Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
File: guaSFNb9VedQULqBG_fBJDkQn-4.mft (raw, json)
Hash identifier: UUlLI5aeRHwRLUlQ9dttIsRIteF+oAa8dQNk8m0kFkA=
Subject key identifier: B2:B4:FB:C3:BF:E4:7D:21:B1:C2:22:4C:66:8F:6C:94:DD:B5:A9:6D
Authority key identifier: 82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
Certificate issuer: /CN=82e69214d6fd55e75050ba811bf7c12439109fee
Certificate serial: 019A500750D22A1EF3F5F20EA479ECB903A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
Manifest number: 0DF5
Signing time: Tue 04 Nov 2025 18:00:47 +0000
Manifest this update: Tue 04 Nov 2025 18:00:47 +0000
Manifest next update: Wed 05 Nov 2025 18:00:47 +0000
Files and hashes: 1: Yf8xLh6ONOE-LcHsXkQWHpv_Qbs.roa (hash: w0wC5FwQryxr68NY97Vqd4lkkn8kQ9lhz7BZtY1f10I=)
2: guaSFNb9VedQULqBG_fBJDkQn-4.crl (hash: 6CE7rX4vhxeUTBbI/8GeU8BEMsH2ymcx0QuspXFSlu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:50:d2:2a:1e:f3:f5:f2:0e:a4:79:ec:b9:03:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e69214d6fd55e75050ba811bf7c12439109fee
Validity
Not Before: Nov 4 18:00:47 2025 GMT
Not After : Nov 5 18:00:47 2025 GMT
Subject: CN=b2b4fbc3bfe47d21b1c2224c668f6c94ddb5a96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:ed:6b:59:fe:3a:0e:43:ac:f6:6c:39:41:
e1:11:db:bb:69:42:99:ca:3f:dd:df:eb:77:05:db:
45:71:c8:32:0f:be:7a:b2:34:c3:7d:17:b4:6c:70:
d4:78:f0:b8:3d:b5:ee:ba:22:dc:b3:8b:2a:c8:d6:
dd:b6:ef:cf:e0:61:dc:d0:3c:1d:5f:d3:b5:e0:3d:
df:87:21:24:bc:a1:dc:2d:0d:81:94:95:a4:75:b9:
7a:6b:f3:1e:0c:55:a9:ab:11:d7:41:45:43:38:5a:
65:42:ee:31:69:67:2e:68:92:a7:b8:87:11:0e:9b:
7d:e4:67:73:44:96:9c:40:65:91:05:09:25:a9:2f:
d6:95:1f:92:b9:7f:af:62:3b:e3:a0:c2:a8:ef:0a:
6f:e7:08:b9:db:98:30:f6:7d:c7:3b:c1:eb:29:92:
90:d3:da:a7:d9:19:f2:88:f6:7d:89:2d:c3:2f:ef:
ca:ef:a5:b6:bc:70:74:e0:11:40:e2:83:6b:b1:12:
03:d9:dc:b2:60:a7:90:2e:b6:c1:e5:4b:10:bd:93:
d0:ce:c5:d3:ed:69:5c:1d:61:52:96:0a:0e:fa:ae:
ff:9e:23:6e:68:a7:4f:b8:8c:9b:69:57:4d:3a:81:
59:2c:11:1c:02:4a:c6:e2:0d:17:67:f6:d8:3d:07:
5f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B4:FB:C3:BF:E4:7D:21:B1:C2:22:4C:66:8F:6C:94:DD:B5:A9:6D
X509v3 Authority Key Identifier:
keyid:82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:76:15:d4:6f:c0:eb:10:cb:0a:8a:33:ea:89:22:ee:f1:a6:
5e:24:71:1c:54:43:95:78:ce:b3:84:3d:f9:01:29:47:23:b0:
b6:80:28:8e:23:42:7c:cd:14:9f:8b:d3:c8:24:f0:40:bd:ae:
70:45:a1:34:96:d2:7c:c4:0d:90:ee:88:0b:a3:17:89:7c:9f:
68:c4:d6:49:ac:33:0a:ba:7b:6b:c4:9f:d9:42:56:d7:8c:59:
3d:69:84:03:18:56:18:d7:49:5a:9a:39:7d:33:0d:0f:50:f6:
74:d8:86:85:19:64:8a:94:53:5d:bd:8b:0a:60:24:37:85:4f:
7d:c2:26:21:a7:64:8f:b9:03:51:67:65:63:9f:1c:26:41:72:
25:82:40:08:8c:62:9d:ca:ff:89:a9:4e:2a:f3:00:54:21:f6:
90:74:8d:d8:51:f3:9c:9a:78:54:77:4f:91:d3:18:9f:5d:53:
a6:84:1c:5a:06:c9:66:41:56:81:d9:81:12:57:f3:e3:48:03:
29:22:5b:e5:d1:98:0c:b0:71:a7:8a:d8:e0:06:55:31:0d:1b:
1e:74:1f:5b:32:42:1e:a6:ef:00:d4:6f:1e:60:4c:b1:99:47:
1f:ba:73:3f:20:61:de:2d:c0:ff:ce:d4:1f:a5:e2:3f:59:58:
af:05:12:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:55 2025 by rpki-client