Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: pOIhKdCi+VdBKOYjAowgkDsNlX3uvMSoQ2s5RYhf3SU=
Subject key identifier: 15:59:B0:99:BF:66:9B:5C:8E:1C:74:48:99:55:7D:79:D1:1A:D5:E4
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 019A5564705E3E95DBFA5B8C7A987FE7B711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 19:00:36 +0000
Manifest this update: Wed 05 Nov 2025 19:00:36 +0000
Manifest next update: Thu 06 Nov 2025 19:00:36 +0000
Files and hashes: 1: ZBzIfVthsK0IsXsJf3cg7sZHKWM.roa (hash: QAbyT2QSC2brj0n8JNXKmo27qkYMllHPEba5ZlKG1ys=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: G42IYpOrssvA3RfU4/5Mj5Et4ubTm7fPHSDbGkT4WF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:70:5e:3e:95:db:fa:5b:8c:7a:98:7f:e7:b7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Nov 5 19:00:36 2025 GMT
Not After : Nov 6 19:00:36 2025 GMT
Subject: CN=1559b099bf669b5c8e1c744899557d79d11ad5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:8e:e9:36:64:b8:04:7d:20:56:62:59:de:
bc:53:5f:f4:bc:03:2d:19:a0:61:41:23:ed:ed:72:
a9:f8:0e:82:00:8e:72:71:68:9f:bf:b3:02:88:0d:
16:7f:54:6a:d9:5f:7c:9f:8a:e4:e8:bb:49:32:f6:
81:be:6c:6a:3c:2f:a9:57:3b:f8:52:41:36:a4:bd:
67:8f:f7:67:5d:c5:34:79:e4:95:67:3c:f8:b3:e1:
52:8b:3a:49:0d:d5:55:f6:9b:ac:09:55:4a:94:45:
e2:64:6c:a8:df:20:f1:4b:0a:88:7e:13:e8:63:f2:
39:f5:76:9b:5a:b3:4a:93:9f:64:b1:bb:a7:ba:2f:
26:8c:37:5a:0a:7f:95:73:9b:a2:a7:ed:b1:d3:58:
31:97:57:e3:a5:6d:9e:a4:4a:a0:96:da:94:b4:0c:
4b:e2:06:89:6d:8c:a7:13:ef:a2:c3:4e:89:e7:75:
4a:0a:10:95:31:fa:4e:f2:72:c7:f2:33:b4:b8:9c:
22:4c:30:01:bf:fc:f8:18:be:28:b0:82:0e:e5:39:
26:11:db:83:e6:f9:50:79:f8:d4:22:79:58:67:a2:
97:25:3c:08:f1:93:53:47:15:d0:d8:ad:6f:6f:7f:
79:da:92:c4:44:36:c3:7a:ff:e0:bc:78:4e:99:e8:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:59:B0:99:BF:66:9B:5C:8E:1C:74:48:99:55:7D:79:D1:1A:D5:E4
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:91:68:a0:c3:e6:95:0b:cb:a6:49:8a:e6:a5:e8:e0:9a:3b:
87:e5:66:3e:5e:60:e8:e3:8b:1c:50:4b:16:9f:35:8c:c1:05:
7e:a5:15:1a:0f:0c:81:79:3e:d8:a1:d7:35:79:77:d1:e1:3f:
27:28:17:89:0e:34:a2:e0:96:37:b4:ee:f4:fb:9f:73:7e:ce:
14:44:5e:d1:09:8d:85:9a:0d:d6:ad:6e:1e:85:5d:d5:3b:87:
b0:ec:0d:f0:2d:37:52:84:82:37:93:fb:e1:d0:ca:28:3d:0f:
6e:95:88:0b:59:6e:17:fe:9e:bd:73:5c:40:dc:ae:71:35:65:
e5:70:46:8f:96:00:09:73:03:83:22:0e:35:fe:ac:44:f9:7c:
ce:67:f5:f3:85:e6:ae:e0:c8:7e:c7:fa:b5:68:1e:12:c2:65:
8f:c0:22:85:d6:9a:4b:78:39:f6:89:8a:71:11:fe:ba:3e:7d:
8b:4b:e6:71:a5:cd:8b:1f:87:61:08:2f:b1:48:f7:be:17:07:
e9:32:05:ab:a1:66:74:cf:c2:20:d6:3a:1e:02:3d:6d:46:03:
14:57:59:60:53:be:de:04:d5:40:6e:b2:67:d5:0a:5f:e1:b1:
40:1d:b0:a0:85:bd:94:58:43:50:55:f3:05:41:67:df:60:a7:
94:d7:17:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:11:06 2025 by rpki-client