Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: A81O/Q6gnUMfnKGAIXdJ+kjgJF36ftNDzOEBC1veOZ8=
Subject key identifier: A0:74:A4:A6:77:B4:AD:30:9F:C0:76:53:96:98:E2:41:90:D4:5A:61
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 01987D8B7E8A00FD9E8CE87C1B83BB58121F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0A45
Signing time: Wed 06 Aug 2025 04:02:30 +0000
Manifest this update: Wed 06 Aug 2025 04:02:30 +0000
Manifest next update: Thu 07 Aug 2025 04:02:30 +0000
Files and hashes: 1: XTZ-6WhmzXiDDwFWajhChN4966c.roa (hash: 76eYyVPhyFyHfOEPHeaphAj0SWfwnKjZwUHP7osL/Jg=)
2: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: u5t3lUdszP6t1RYhD1P5xg8jyveHzUZVw9YKQdJnJSA=)
3: kTc3tdsyRqEwIQUrDzGOak8nANc.roa (hash: 7cesO8GKLYeXhtn4E2bVxqR/wKRQ+h04HAytGr5/XYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:7e:8a:00:fd:9e:8c:e8:7c:1b:83:bb:58:12:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Aug 6 04:02:30 2025 GMT
Not After : Aug 7 04:02:30 2025 GMT
Subject: CN=a074a4a677b4ad309fc076539698e24190d45a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:8b:37:f0:32:74:f8:e5:8c:62:e8:7c:64:
9d:7d:0d:d4:31:9a:3e:42:a3:ed:a2:d4:10:f3:df:
05:c0:83:f6:70:9b:88:be:bd:9b:c6:e3:57:d3:bc:
76:1b:9d:b6:bc:18:ad:15:dc:30:45:e6:70:d7:cd:
46:78:c6:f3:91:33:2a:ce:15:93:3e:6a:af:b1:16:
61:4e:8c:fe:cc:6a:50:ef:17:b1:63:cd:b5:dc:28:
96:e9:7c:32:0f:e3:d5:18:7a:8a:4f:e8:45:95:46:
50:4a:10:a1:b1:18:7c:d8:3c:03:9d:6d:15:38:d3:
be:90:72:b0:4e:12:3b:e2:2d:b2:c7:2f:ad:9d:64:
3c:79:3a:b2:5b:ef:28:52:f1:bb:c0:8a:b8:97:60:
34:a8:12:dc:8d:5a:dd:8d:4f:df:d8:f7:a6:f1:07:
59:95:1b:2c:f8:d2:a5:f4:b7:3f:e8:0a:ef:e7:73:
da:c3:a0:67:21:32:2e:77:88:be:52:56:40:47:52:
5a:b4:fe:06:d9:a6:d8:76:cb:9e:99:c7:7d:88:bf:
f5:89:0f:c0:f6:33:78:48:12:38:0d:cc:fb:e2:3d:
b4:5f:e1:c8:d7:b7:bd:22:f1:4a:34:c0:68:38:1f:
d0:f9:c8:52:bd:1b:82:75:9c:be:58:e1:75:33:90:
e9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:74:A4:A6:77:B4:AD:30:9F:C0:76:53:96:98:E2:41:90:D4:5A:61
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a3:f8:bc:d1:49:f1:ed:99:a7:1b:e2:fd:52:43:57:76:78:
41:27:7a:ca:d6:d6:16:b1:2b:50:6d:03:71:10:78:99:41:f4:
f5:2b:88:d3:10:39:b4:2c:aa:9c:f6:bc:60:31:d7:2c:20:c3:
4d:a1:e8:29:57:37:46:05:24:d7:5a:80:a2:56:df:a4:60:bd:
78:bd:f7:ba:c6:08:a9:c1:5f:fc:f7:56:49:0d:bb:fb:b2:0a:
b1:99:55:d6:73:d4:bb:83:04:60:1b:8a:48:c7:8d:38:c3:dc:
de:d2:28:43:15:71:54:b1:f7:06:b2:26:0d:c8:ab:72:8c:cf:
df:f8:7c:2f:c0:fd:bb:84:13:39:5e:8c:46:7f:c9:c2:03:29:
a2:04:60:31:69:96:0d:8e:a7:7e:da:e9:46:5a:ee:02:b3:93:
3f:58:76:3b:74:49:cd:3d:8b:ce:50:28:92:69:24:9c:07:1f:
ba:45:07:a1:91:cd:27:3d:4a:75:2d:35:df:77:c7:c4:4c:35:
1e:c2:5f:e5:f6:cc:d4:0e:51:3b:2e:69:54:60:ba:43:bb:a5:
6d:ba:47:0d:41:50:4c:f3:0f:60:df:26:0a:21:d6:bf:2a:d5:
81:72:b3:72:9c:3f:31:d7:80:a8:7e:b2:94:62:90:99:79:0c:
e9:bc:3c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:36:21 2025 by rpki-client