:01:67:c2:65:7d:
fc:8f:f1:9a:39:f6:df:96:6d:26:9b:ce:68:c3:c6:de:27:42:
fc:6b:38:14:d5:37:f4:57:69:12:85:b1:33:db:e6:0b:0a:55:
d9:ca:e4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:53 2025 by rpki-client