Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: wia53NkK6FY+H7EomudA5YE+Zi6MMzVuxwKo7xPqx28=
Subject key identifier: D0:AE:DD:0D:5C:FC:6C:BC:00:F0:D6:98:FC:E9:A6:59:8A:41:36:E2
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 0198820BAB4602F13C0D1E484C1B95D6D9BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 01:00:59 +0000
Manifest this update: Thu 07 Aug 2025 01:00:59 +0000
Manifest next update: Fri 08 Aug 2025 01:00:59 +0000
Files and hashes: 1: ZBzIfVthsK0IsXsJf3cg7sZHKWM.roa (hash: QAbyT2QSC2brj0n8JNXKmo27qkYMllHPEba5ZlKG1ys=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: 4uXmZKs3nhEDRcMqbGKgjl4MYZTGz51RbHzbzByqtCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:ab:46:02:f1:3c:0d:1e:48:4c:1b:95:d6:d9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Aug 7 01:00:59 2025 GMT
Not After : Aug 8 01:00:59 2025 GMT
Subject: CN=d0aedd0d5cfc6cbc00f0d698fce9a6598a4136e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ec:f0:29:f8:1e:95:60:9f:f8:30:d3:6c:f3:
21:8a:c6:17:c9:df:64:d8:ba:76:51:a5:5e:5a:9b:
14:48:d8:d9:0a:8a:a3:22:d4:9f:51:d6:68:bf:30:
1e:b5:47:32:05:5f:4b:8d:57:fc:2c:bb:f5:2f:80:
fc:1d:d2:7b:cb:ce:87:d3:c7:68:8d:03:d0:07:dd:
b0:86:14:6a:c3:40:d0:43:9d:57:67:ba:4d:21:cb:
6d:1e:38:74:fc:59:51:2b:bf:45:3d:af:0c:c3:72:
19:26:ee:2e:ce:a4:9f:8e:7d:28:ec:29:e7:e4:9b:
45:cc:58:28:a2:6d:12:8a:ee:be:0e:6c:a7:e4:4e:
fb:84:f1:d6:8e:df:81:ca:9c:ca:1d:7d:5c:2a:1e:
88:9e:7e:c4:dc:4c:b4:e0:21:20:49:96:d9:50:04:
59:18:d5:89:38:a6:ff:c7:0e:5e:79:c5:7b:cf:05:
d9:5f:82:a6:c8:e2:39:b0:0d:a2:7e:a6:b3:38:67:
8a:0c:05:aa:0c:44:68:36:65:c0:9e:de:32:ab:85:
09:ee:5c:c7:50:a5:db:9d:cc:3a:2f:b2:82:14:cd:
31:97:88:da:4f:06:60:08:a3:31:20:f8:87:99:43:
23:5f:a6:23:10:88:af:e2:b7:ec:e2:48:54:74:f0:
4d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AE:DD:0D:5C:FC:6C:BC:00:F0:D6:98:FC:E9:A6:59:8A:41:36:E2
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c8:a3:2e:67:ca:0b:0d:ce:35:88:2f:eb:f5:eb:01:cd:14:
98:06:58:38:ca:bf:d8:25:dc:5b:bc:6d:33:39:ee:ab:e2:4f:
24:68:08:e9:65:f4:dc:73:5c:85:9d:24:fb:93:74:21:0b:e2:
0a:91:cf:58:52:58:7e:5c:91:27:97:29:40:e1:0a:d9:f1:55:
53:74:88:b2:bf:fa:36:cf:30:fe:75:17:dc:39:a0:4c:3c:29:
48:ce:4f:8b:93:bf:cf:7d:a3:ef:e5:17:72:a9:65:b3:b7:78:
11:26:4c:0e:35:19:79:e2:4b:e9:dc:4b:e3:d7:66:96:e4:b2:
04:21:a6:1c:26:fe:74:e9:a4:df:1f:e6:1f:02:18:98:2a:c6:
fc:45:83:42:c4:5d:46:37:79:75:c0:51:0e:34:3d:77:db:bc:
4c:d7:12:2f:55:cc:aa:64:f4:b4:64:68:a3:48:4f:32:b5:aa:
8f:68:29:bf:85:10:df:8f:ba:23:ca:95:10:b9:d6:23:b5:7d:
d7:cf:e2:15:f8:4f:db:93:d9:a3:14:a5:06:fe:79:f7:d7:a9:
9a:df:1c:cb:28:ee:cd:1d:d8:f3:f9:e4:03:07:fd:90:c2:41:
82:5b:45:81:63:18:dd:f4:d2:65:58:c4:5b:f3:d4:17:71:34:
e5:e9:ad:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:20:31 2025 by rpki-client