Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: V82PGFWxSvderyaf39404rjnPvuxSQy9XhFETkoQmfs=
Subject key identifier: EF:B1:67:67:57:71:05:D7:C7:9C:DF:F2:2F:A4:0F:BA:CD:46:EC:E4
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 0198D6CD8C3A237F360DF689C4CD66803DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 0D7E
Signing time: Sat 23 Aug 2025 12:00:51 +0000
Manifest this update: Sat 23 Aug 2025 12:00:51 +0000
Manifest next update: Sun 24 Aug 2025 12:00:51 +0000
Files and hashes: 1: 9mLiZaXlrMh-SLMVWKWdzKIZreg.roa (hash: JOVJ8r+m2mKwk5/18fVmvxGEIuiFVBEZYaB5XFvwZO8=)
2: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: LJ+BTwDZovxMLgN/yLoT6OUgr2/HtPKT5tSHVhPB9Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:8c:3a:23:7f:36:0d:f6:89:c4:cd:66:80:3d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Aug 23 12:00:51 2025 GMT
Not After : Aug 24 12:00:51 2025 GMT
Subject: CN=efb16767577105d7c79cdff22fa40fbacd46ece4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f3:54:90:3f:b6:d9:f4:fd:fe:fb:bd:56:67:
e2:d5:de:5b:ca:a6:ff:f6:7d:be:65:e8:fd:44:06:
3a:29:63:ca:89:27:96:23:6a:5e:b2:95:32:7c:90:
38:18:8f:c2:76:c7:55:72:62:e8:1f:52:38:ab:2e:
ba:a4:4d:db:2c:e0:18:43:83:c6:89:9b:39:c5:c7:
9c:47:34:fc:7d:2c:f7:aa:40:87:9d:4d:39:df:55:
9e:80:8b:cb:79:18:7e:28:fc:0d:3c:4e:8b:f9:a6:
00:5b:ae:ea:72:cb:27:2a:de:1c:25:64:c1:f3:aa:
30:96:56:cc:f7:03:29:d1:6c:39:89:7a:c7:97:c3:
e9:34:5c:88:6b:a6:f8:c2:58:21:08:83:0b:3d:71:
03:a3:ed:7a:b1:e8:98:e0:c2:e4:c4:fd:b3:d4:ac:
00:cd:e7:44:24:01:8e:53:68:08:07:df:76:87:fa:
d7:75:33:7e:56:9d:05:a8:ec:80:2a:eb:68:32:80:
aa:fd:7f:ba:46:1b:00:1a:1f:88:35:a4:47:c7:65:
72:d7:74:26:af:f7:51:59:56:d0:c3:2f:8d:6c:32:
96:fa:7f:27:47:05:fa:8c:24:03:b6:ab:d8:09:80:
a6:92:fe:65:bc:18:b9:29:41:ab:1e:30:66:49:d8:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B1:67:67:57:71:05:D7:C7:9C:DF:F2:2F:A4:0F:BA:CD:46:EC:E4
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2b:08:1e:a4:61:93:3e:5b:e2:e1:96:82:d7:a7:e0:6b:a0:
5b:69:f2:b5:69:b9:4e:8e:3a:b7:ad:ed:7f:31:c1:2d:8d:e4:
97:0e:83:04:e6:75:0d:cc:7a:2d:74:ff:a7:8e:ae:08:00:81:
7f:22:1b:2c:b6:ab:c1:e6:42:77:32:e0:7b:73:33:0e:e7:56:
99:2c:8e:20:96:90:a6:af:ee:6b:fe:aa:e3:75:06:94:6f:e6:
44:5f:e5:80:d3:8b:f2:e4:76:f3:4d:42:eb:12:4d:48:29:eb:
b1:dc:2f:4f:79:07:38:84:51:c5:39:0d:6f:14:7a:e8:a0:c5:
e8:f4:68:81:51:6c:39:16:7b:7e:1c:94:ec:82:d5:a6:80:5b:
04:d2:84:a3:4f:37:41:4c:e0:0b:41:1b:25:4c:78:b6:8b:6a:
03:e7:e2:07:a4:46:ff:54:8e:8a:73:de:a8:08:e7:4e:24:2f:
36:8d:34:fe:e3:26:bf:06:81:5d:2b:5a:dd:2b:1f:6c:0d:79:
23:2d:e9:8c:5d:99:56:bb:4d:86:d1:8f:b9:c7:a7:e3:99:aa:
91:6c:95:99:86:80:e1:8c:1a:ab:fb:bc:bd:7d:a4:db:69:64:
c2:44:13:a2:dc:6a:7c:b3:34:fc:6f:56:9f:f2:64:75:30:8c:
62:aa:c3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:21 2025 by rpki-client