Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
File: guItqb8KdBce67TNmPwl8wQa3S8.mft (raw, json)
Hash identifier: Lchtu4tS3jCr1aCX0KjNiIRe5uXSH6yV8OMyvtX2Y0M=
Subject key identifier: 88:B6:F0:EB:D8:46:44:B8:B8:76:4C:21:8F:63:41:9C:8A:16:1E:79
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Certificate issuer: /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial: 019A4EF578909D443FC404D2887298F5804C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:41 +0000
Manifest this update: Tue 04 Nov 2025 13:01:41 +0000
Manifest next update: Wed 05 Nov 2025 13:01:41 +0000
Files and hashes: 1: guItqb8KdBce67TNmPwl8wQa3S8.crl (hash: 0A0F4gEQMAItC76Qcx+3EBn5M/FyTzIA9U1b3VjTJM8=)
2: st7UugSXha_zumczLwSMs_JMMGo.roa (hash: zW6BjWFPz0O6Tl0aYcPhSf3EE25VQRz5yPeKPIedYY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:78:90:9d:44:3f:c4:04:d2:88:72:98:f5:80:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Validity
Not Before: Nov 4 13:01:41 2025 GMT
Not After : Nov 5 13:01:41 2025 GMT
Subject: CN=88b6f0ebd84644b8b8764c218f63419c8a161e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:aa:47:d0:d3:e7:5d:3d:5f:67:0f:3e:32:d6:
e0:72:a7:84:ed:61:0f:43:13:c1:11:c3:bf:76:ac:
2b:57:e3:99:27:eb:97:f2:fc:8d:71:62:f7:51:13:
e7:90:75:d3:18:26:09:2b:f6:c2:eb:57:ca:e3:50:
01:29:ec:2d:c3:e1:c8:d0:d0:b9:a0:68:81:a3:24:
49:b1:f7:9b:c7:a3:4a:66:60:e4:8e:9f:90:a3:73:
b0:79:07:6a:98:6e:f1:a4:22:a2:e9:b1:22:64:a6:
b1:b3:d1:73:9b:2d:04:50:89:44:fa:72:5a:4b:cb:
23:f2:7a:be:16:d2:b7:85:a2:e5:be:0e:28:20:bb:
45:a1:12:a6:88:e8:ae:d9:6f:60:45:fc:43:4f:db:
ae:87:b5:02:2e:56:29:66:d3:d1:96:d8:76:91:29:
13:4d:67:fc:ac:85:4b:2f:d3:d6:e1:34:ce:77:07:
89:ca:45:6a:26:2d:4d:ac:db:b5:56:ac:27:fb:48:
9e:69:d6:90:68:3a:5c:7e:da:4c:07:8c:ae:be:72:
34:49:6f:66:f8:84:58:76:7b:88:4a:c4:0a:12:14:
23:93:22:21:21:36:4a:c7:4a:92:52:91:5e:50:ff:
fb:3e:c9:02:10:e6:3f:ff:c7:e6:b0:5d:80:b6:b8:
1d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B6:F0:EB:D8:46:44:B8:B8:76:4C:21:8F:63:41:9C:8A:16:1E:79
X509v3 Authority Key Identifier:
keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:df:ec:4d:7b:24:07:2b:5c:bb:50:a7:69:7e:ee:70:71:21:
f6:01:74:d7:0f:7c:d6:20:cd:3f:e1:d6:63:f7:60:29:0b:1c:
7e:07:1a:3a:d7:e2:62:c1:bf:6b:3b:1a:11:9f:90:7a:8a:60:
2c:b8:84:17:84:67:53:61:a5:9b:16:34:b6:43:b6:9a:fd:12:
22:b9:d4:a3:72:a7:e7:5b:80:70:a0:51:c0:29:b7:ee:3e:5d:
79:2b:a9:56:78:f4:4e:e9:56:80:cc:cc:ee:3e:67:0c:3a:81:
11:65:52:e2:7c:a4:43:6a:23:aa:ea:8c:97:2d:cb:ea:55:4d:
6c:9c:a6:57:54:69:ec:8c:e2:7b:bf:a3:cf:10:45:3f:d2:6c:
e9:0c:90:95:80:ec:97:22:f0:99:57:92:e7:85:80:2e:c0:89:
51:ac:b6:6b:04:fe:73:b2:77:e2:b1:99:ac:37:87:66:19:5b:
26:a7:c4:22:ec:70:dd:5a:7b:65:89:6e:62:e6:d8:35:2d:56:
80:25:50:0d:47:3e:07:9f:b1:4a:d2:a6:f9:78:ac:d4:72:9f:
cc:c2:d8:4b:01:9a:2c:b9:72:ce:ed:8e:d2:15:d6:74:a4:0a:
32:dc:0c:0f:8b:bc:89:d4:fa:a0:b5:67:2f:69:9d:47:b3:d9:
5a:70:ea:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:22 2025 by rpki-client