Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
File: guaSFNb9VedQULqBG_fBJDkQn-4.mft (raw, json)
Hash identifier: HC173eR590rf8e2gojOpwSyhYek0/IvHxov+/B/hf5o=
Subject key identifier: FA:2A:A6:0E:4C:50:E3:2B:2D:DB:7D:AB:00:F6:03:99:90:C1:9B:CD
Authority key identifier: 82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
Certificate issuer: /CN=82e69214d6fd55e75050ba811bf7c12439109fee
Certificate serial: 019874F4D6A6293FCBE86609E84D6F1458E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
Manifest number: 0CFF
Signing time: Mon 04 Aug 2025 12:00:59 +0000
Manifest this update: Mon 04 Aug 2025 12:00:59 +0000
Manifest next update: Tue 05 Aug 2025 12:00:59 +0000
Files and hashes: 1: Yf8xLh6ONOE-LcHsXkQWHpv_Qbs.roa (hash: w0wC5FwQryxr68NY97Vqd4lkkn8kQ9lhz7BZtY1f10I=)
2: guaSFNb9VedQULqBG_fBJDkQn-4.crl (hash: Re0bFCx+zmsdHmdw+Xvxdxc+noCdJzuK7462VBjH+mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:d6:a6:29:3f:cb:e8:66:09:e8:4d:6f:14:58:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e69214d6fd55e75050ba811bf7c12439109fee
Validity
Not Before: Aug 4 12:00:59 2025 GMT
Not After : Aug 5 12:00:59 2025 GMT
Subject: CN=fa2aa60e4c50e32b2ddb7dab00f6039990c19bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:14:e0:96:2e:f8:44:f7:7e:03:a7:31:15:
26:44:57:bb:2f:1c:df:87:af:9c:a9:f6:08:bd:53:
ad:93:f1:55:02:04:cd:26:9a:67:1b:c1:4d:2b:79:
73:e2:42:13:e5:fa:a4:c2:2b:97:a7:70:71:46:a9:
1a:e5:35:2e:30:32:b5:0a:f4:be:6a:b8:5d:bd:bf:
05:cb:30:90:6d:93:8c:fc:e4:43:de:55:22:4f:68:
aa:13:f0:0d:dd:2b:05:ee:57:ec:f9:d0:f9:df:2a:
cd:d4:f8:a9:00:33:d1:dd:b7:a2:87:ce:b1:18:81:
ba:b0:6f:ae:85:00:5b:85:e8:78:b7:6d:96:b9:cd:
00:2b:51:5f:ec:75:2b:a5:1e:cf:9c:4b:a1:0c:87:
fe:d0:72:c3:01:7b:fd:81:cb:17:86:e8:68:56:d2:
35:9f:7f:7a:d4:76:ed:35:b2:58:eb:54:a2:0f:71:
d8:75:54:9d:f0:2e:ee:4e:89:c1:86:91:2a:f5:f5:
11:be:fe:13:fa:13:6b:f8:a6:e6:d9:ac:8b:fa:1b:
e8:6a:2e:9f:68:f5:8d:d5:92:73:ad:50:7b:e8:6a:
a6:c9:29:a8:d2:47:f6:8b:46:49:3e:6b:9f:0c:8d:
eb:ce:7f:19:5d:0e:55:7d:d3:ed:53:a3:fd:88:cc:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2A:A6:0E:4C:50:E3:2B:2D:DB:7D:AB:00:F6:03:99:90:C1:9B:CD
X509v3 Authority Key Identifier:
keyid:82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5b:6e:7b:67:d1:b8:17:c6:48:4c:87:87:8e:e7:4f:27:87:
d0:37:d3:b2:ec:6e:19:61:f3:23:11:e9:89:a8:d6:f0:bb:b0:
74:94:bd:99:e9:91:2c:e4:e0:24:26:28:26:11:aa:77:c7:9c:
32:3f:29:31:a0:c0:a2:c1:0a:1b:99:c8:c4:d0:83:c3:cc:92:
6a:c4:3d:cc:e6:a2:78:b2:19:a0:99:7f:d7:2b:7d:69:4a:60:
e3:41:8f:79:6e:fd:64:80:84:46:2e:75:c5:3e:11:9b:73:3e:
20:5f:b4:38:1b:96:4c:49:0b:1f:72:f9:76:a1:8c:f9:74:57:
03:36:f1:1b:2c:f0:5f:98:4f:54:bd:9b:e0:8d:d8:e8:ed:e7:
2d:d8:fc:ef:22:f5:d6:48:57:fa:d6:46:9b:21:49:5d:e0:34:
0f:a5:71:42:f8:39:9f:b1:23:bc:c9:77:3a:50:b3:ad:5a:5e:
aa:82:2b:e5:f9:db:ed:bf:dd:36:59:36:7a:00:8f:3a:df:a1:
05:12:29:cd:24:9e:1e:f6:e8:3b:49:00:0d:0f:80:34:e3:e4:
19:15:01:aa:71:73:19:72:23:4d:ee:28:82:88:d2:b6:28:8c:
9b:c6:4c:0b:7c:b3:df:dd:97:ef:09:c9:01:7a:ef:c6:a4:ec:
1f:f1:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:08 2025 by rpki-client