Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
File: SGwtivTOUM5vQ-ffROC1A3AKhsA.mft (raw, json)
Hash identifier: Ah09b62+uzPFZ4DSFcV948KTAFJqyrDFMkMFAjNfZOE=
Subject key identifier: 71:A2:B8:1E:39:A1:F8:45:62:19:11:17:7E:25:34:76:80:EF:96:DA
Authority key identifier: 48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
Certificate issuer: /CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Certificate serial: 0198D65F95C026D6C50D0CF6F8F557716D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
Manifest number: 070A
Signing time: Sat 23 Aug 2025 10:00:44 +0000
Manifest this update: Sat 23 Aug 2025 10:00:44 +0000
Manifest next update: Sun 24 Aug 2025 10:00:44 +0000
Files and hashes: 1: HfFJEDDUnETMgv_-tGTektHgOG0.roa (hash: n6Dq1dMrKgJPnJf8bwIr5DpzEFmjQ+eea+XVV9e+HTg=)
2: SGwtivTOUM5vQ-ffROC1A3AKhsA.crl (hash: AEkCznc87CxHicZt394TLM5LGgX2f1GVACB/IIJiUcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:95:c0:26:d6:c5:0d:0c:f6:f8:f5:57:71:6d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Validity
Not Before: Aug 23 10:00:44 2025 GMT
Not After : Aug 24 10:00:44 2025 GMT
Subject: CN=71a2b81e39a1f845621911177e25347680ef96da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:f8:08:e2:cc:6f:15:c2:a0:16:9f:bf:f4:
fc:b3:ca:91:90:fc:a1:0e:18:40:cc:fd:cf:6f:b9:
08:c8:a2:1c:23:d3:ea:20:ad:ca:09:ea:92:39:29:
ac:b3:b6:aa:4a:b2:c8:b3:2f:52:07:44:9a:00:26:
ce:41:70:eb:f1:3e:66:15:cf:0c:fb:26:99:c8:b3:
e6:92:3e:14:26:aa:33:1e:8c:b0:a9:bf:d9:6e:72:
35:65:45:a1:0f:9e:64:a1:43:6f:bb:b0:f7:35:0c:
a8:00:50:5b:d8:1d:98:e6:cc:95:08:e5:23:92:25:
25:19:0d:c2:dc:6b:65:b8:e6:a6:f1:0e:b1:b7:a4:
21:86:9c:a2:0e:2d:c0:41:e7:66:13:93:b2:10:96:
49:fc:c5:bd:14:74:e0:b1:00:c2:90:5e:d7:a3:8c:
01:4c:d5:6f:9d:1c:21:a2:d2:05:eb:cf:01:95:22:
34:9b:be:7f:67:36:d3:c2:3d:5e:bd:e1:33:3f:cb:
c3:7b:af:43:2d:98:7a:ed:e5:d2:32:14:4c:c4:61:
eb:00:08:32:3c:3d:4a:b8:d0:20:93:b4:01:74:60:
6f:f2:c7:6b:36:02:1c:1a:f3:14:3e:f1:81:b6:3d:
ca:0a:f1:56:0a:46:bd:04:16:ad:73:87:8e:d0:e5:
90:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A2:B8:1E:39:A1:F8:45:62:19:11:17:7E:25:34:76:80:EF:96:DA
X509v3 Authority Key Identifier:
keyid:48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:03:ab:c4:7d:ec:62:85:54:c1:d0:9b:35:92:0a:0d:89:52:
1f:e2:87:92:c1:80:4b:81:7b:de:d3:0e:15:fd:e4:bd:6c:31:
f5:91:5e:d0:4c:61:df:4a:90:40:d1:09:90:dd:da:7d:fd:6f:
f3:f6:a8:29:22:36:9d:5d:de:10:1d:34:a9:8a:88:dc:a4:b0:
de:e1:ca:57:07:74:af:b7:1a:51:48:46:01:13:33:0f:85:17:
ca:4e:71:f2:bc:91:77:1a:f8:2d:0c:14:56:98:a9:65:43:ff:
1b:4b:d0:2e:8b:31:12:25:d3:94:fb:06:48:57:a1:9f:aa:0f:
26:e5:75:81:8a:33:7a:16:15:80:60:45:b4:bc:7c:bd:2a:40:
1b:e7:36:26:bd:7a:50:44:97:61:43:cb:b4:d7:8c:e5:2a:7c:
f5:f3:42:92:da:e8:f9:80:6a:b5:4e:0f:c0:df:7f:fe:b1:d3:
05:ca:ec:6c:68:70:5c:78:a8:e2:d3:94:aa:e8:78:33:96:8f:
ba:e2:d3:47:01:7a:d7:ac:ab:cf:71:9c:1a:da:dc:78:4d:0e:
aa:ea:40:71:e9:14:d7:24:79:a9:bd:6e:1e:1b:d9:a8:13:10:
4b:73:ec:b2:3f:78:eb:3c:da:6d:5e:c6:b7:5e:27:97:2f:04:
96:9e:5b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:18 2025 by rpki-client