Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
File: SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json)
Hash identifier: XpfkNvlOJBIiZPhy3jPPAWAsrNyhQ1/u5qMKAvPGYpQ=
Subject key identifier: 3C:8B:3A:AD:B6:03:C1:5D:44:8A:BB:2B:1E:3D:0D:98:B1:97:9F:75
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial: 0197B6A204768B446252ADD563A441D3DD71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
Manifest number: 10AA
Signing time: Sat 28 Jun 2025 13:02:40 +0000
Manifest this update: Sat 28 Jun 2025 13:02:40 +0000
Manifest next update: Sun 29 Jun 2025 13:02:40 +0000
Files and hashes: 1: N_mB8DyGTMyRNtWdzOHezqUOwxA.roa (hash: 0iM1AEZNlQrcAYLQC9NYhgIr9GaQK1NMxQpbyZpHQKI=)
2: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: lVn+kjXi4WeIMuq0894D2L93FWMjo6bKtC/bUz3O/Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:04:76:8b:44:62:52:ad:d5:63:a4:41:d3:dd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
Validity
Not Before: Jun 28 13:02:40 2025 GMT
Not After : Jun 29 13:02:40 2025 GMT
Subject: CN=3c8b3aadb603c15d448abb2b1e3d0d98b1979f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4c:98:92:07:22:9e:ef:2c:df:75:90:c1:70:
3c:b2:c1:ca:78:bb:99:82:24:1b:94:fd:60:12:45:
59:e9:65:a7:e6:cb:5b:0c:38:15:3b:d4:ec:fc:09:
f1:eb:75:23:47:44:e4:52:00:61:05:8d:d6:7a:77:
32:05:94:05:5b:3f:e1:8a:80:5b:e3:8f:bc:c2:35:
af:ba:32:f6:71:5e:91:cd:14:34:d2:03:88:88:31:
57:dc:c1:01:06:5e:9e:35:68:27:f3:50:5e:6f:f0:
72:3d:26:e8:f1:a9:b4:ae:9d:fd:b4:6c:f5:e7:2d:
8c:55:b4:1d:f1:c1:67:05:a0:ff:b3:53:c2:37:85:
24:83:ae:d9:2d:df:c2:cd:ea:64:7f:d8:38:bf:b2:
34:eb:f6:9e:bb:84:e9:28:dc:47:24:0d:b6:4a:78:
79:b2:e8:ed:2b:72:e0:2f:80:d7:0e:49:08:1f:e5:
d5:0c:ca:cf:2b:02:75:95:3a:88:e7:63:51:68:fe:
1d:f9:02:28:b8:ad:1f:50:96:f1:37:22:e0:ef:ae:
25:46:d7:0b:87:04:66:f2:06:36:1e:0f:3b:f6:6d:
95:4b:60:ec:91:b3:af:a7:2e:0e:16:64:76:e5:62:
f9:c2:64:41:4c:9a:44:f9:cf:e1:98:a3:53:0c:4d:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8B:3A:AD:B6:03:C1:5D:44:8A:BB:2B:1E:3D:0D:98:B1:97:9F:75
X509v3 Authority Key Identifier:
keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2e:77:2c:91:94:ae:ed:37:1f:83:ef:bd:a1:fd:c8:ab:73:
7b:9f:5e:42:24:9b:42:02:f1:aa:e2:7f:fc:86:ad:01:e6:10:
f2:e5:64:02:21:1f:62:8c:5d:9d:2a:f6:ac:50:58:72:b0:c7:
88:20:65:c1:f6:71:bc:f4:65:e8:42:bc:50:d1:35:74:e5:12:
d3:f1:ce:6c:41:b8:9d:d8:13:1a:cd:78:0c:99:87:75:aa:26:
fc:b1:19:b3:04:ba:0b:d1:36:67:0d:38:f1:a2:2a:dd:83:57:
b5:37:98:1b:92:57:35:f3:85:65:99:e4:40:b4:8b:9b:42:92:
c3:4f:08:f9:2a:2a:d8:7b:07:ac:8f:f5:34:6d:7b:d6:1f:1f:
6b:e2:fd:a2:de:4a:99:ad:fc:13:e5:d8:5e:59:e9:5d:e7:cf:
0e:1a:33:08:bb:78:43:71:c7:9e:21:a4:84:66:b9:c4:5a:6c:
7a:39:40:7b:18:33:b3:da:43:09:dc:ad:50:17:94:b2:5c:10:
9f:c6:5a:5b:7a:3b:12:da:41:30:85:75:29:67:09:3a:01:72:
84:90:b2:33:ba:94:3b:2d:60:0d:00:c4:7b:08:ce:bc:5b:e7:
4b:82:57:1c:4e:a4:1f:72:c8:e1:ff:69:23:f3:9d:0d:bc:6c:
b2:74:4c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:09 2025 by rpki-client