Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
File: guItqb8KdBce67TNmPwl8wQa3S8.mft (raw, json)
Hash identifier: bMa1lWEQtNPUEybUf8qNB7VkAzd0TLtsyI3wt9/QR6o=
Subject key identifier: 48:84:A5:27:40:E6:F9:D8:24:0E:2F:6C:BD:13:37:C7:CB:5F:75:FE
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Certificate issuer: /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial: 01976D3E41A158A515A245BF7A7DA5542768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 07:01:25 +0000
Manifest this update: Sat 14 Jun 2025 07:01:25 +0000
Manifest next update: Sun 15 Jun 2025 07:01:25 +0000
Files and hashes: 1: guItqb8KdBce67TNmPwl8wQa3S8.crl (hash: 3A3XDfukUMtuedfhK1G1SM8SdfVilUrOIFHgYoQS39g=)
2: st7UugSXha_zumczLwSMs_JMMGo.roa (hash: zW6BjWFPz0O6Tl0aYcPhSf3EE25VQRz5yPeKPIedYY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:41:a1:58:a5:15:a2:45:bf:7a:7d:a5:54:27:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Validity
Not Before: Jun 14 07:01:25 2025 GMT
Not After : Jun 15 07:01:25 2025 GMT
Subject: CN=4884a52740e6f9d8240e2f6cbd1337c7cb5f75fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:64:b4:dd:20:99:1f:6e:e3:37:43:0f:ab:
28:6e:43:22:39:8a:f3:15:eb:c5:bc:f1:15:6b:85:
c1:3f:3e:03:a7:7b:93:64:63:d9:23:15:03:d7:d7:
12:74:7a:7c:b4:c1:c9:15:bc:d9:30:49:6c:39:47:
ce:4f:46:74:c2:eb:01:0c:11:f3:ba:92:3c:04:9e:
3b:94:72:e9:b4:b8:62:17:76:27:f2:e4:31:58:ed:
17:f2:2d:0d:ac:d6:59:36:93:78:b8:6e:90:00:8c:
7f:b1:f0:0e:4e:ac:c5:01:2b:12:25:33:81:32:d5:
98:20:b1:a7:36:4a:59:7f:40:c7:06:5f:a1:e7:b1:
b3:9f:88:4f:88:c4:f4:1c:be:d1:0d:ff:2b:ba:7c:
45:97:fe:e9:a8:20:60:df:dd:48:69:42:11:c5:ff:
1e:74:7b:01:46:1d:82:86:24:eb:80:aa:93:7d:7f:
b7:17:31:e0:3a:09:80:31:4f:68:4b:c7:4b:7d:35:
ba:16:06:4d:76:43:ab:e7:95:9a:10:1e:ac:06:c8:
81:b4:c6:db:95:7d:ac:3d:cc:6d:cb:70:f8:a9:7f:
c4:b0:66:33:10:66:07:43:ab:e2:99:9d:9c:31:31:
8d:5a:32:b9:7f:8e:4a:2a:ea:89:9e:ec:89:79:25:
be:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:84:A5:27:40:E6:F9:D8:24:0E:2F:6C:BD:13:37:C7:CB:5F:75:FE
X509v3 Authority Key Identifier:
keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6a:99:38:e4:81:31:b6:49:98:7f:ce:f0:b6:d4:27:66:5b:
6f:ce:b4:7b:5b:47:57:64:57:17:7e:aa:b2:06:43:65:73:33:
d0:fa:c2:9f:8b:2a:f3:90:ae:7b:2e:ea:5e:41:2e:5e:f4:f0:
ae:77:49:70:a3:cb:c4:be:d2:2b:a9:fb:86:ca:80:89:3f:5f:
fd:38:83:08:6f:35:5c:3d:ac:fa:c2:61:30:4f:a3:01:7a:ab:
1a:d5:d0:36:b8:6d:48:51:e0:af:a9:ee:f4:42:99:2f:f9:6f:
8d:74:51:9a:64:ed:e5:da:81:1d:fc:60:ba:87:00:95:a7:c6:
be:2c:45:74:3a:8a:e2:15:64:56:91:b5:4f:c1:c2:5a:34:72:
8f:b6:80:b4:14:18:5b:67:73:fe:61:39:13:c1:9b:46:2a:b7:
ef:7d:d2:a6:3e:d0:3b:ca:0e:38:95:3d:81:77:1a:77:6b:a6:
33:f5:9a:b4:1b:65:8c:81:01:b4:8e:d2:41:e4:fe:1a:21:d4:
41:bc:0b:b5:8b:77:d2:e6:dd:36:49:7e:ed:e7:e6:54:46:cb:
2f:2d:e1:cb:ac:44:bc:24:65:eb:0d:c7:7a:8b:de:f4:8f:43:
b9:d0:ad:98:b2:00:12:e6:77:e6:74:04:be:5d:b3:11:ad:6b:
74:5a:08:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:14:55 2025 by rpki-client