Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
File: guItqb8KdBce67TNmPwl8wQa3S8.mft (raw, json)
Hash identifier: hOOmnHnE0Y8GKofUJCUYCLxp4SfdmKHRss4cWxq2shU=
Subject key identifier: 7C:06:32:4F:06:11:72:29:03:EA:B4:7A:07:9D:D0:46:A6:A9:90:5B
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Certificate issuer: /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial: 0199FDD9BF1F8EA86467CBCF029BC5BB3B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:02:09 +0000
Manifest this update: Sun 19 Oct 2025 19:02:09 +0000
Manifest next update: Mon 20 Oct 2025 19:02:09 +0000
Files and hashes: 1: guItqb8KdBce67TNmPwl8wQa3S8.crl (hash: nsbsIt2TqdirvS7ll/+pIzA0HuMv8OpbZh9WvQVCGFw=)
2: st7UugSXha_zumczLwSMs_JMMGo.roa (hash: zW6BjWFPz0O6Tl0aYcPhSf3EE25VQRz5yPeKPIedYY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:bf:1f:8e:a8:64:67:cb:cf:02:9b:c5:bb:3b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Validity
Not Before: Oct 19 19:02:09 2025 GMT
Not After : Oct 20 19:02:09 2025 GMT
Subject: CN=7c06324f0611722903eab47a079dd046a6a9905b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:fd:da:ed:81:50:d7:26:f6:22:98:3f:d8:
1a:cb:f1:2d:0c:21:cc:b2:36:d0:7a:be:a8:68:ff:
8e:ac:5e:f0:a5:12:d2:52:76:ed:a2:92:14:be:4a:
87:58:11:50:b3:93:7b:ef:94:64:e8:57:93:ef:a0:
95:45:88:8a:a1:49:cc:cd:82:7a:a7:91:93:35:11:
7b:85:b1:ac:e1:56:e9:04:40:87:bc:30:00:af:04:
ee:98:42:76:2e:1e:a5:54:35:be:c8:7e:b6:cf:fa:
67:6f:91:bf:9a:06:76:c5:a1:b8:11:2a:19:c4:f4:
ba:a1:ec:a9:57:0e:a5:b1:c9:eb:a3:b6:6f:09:f9:
49:be:00:e0:83:bc:dd:f9:8b:ff:42:93:e3:d9:aa:
54:ba:89:f9:02:38:9c:58:78:e5:77:34:31:22:39:
ea:8e:0f:9d:8b:54:f4:82:04:f6:c1:de:a4:66:16:
d3:79:14:3d:a0:9c:1a:fb:c7:1c:83:5e:39:1c:14:
60:4a:f8:cb:03:14:fa:05:2a:20:9a:8b:39:14:41:
c9:2b:51:00:5e:f5:c8:aa:19:51:d3:71:08:ab:54:
72:c3:12:7b:63:5f:d1:63:72:56:d8:07:71:b6:22:
8a:20:7f:f8:e6:3f:d7:2b:ff:20:06:61:2e:1e:30:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:06:32:4F:06:11:72:29:03:EA:B4:7A:07:9D:D0:46:A6:A9:90:5B
X509v3 Authority Key Identifier:
keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e8:fc:2d:6a:36:0e:5d:cf:24:2d:98:60:17:6f:05:7e:77:
ee:8b:73:b4:68:26:42:9d:3b:da:1f:d1:38:fa:97:3c:0b:6a:
e6:a0:c4:f2:db:0d:76:e8:8f:67:db:4d:28:84:1c:0b:2e:e0:
fc:5d:68:66:30:dd:45:5b:42:ff:a6:0e:9d:0a:63:2e:d7:c6:
36:fe:cb:9e:ec:7b:f3:6a:c2:09:8f:93:42:33:79:ba:ec:98:
1d:55:1b:92:e4:19:e1:f2:e1:c6:fa:ed:0d:c8:4f:4c:4d:d4:
5f:c3:b9:26:bb:56:99:37:d6:b2:76:82:b9:51:1c:91:e8:25:
b5:9b:aa:ad:52:8e:e3:6e:b5:d0:74:5d:2f:5b:d5:fc:d0:68:
13:14:46:ea:6d:ec:ab:85:c0:82:c5:f0:77:07:52:23:36:02:
25:b5:2b:8e:28:e4:00:3f:82:d1:b6:e5:37:03:1f:93:31:d8:
ac:f2:2b:73:54:32:c2:8b:76:a4:ba:72:0f:c4:4f:5f:0d:66:
67:21:b2:11:f0:5c:d0:e2:e5:62:3d:39:3d:a5:d6:bb:19:ea:
ce:07:d7:bc:55:ad:ff:d5:a4:37:1e:e9:1b:7a:dc:4e:ad:ea:
db:b6:be:23:20:08:b5:8c:da:69:45:04:3f:b5:a1:ee:23:41:
e3:3d:f0:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92b8fjqhkZ8vPApvFuzsRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTIyZGE5YmYwYTc0MTcxZWViYjRjZDk4ZmMyNWYzMDQx
YWRkMmYwHhcNMjUxMDE5MTkwMjA5WhcNMjUxMDIwMTkwMjA5WjAzMTEwLwYDVQQD
Eyg3YzA2MzI0ZjA2MTE3MjI5MDNlYWI0N2EwNzlkZDA0NmE2YTk5MDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucj92u2BUNcm9iKYP9gay/EtDCHM
sjbQer6oaP+OrF7wpRLSUnbtopIUvkqHWBFQs5N775Rk6FeT76CVRYiKoUnMzYJ6
p5GTNRF7hbGs4VbpBECHvDAArwTumEJ2Lh6lVDW+yH62z/pnb5G/mgZ2xaG4ESoZ
xPS6oeypVw6lscnro7ZvCflJvgDgg7zd+Yv/QpPj2apUuon5AjicWHjldzQxIjnq
jg+di1T0ggT2wd6kZhbTeRQ9oJwa+8ccg145HBRgSvjLAxT6BSogmos5FEHJK1EA
XvXIqhlR03EIq1RywxJ7Y1/RY3JW2AdxtiKKIH/45j/XK/8gBmEuHjCgxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwGMk8GEXIpA+q0eged0EamqZBbMB8GA1UdIwQY
MBaAFILiLam/CnQXHuu0zZj8JfMEGt0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hODliM2MtOTcyYy00YmVlLTgwZjIt
NWMyOTE5ZGE4ZGYzLzEvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hODliM2MtOTcyYy00YmVlLTgwZjItNWMyOTE5ZGE4ZGYz
LzEvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApuj8LWo2
Dl3PJC2YYBdvBX537otztGgmQp072h/ROPqXPAtq5qDE8tsNduiPZ9tNKIQcCy7g
/F1oZjDdRVtC/6YOnQpjLtfGNv7Lnux782rCCY+TQjN5uuyYHVUbkuQZ4fLhxvrt
DchPTE3UX8O5JrtWmTfWsnaCuVEckegltZuqrVKO42610HRdL1vV/NBoExRG6m3s
q4XAgsXwdwdSIzYCJbUrjijkAD+C0bblNwMfkzHYrPIrc1Qywot2pLpyD8RPXw1m
ZyGyEfBc0OLlYj05PaXWuxnqzgfXvFWt/9WkNx7pG3rcTq3q27a+IyAItYzaaUUE
P7Wh7iNB4z3wxQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:14:06 2025 by rpki-client