Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: OqsWf6xJzajKsdXq2w2WvsGuUwdlIC4WO5AWh/zCIsI=
Subject key identifier: C3:2B:45:E1:CC:6C:F7:9B:A4:FA:1D:97:FB:0C:86:F6:65:FD:2E:EC
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 0198D6613AD14E0E70216F2265D6F08B2D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 1277
Signing time: Sat 23 Aug 2025 10:02:32 +0000
Manifest this update: Sat 23 Aug 2025 10:02:32 +0000
Manifest next update: Sun 24 Aug 2025 10:02:32 +0000
Files and hashes: 1: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: AXtQdNCTBF8BlkHwEWQxeXkwS8CCXeaSNd/xvUoMuAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:3a:d1:4e:0e:70:21:6f:22:65:d6:f0:8b:2d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Aug 23 10:02:32 2025 GMT
Not After : Aug 24 10:02:32 2025 GMT
Subject: CN=c32b45e1cc6cf79ba4fa1d97fb0c86f665fd2eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:d4:31:03:98:a3:27:55:26:12:6c:d8:51:
78:49:38:8a:7f:35:3a:ab:92:c6:0e:ff:80:76:ea:
64:79:3b:ff:f3:0b:f8:86:28:51:be:44:b5:97:aa:
38:16:0b:e0:5d:ea:20:53:e9:6f:06:81:3a:95:fc:
65:cb:14:df:c8:94:df:0e:5d:8a:5d:08:9e:b5:c7:
b1:7c:22:51:e5:cd:31:20:18:e0:e2:cd:c7:19:d7:
21:28:25:9a:dc:21:5b:7e:76:10:21:79:36:8d:62:
7e:6a:be:e8:22:ae:1d:16:26:cf:42:17:5f:52:1f:
7e:0f:a6:e2:9f:75:21:9d:ff:33:2e:61:98:d1:08:
81:fe:ca:b8:b5:0e:07:6a:9a:60:07:ad:68:90:f6:
d0:c6:45:29:1d:3a:6c:44:7a:b1:5f:8d:08:71:18:
61:d3:55:f3:b4:94:28:a6:7d:bb:ef:67:51:03:9e:
10:29:80:d0:f5:8f:ac:ff:04:65:e1:e3:61:04:84:
62:eb:f3:74:30:13:71:fe:5e:8d:4b:98:5b:4c:f1:
90:f3:58:10:cc:52:82:36:a7:41:43:c1:ca:1e:26:
c9:29:fe:c9:03:46:7d:e8:47:b4:02:f2:d0:97:45:
dd:db:27:f2:1b:2a:f3:f9:ab:39:61:ea:5f:91:9f:
df:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2B:45:E1:CC:6C:F7:9B:A4:FA:1D:97:FB:0C:86:F6:65:FD:2E:EC
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:28:de:c5:15:c8:4d:a8:9a:3a:4b:36:60:2a:85:9b:cf:70:
c2:e8:f5:4f:3f:80:07:81:1a:3a:09:31:fc:41:77:a5:56:ec:
d3:38:a2:f1:9f:8b:b9:b9:02:5c:e1:62:ec:04:33:75:a3:c9:
75:de:3b:d7:15:cd:6c:24:e7:0e:fe:9a:fb:e3:6e:bc:3f:8f:
89:e5:03:9d:a0:4d:9b:3d:a3:75:0a:7b:8f:a6:88:f9:13:1a:
16:44:44:be:30:1d:a2:ec:39:1d:81:8d:e8:e5:e9:52:cb:97:
b5:47:b8:3e:5b:dd:04:5a:3d:63:4f:0c:76:ae:3b:c6:68:ef:
f6:df:c7:cc:7c:99:d3:52:bd:e3:c9:96:f0:d2:ec:f7:81:6d:
1e:0f:b7:8b:db:8e:30:2c:d9:06:3f:8c:28:b4:b8:dd:ac:9d:
97:1b:1b:75:98:e4:c9:fd:57:e4:0b:a9:42:28:2c:2d:58:ee:
97:cf:7e:7a:84:cf:7c:f9:f7:26:39:7b:29:37:d8:5b:49:7c:
d6:ce:30:35:2c:f1:7d:74:c5:85:0d:9f:af:16:d0:9d:0b:6f:
bf:a1:b6:81:41:dc:22:a7:db:1c:bd:c5:b7:6f:85:ee:81:f8:
67:5f:7d:17:8c:c6:fb:11:03:18:b3:0b:40:c8:18:da:49:55:
85:32:5d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:40 2025 by rpki-client