Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
File: guX7w-pSWnjGMMTahkuppg4Zm_8.mft (raw, json)
Hash identifier: 0TFmuyXBUC8mF3oGktI44iIpjAURKesKd8IEpVPHuaI=
Subject key identifier: 39:D2:29:D4:F5:01:08:0F:31:D9:2D:43:B0:17:57:59:9B:16:DA:11
Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
Certificate issuer: /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Certificate serial: 01987A51C83DEA86B1EAE4988AB48163DBF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 13:00:36 +0000
Manifest this update: Tue 05 Aug 2025 13:00:36 +0000
Manifest next update: Wed 06 Aug 2025 13:00:36 +0000
Files and hashes: 1: 1-QG4tCncv0FTtCHqg5B2GIvzr7Y.roa (hash: Y2rS+2UdPK85e7sE5yCklBS//u+UrJBVKAmv+QqSGio=)
2: guX7w-pSWnjGMMTahkuppg4Zm_8.crl (hash: 0BdHin8xYjZXGyqjDvoGbwvNvbH0oq7o5HqmKYg2srk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:51:c8:3d:ea:86:b1:ea:e4:98:8a:b4:81:63:db:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Validity
Not Before: Aug 5 13:00:36 2025 GMT
Not After : Aug 6 13:00:36 2025 GMT
Subject: CN=39d229d4f501080f31d92d43b01757599b16da11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:52:3a:04:d4:60:3e:51:60:d6:fe:f0:84:
4f:10:d5:37:83:d5:33:a1:0a:e0:e0:87:be:f7:66:
a3:c4:64:86:64:7d:bf:03:c8:a1:79:c6:c4:54:08:
de:d5:f0:11:70:e7:f8:ae:ef:90:86:f5:eb:f3:14:
12:3c:bf:1e:17:a0:97:0e:bb:04:98:23:99:9c:12:
79:a4:73:28:56:1a:4f:4f:2e:bb:a9:c6:18:04:a8:
24:5f:c2:5f:1a:50:00:65:e3:e0:49:a8:cb:05:44:
4e:ac:a7:ae:69:a9:89:82:cf:7c:33:11:81:af:c2:
73:6e:4f:f6:23:b3:c6:ba:50:48:aa:b5:bd:62:2d:
5b:19:b0:45:e8:d8:f2:f9:c8:a6:55:3a:b7:fb:71:
c2:b6:12:30:8b:39:81:ae:0e:91:82:f5:52:f2:8a:
c0:f4:ef:83:b5:f3:4f:d2:6f:43:94:f3:bd:68:0e:
58:28:38:d5:4d:50:b1:41:bf:7f:3a:f9:27:53:c5:
3b:4a:36:5e:a3:3f:04:ec:b5:0a:3f:8f:45:7f:48:
51:14:b7:4f:5f:14:c9:12:ed:17:59:fd:af:72:fc:
39:ea:fa:23:f5:a9:bd:51:f9:64:b0:5e:4b:34:8e:
84:eb:e5:b4:56:50:b6:7f:aa:f8:da:03:87:be:68:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D2:29:D4:F5:01:08:0F:31:D9:2D:43:B0:17:57:59:9B:16:DA:11
X509v3 Authority Key Identifier:
keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:24:f5:b1:8f:4b:78:14:1e:92:9e:d2:be:ee:4e:33:2e:36:
62:3d:e5:64:06:c0:61:27:62:11:21:c7:7a:73:0c:fe:8f:3e:
73:94:0d:4d:15:f1:bb:f5:86:f8:8b:ec:30:46:23:a7:00:d4:
43:86:4c:f3:4b:37:ea:bd:42:b0:05:9d:70:fc:49:df:cc:b1:
34:05:a0:e1:27:a3:10:42:78:a7:5c:f5:ef:96:72:00:94:49:
da:63:d1:c7:df:1a:bb:91:d4:23:79:0a:46:e0:50:a3:97:8d:
b3:bb:0f:d8:22:fa:92:32:dc:03:8f:fe:54:83:4b:e7:88:7e:
57:ac:9d:11:66:52:b7:6b:68:2f:2f:a2:8c:c7:28:fc:89:42:
38:bf:72:f5:aa:d9:8b:19:0b:3f:48:b5:6f:db:17:f7:00:04:
b7:12:4a:16:a1:63:7e:50:0b:76:e7:ad:d3:95:b3:cb:12:02:
22:56:01:94:85:42:1d:36:48:c4:e2:6d:9b:52:5c:e0:ab:44:
ec:3c:b1:6b:ae:43:1b:6b:2b:9b:e1:7f:26:0c:d5:61:81:0b:
7d:f6:96:82:1a:0c:23:dd:7c:30:a1:80:18:69:f2:60:1c:b4:
1a:70:59:41:67:02:a4:83:a5:f4:54:4d:39:49:ec:2d:9d:f2:
43:e0:1d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:20:54 2025 by rpki-client