Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: DezoBxR8I55CH5XT+pnWKRNTF4f+XAXpJ+M6G2O4Czc=
Subject key identifier: DC:4A:E8:0B:CC:56:10:72:34:E0:12:F3:6F:A8:1C:67:4D:E6:BC:A0
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 0197B89084051E664E0866121974D73C6002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 11E3
Signing time: Sat 28 Jun 2025 22:02:48 +0000
Manifest this update: Sat 28 Jun 2025 22:02:48 +0000
Manifest next update: Sun 29 Jun 2025 22:02:48 +0000
Files and hashes: 1: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: iNUa/pQcQS3AnHvqmHdqyQQl47OunifmRB+9soB9G9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:84:05:1e:66:4e:08:66:12:19:74:d7:3c:60:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Jun 28 22:02:48 2025 GMT
Not After : Jun 29 22:02:48 2025 GMT
Subject: CN=dc4ae80bcc56107234e012f36fa81c674de6bca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:6e:e5:e6:fd:2a:e4:c5:c6:59:50:f1:fe:
53:3a:fc:21:57:3d:8b:b2:c5:a9:e4:14:22:d7:ef:
c4:a3:0f:74:ca:95:6f:ab:e1:ee:af:4e:48:41:13:
64:39:1e:f6:23:c9:c8:9c:14:46:a7:2b:da:1d:43:
29:ac:20:eb:c4:f1:41:c6:af:7b:24:f3:53:ee:f3:
8e:85:cd:34:98:dc:9f:e5:03:72:5e:2c:2c:74:56:
7b:94:8d:a5:43:eb:58:7e:b5:f2:ff:2d:d6:2b:4e:
4b:2f:2d:2b:eb:e7:f2:8e:89:f3:4e:90:e8:d3:6f:
8c:e1:35:eb:11:62:d6:c2:3f:f1:12:3b:d7:55:9e:
7f:c6:e1:d1:f2:d0:10:3f:7d:88:7e:38:8b:13:24:
5f:c4:15:4f:26:d7:bb:39:b0:83:56:93:77:c4:3a:
13:0f:d4:2f:a6:b4:e0:57:41:c3:96:03:81:c9:95:
11:56:27:45:42:d1:63:a1:26:71:08:69:1c:6e:8d:
18:ef:8a:fa:42:4e:bc:a8:b7:2a:1f:e4:42:66:59:
78:1f:27:87:2c:5e:0a:7c:e1:86:d1:8b:48:72:74:
8a:5c:ca:5b:d4:0b:a1:65:0f:5b:e2:40:b2:1b:bd:
9d:7c:01:d5:bb:99:22:4f:d0:e2:82:6d:1e:45:09:
4b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4A:E8:0B:CC:56:10:72:34:E0:12:F3:6F:A8:1C:67:4D:E6:BC:A0
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:63:26:85:da:e2:bd:80:00:6b:a8:c5:72:70:39:f3:bc:49:
29:45:59:2a:94:14:23:23:9d:a4:7d:69:0c:9b:cf:df:28:8e:
49:47:7d:5a:46:65:18:b7:8b:fe:4f:7e:4f:8e:7b:48:40:97:
51:91:f3:73:2c:cc:c2:18:91:41:b1:ef:26:b6:7e:4a:1b:9a:
59:4b:a1:0b:b9:fd:f0:15:8a:1f:ad:5f:a9:f1:ce:da:a6:49:
53:47:ab:2d:6a:42:a3:5b:9a:ba:16:c7:d0:2c:ba:8f:2e:44:
08:e7:1c:f1:01:df:cc:f0:11:b9:f8:89:97:0c:9c:c4:68:a0:
80:f5:31:ed:ce:27:46:d8:0f:f9:f8:98:c9:af:e0:51:4d:17:
f4:88:4a:3c:07:c1:ad:50:f6:fe:c4:11:c3:38:cf:d2:68:82:
75:0c:95:e8:76:95:ba:27:82:09:7e:7d:02:9c:cc:38:ea:22:
98:98:31:5b:19:ad:12:d6:f5:4f:3a:58:55:10:90:2f:46:db:
3d:dd:63:a1:16:63:e9:5a:23:51:37:6b:94:1b:18:d5:fa:27:
98:43:44:7e:1e:45:4a:55:51:a0:bc:5a:f7:16:65:a9:4b:cf:
7f:13:ad:d9:cb:a7:8e:19:ba:c3:f3:65:16:f9:d7:3e:f1:0b:
6d:6c:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:25 2025 by rpki-client