Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: RbgQzTHD6/vtR4EkDgfygY2z/OVOXRvoobjjrg09aBs=
Subject key identifier: B1:4D:AA:A7:AB:78:C0:DA:AF:DE:78:B0:F1:A7:15:42:9E:2B:D6:A3
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 0199FBEAF00A3F8267C78ED9AAF8E9318A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 130F
Signing time: Sun 19 Oct 2025 10:01:42 +0000
Manifest this update: Sun 19 Oct 2025 10:01:42 +0000
Manifest next update: Mon 20 Oct 2025 10:01:42 +0000
Files and hashes: 1: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: SzLmdITvUQZ5B7/LSl0w6e4o7mQJa+GGeVZ/bZWehtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f0:0a:3f:82:67:c7:8e:d9:aa:f8:e9:31:8a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Oct 19 10:01:42 2025 GMT
Not After : Oct 20 10:01:42 2025 GMT
Subject: CN=b14daaa7ab78c0daafde78b0f1a715429e2bd6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:72:16:a3:ae:1a:66:0d:79:b6:4d:4e:eb:
39:fa:1c:c0:9b:a3:1a:32:4a:b4:91:23:49:cd:16:
f2:20:cf:13:ef:59:a4:e3:c0:37:5a:1d:79:5c:00:
70:ce:d3:31:0c:fa:15:8a:9c:48:b5:4c:92:bd:02:
c5:d8:0d:89:24:f8:77:c4:58:79:8b:c0:e3:07:e5:
2a:cc:29:08:a2:01:19:35:8a:cb:f0:d8:94:fa:fc:
85:b5:6f:78:e2:ab:3d:92:5f:b6:56:91:36:78:bc:
f4:07:4e:f5:cd:fd:ef:39:81:a0:b4:b7:cf:20:c4:
fe:bd:d5:13:b9:f3:44:2c:68:3c:c7:11:33:99:bb:
15:e8:ea:61:49:73:b4:90:d3:a2:36:f3:f4:fa:67:
0b:b3:a9:2c:8d:6d:e8:84:de:93:5a:f5:4c:48:88:
bc:31:4b:0b:0f:23:7a:cd:98:b5:a8:04:00:81:cf:
9c:71:c3:bb:1a:8a:e2:8d:5b:64:75:70:37:43:2e:
33:56:76:14:17:08:98:b6:dc:2f:c0:54:14:2d:d9:
41:11:d9:85:85:2c:37:cd:b5:ed:25:27:52:44:7b:
6e:f5:da:dd:2c:16:5c:2c:d6:4e:9e:9f:50:46:33:
3b:b6:28:aa:d6:3f:68:5b:cc:f0:85:b4:92:b1:41:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4D:AA:A7:AB:78:C0:DA:AF:DE:78:B0:F1:A7:15:42:9E:2B:D6:A3
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a1:99:c1:1e:c8:55:77:8b:b4:90:27:07:7c:44:1c:6d:c6:
97:bc:4d:30:09:18:97:b7:70:f1:50:4b:1a:ec:89:52:dc:b0:
51:b4:88:84:39:a5:b2:77:86:53:fb:30:6a:4e:22:60:36:93:
74:b8:28:b2:c0:7b:4b:5c:d8:af:6d:19:04:89:cc:7d:b9:64:
b9:4e:1b:35:d6:9c:a7:87:76:ef:2a:ce:33:24:34:3a:ca:4f:
39:7b:c7:ff:8d:c0:a3:cc:64:54:bf:d0:0e:a8:a4:7b:f3:7f:
75:eb:78:ee:e5:8f:25:49:66:7f:32:7a:a4:4d:84:86:8e:7a:
2f:ad:cd:3c:0d:6f:ad:70:d7:02:a7:c9:28:be:95:44:56:c0:
5c:ae:57:82:d8:e0:61:6c:08:6c:f8:d2:8a:4e:36:ee:54:06:
6f:86:fd:9d:88:90:ba:32:d1:1a:68:1b:42:9e:5d:e5:a1:d0:
44:a0:5f:db:21:68:de:99:bc:69:1d:82:91:e7:a8:a8:cd:e9:
7b:bf:ae:21:19:4b:d1:47:10:ff:95:4c:7d:a8:55:5d:bc:a2:
dd:f9:49:97:91:4e:4c:57:d7:99:e7:a4:e2:48:de:34:bf:15:
3e:b0:24:d0:d9:4e:35:93:54:e3:cb:e7:34:ad:ad:72:9f:07:
34:1b:68:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:57:14 2025 by rpki-client