Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File: guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier: vNJdRUnvqdq7Fsz74wgwLSoUQTEynvj8/qPOoR6eQHY=
Subject key identifier: A8:B0:E6:75:CE:01:12:16:DC:68:D6:9C:58:1D:2F:D0:61:C4:34:4B
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 019A4EF4D668FB939C0F88949514BC270BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number: 0B36
Signing time: Tue 04 Nov 2025 13:00:59 +0000
Manifest this update: Tue 04 Nov 2025 13:00:59 +0000
Manifest next update: Wed 05 Nov 2025 13:00:59 +0000
Files and hashes: 1: XTZ-6WhmzXiDDwFWajhChN4966c.roa (hash: 76eYyVPhyFyHfOEPHeaphAj0SWfwnKjZwUHP7osL/Jg=)
2: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: DYWnwvFO2U0B0iPjl131PJ3SmnOYcjx1ynWfLDACYvM=)
3: kTc3tdsyRqEwIQUrDzGOak8nANc.roa (hash: 7cesO8GKLYeXhtn4E2bVxqR/wKRQ+h04HAytGr5/XYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d6:68:fb:93:9c:0f:88:94:95:14:bc:27:0b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Nov 4 13:00:59 2025 GMT
Not After : Nov 5 13:00:59 2025 GMT
Subject: CN=a8b0e675ce011216dc68d69c581d2fd061c4344b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d8:f2:66:1b:9d:ce:7d:aa:51:37:cd:c1:54:
9f:11:f5:9b:46:65:4b:74:58:ab:1a:c8:25:59:b3:
b7:24:83:cb:4f:f3:47:d0:83:35:58:a0:fb:86:f7:
3b:ad:46:e7:c1:b0:83:2f:2b:9a:c5:65:ad:ea:b5:
e2:d5:4a:e6:8e:84:5c:5c:b0:28:bc:f6:00:ef:c7:
8c:01:29:a9:a1:8c:ae:f2:2d:85:8a:ef:67:ad:84:
5a:eb:f8:09:78:09:54:61:22:d1:97:22:d0:00:40:
18:1e:bf:63:8a:dc:f5:e9:e9:bc:05:7f:97:21:36:
1a:50:4f:32:49:fa:54:b6:20:82:73:43:6f:e3:ad:
b3:13:99:78:a3:7d:cc:4a:2c:64:df:1c:8c:6c:cc:
40:49:5b:ab:b1:ef:1e:50:71:99:45:92:53:21:95:
aa:6a:c4:82:7c:66:e0:73:99:8c:cd:81:9c:bc:1a:
94:0a:af:7d:00:f8:bf:9d:79:2a:6e:a2:2c:78:43:
d0:b1:f1:56:a2:a2:ab:95:b5:2b:ca:d0:01:d3:e7:
77:b5:0b:20:39:46:c2:57:f8:11:f8:12:d2:79:05:
ed:26:42:90:ec:86:14:07:b2:ef:0c:16:02:b5:c7:
27:4b:a1:98:20:6f:34:83:47:f0:33:e7:7e:c1:2b:
de:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B0:E6:75:CE:01:12:16:DC:68:D6:9C:58:1D:2F:D0:61:C4:34:4B
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0f:c7:9a:fb:c7:77:0d:9e:3e:d3:48:20:ad:d0:89:6f:e7:
ee:0f:82:aa:ce:6f:3c:20:2b:8e:2f:34:5f:e2:11:5e:5f:9d:
3b:b6:d5:2b:3a:62:7a:e7:2f:4a:c6:03:a1:af:34:7c:e5:6c:
12:b8:6d:c7:11:72:48:fa:87:0f:29:32:04:0c:99:a4:06:53:
00:3d:88:84:a5:f1:95:66:00:98:42:24:6a:28:15:19:07:ac:
37:8a:2f:71:e4:61:29:48:ee:1a:78:f4:f6:24:ba:3c:1e:52:
8d:21:69:b3:8b:2e:b6:1e:71:ee:94:a1:6a:cd:d3:5c:4e:24:
f0:86:73:31:cb:7b:d3:c6:3e:6e:cd:03:cc:cd:eb:fe:02:bb:
f1:c9:76:5c:d9:d9:86:fb:34:14:d6:f6:20:7b:f8:d1:b1:01:
bd:71:42:f0:c0:32:03:52:91:e2:c7:07:29:3a:57:a2:cd:88:
22:63:df:58:01:e4:0c:c6:d4:19:f6:ec:49:6f:73:3e:36:4c:
bd:a9:dc:91:52:2a:21:f1:4c:8b:90:f8:08:4d:d6:f3:3a:31:
1a:c2:d1:bb:1b:b3:c5:e7:d8:03:2c:18:28:cb:99:e8:54:a1:
a4:ce:50:70:25:fd:97:cb:45:8c:b3:55:74:ef:da:82:bd:f9:
9b:a6:e4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:45 2025 by rpki-client