Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
File: guItqb8KdBce67TNmPwl8wQa3S8.mft (raw, json)
Hash identifier: 5zgc21jTcFzlQkevlLg19EmjedTXmsrVflG/kIPEJRA=
Subject key identifier: 22:59:7E:74:1A:04:FD:6D:E9:42:FD:B9:E0:6F:6D:69:76:71:C8:DC
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Certificate issuer: /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial: 0196760D2B2F7C0AD8990794B45D2DF882AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 07:01:36 +0000
Manifest this update: Sun 27 Apr 2025 07:01:36 +0000
Manifest next update: Mon 28 Apr 2025 07:01:36 +0000
Files and hashes: 1: guItqb8KdBce67TNmPwl8wQa3S8.crl (hash: BSKqaO2UDURXS4QMKnnD6dIC/bWQPApJ7Cu/Vs6Zgto=)
2: st7UugSXha_zumczLwSMs_JMMGo.roa (hash: zW6BjWFPz0O6Tl0aYcPhSf3EE25VQRz5yPeKPIedYY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:2b:2f:7c:0a:d8:99:07:94:b4:5d:2d:f8:82:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Validity
Not Before: Apr 27 07:01:36 2025 GMT
Not After : Apr 28 07:01:36 2025 GMT
Subject: CN=22597e741a04fd6de942fdb9e06f6d697671c8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:db:8d:e7:ad:3a:20:73:06:3e:be:54:19:
58:90:74:12:a7:4e:2c:b2:f8:a6:4e:86:9c:8d:2e:
b4:48:e9:58:86:6d:07:9b:73:39:0f:73:fc:24:72:
02:46:21:69:e1:97:06:0d:43:2b:ab:16:48:7c:0c:
91:36:c5:69:76:60:7e:82:ef:20:a2:68:a3:64:95:
1b:d9:e4:d6:ef:1d:00:99:d2:f8:a1:ec:e6:07:f5:
ef:32:80:7e:eb:7a:38:06:2f:17:61:d8:4f:f3:e1:
2c:39:f1:cd:e4:5f:75:69:ba:34:f5:19:d8:3c:aa:
a6:9d:fb:c8:95:f4:7e:fe:83:13:f8:6e:d0:8b:53:
ab:84:b1:29:66:ba:44:2a:20:40:1b:8c:ae:0e:0c:
6a:c0:55:4d:91:00:d7:fa:ac:4f:a9:e9:34:6e:7e:
90:22:b1:eb:83:08:b8:0a:31:85:d8:75:8d:4e:6c:
c0:75:3e:12:a0:43:9e:3c:e8:3a:68:f3:38:83:68:
b4:3a:16:14:e2:3b:5c:e8:70:5e:3b:57:41:11:13:
a3:a1:7f:00:f6:30:1c:87:12:b3:1c:f5:09:2f:f9:
4c:b3:86:e4:3f:5b:22:8f:12:6a:9a:1c:be:ea:14:
0a:37:e2:c4:1f:96:1b:e5:b8:71:00:f4:ee:29:a8:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:59:7E:74:1A:04:FD:6D:E9:42:FD:B9:E0:6F:6D:69:76:71:C8:DC
X509v3 Authority Key Identifier:
keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:90:ce:2a:2e:c8:26:1b:09:d6:87:4d:5d:80:9c:f1:46:36:
af:33:c6:16:ea:82:a6:dd:d2:a2:82:f3:2e:17:ac:06:52:64:
14:ec:63:85:43:36:41:23:7c:8c:c2:58:00:1b:be:3a:cf:b8:
93:0d:51:9e:81:58:13:7f:ee:c9:ef:0d:3a:64:ba:8c:86:ca:
c6:a2:06:2f:b6:b0:36:d4:1b:e3:83:c1:f9:6a:dd:e6:35:3a:
ee:80:35:c4:c5:4a:59:bf:a7:5b:99:a6:55:98:10:a3:3f:d5:
07:e0:31:4c:b8:dc:f3:7e:59:77:40:c3:cd:ef:a6:e7:12:54:
28:52:a5:e5:7a:b8:f8:10:1f:98:83:90:0f:23:1c:b2:8a:d5:
f5:31:4d:4c:11:71:d0:65:98:d9:9d:b6:60:82:70:75:22:5f:
14:9a:84:b0:48:7a:df:83:cf:25:65:af:46:b6:48:a8:2d:9b:
5e:5a:e9:49:fd:39:42:94:0a:f3:9b:71:d4:df:a7:d2:95:70:
0f:24:43:d8:68:c1:bc:95:cb:0e:36:67:62:fe:ba:e5:d4:23:
59:fd:48:d3:5e:65:82:e4:cb:03:62:32:f9:4b:2c:ed:0a:1a:
f8:fb:b7:ec:b6:e4:13:85:4a:ae:55:e2:88:bb:54:5f:5b:da:
52:42:49:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DSsvfArYmQeUtF0t+IKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTIyZGE5YmYwYTc0MTcxZWViYjRjZDk4ZmMyNWYzMDQx
YWRkMmYwHhcNMjUwNDI3MDcwMTM2WhcNMjUwNDI4MDcwMTM2WjAzMTEwLwYDVQQD
EygyMjU5N2U3NDFhMDRmZDZkZTk0MmZkYjllMDZmNmQ2OTc2NzFjOGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB/bjeetOiBzBj6+VBlYkHQSp04s
svimToacjS60SOlYhm0Hm3M5D3P8JHICRiFp4ZcGDUMrqxZIfAyRNsVpdmB+gu8g
omijZJUb2eTW7x0AmdL4oezmB/XvMoB+63o4Bi8XYdhP8+EsOfHN5F91abo09RnY
PKqmnfvIlfR+/oMT+G7Qi1OrhLEpZrpEKiBAG4yuDgxqwFVNkQDX+qxPqek0bn6Q
IrHrgwi4CjGF2HWNTmzAdT4SoEOePOg6aPM4g2i0OhYU4jtc6HBeO1dBEROjoX8A
9jAchxKzHPUJL/lMs4bkP1sijxJqmhy+6hQKN+LEH5Yb5bhxAPTuKagt/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJZfnQaBP1t6UL9ueBvbWl2ccjcMB8GA1UdIwQY
MBaAFILiLam/CnQXHuu0zZj8JfMEGt0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hODliM2MtOTcyYy00YmVlLTgwZjIt
NWMyOTE5ZGE4ZGYzLzEvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hODliM2MtOTcyYy00YmVlLTgwZjItNWMyOTE5ZGE4ZGYz
LzEvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZDOKi7I
JhsJ1odNXYCc8UY2rzPGFuqCpt3SooLzLhesBlJkFOxjhUM2QSN8jMJYABu+Os+4
kw1RnoFYE3/uye8NOmS6jIbKxqIGL7awNtQb44PB+Wrd5jU67oA1xMVKWb+nW5mm
VZgQoz/VB+AxTLjc835Zd0DDze+m5xJUKFKl5Xq4+BAfmIOQDyMcsorV9TFNTBFx
0GWY2Z22YIJwdSJfFJqEsEh634PPJWWvRrZIqC2bXlrpSf05QpQK85tx1N+n0pVw
DyRD2GjBvJXLDjZnYv665dQjWf1I015lguTLA2Iy+Uss7Qoa+Pu37LbkE4VKrlXi
iLtUX1vaUkJJiA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:11:15 2025 by rpki-client