Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
File: SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft (raw, json)
Hash identifier: 4N9YHvKldViu5zyu33e9755R2FFfx7yVrEgs4/2r0FM=
Subject key identifier: 4C:CE:F4:26:49:2F:83:24:06:78:77:F5:BC:26:F6:0F:5C:73:49:F5
Authority key identifier: 4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
Certificate issuer: /CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Certificate serial: 0198D705FBD673BDAA2B0149C9C2450CA704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
Manifest number: 0C28
Signing time: Sat 23 Aug 2025 13:02:30 +0000
Manifest this update: Sat 23 Aug 2025 13:02:30 +0000
Manifest next update: Sun 24 Aug 2025 13:02:30 +0000
Files and hashes: 1: SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl (hash: lLq3uGT+HlyBocmZxxkXd4jRDokvsSpeEpG9SPE7bhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:fb:d6:73:bd:aa:2b:01:49:c9:c2:45:0c:a7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Validity
Not Before: Aug 23 13:02:30 2025 GMT
Not After : Aug 24 13:02:30 2025 GMT
Subject: CN=4ccef426492f8324067877f5bc26f60f5c7349f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dd:ba:1f:31:10:0d:89:17:a3:60:f9:b4:14:
bf:10:fe:2f:91:7f:1c:3e:7e:8b:3d:e7:e9:d0:cb:
f8:cf:2f:09:5c:9b:16:97:55:95:8a:9b:a3:8f:17:
61:48:40:de:18:e9:ea:21:91:d3:d4:ce:a5:7a:e0:
21:d1:97:58:6f:a2:46:41:84:74:4a:56:e3:cb:fb:
08:51:55:60:7b:74:ec:1e:bb:e8:2e:69:f2:e9:93:
6c:7c:e6:f1:a3:0b:ef:74:b1:6b:bd:7a:5e:5a:24:
ca:05:be:42:7c:26:63:dd:3a:15:a4:02:0b:46:7f:
d3:5d:28:49:b2:a9:83:fd:19:c1:49:ad:17:5b:c9:
7a:cb:5c:1a:70:66:86:55:ff:6d:6d:e2:90:1e:c6:
c3:59:a2:eb:3e:06:de:3d:aa:ae:73:db:ca:c5:80:
32:4e:a2:05:ce:e4:f2:21:a7:1f:9b:be:07:d6:11:
0e:62:b5:74:cb:73:5f:c6:13:2b:53:10:43:0b:e9:
09:5d:cf:bf:37:f6:d8:72:fc:7b:69:28:c5:6d:a9:
df:fb:84:76:1b:e3:98:0f:7e:41:18:9a:34:32:0f:
a2:77:ac:c1:33:cd:7c:82:a9:30:9b:19:f4:89:76:
51:a9:e1:e5:b9:f7:8c:16:5c:bd:06:bf:fb:ad:a4:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CE:F4:26:49:2F:83:24:06:78:77:F5:BC:26:F6:0F:5C:73:49:F5
X509v3 Authority Key Identifier:
keyid:4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5d:99:96:e5:b2:03:80:58:83:ae:dd:ee:98:da:a6:7b:75:
1e:3e:92:22:55:f4:72:fa:28:74:39:2f:4b:8e:79:ba:4c:1d:
99:bb:f3:1a:21:61:cf:af:da:02:4f:92:07:0d:b1:d3:60:5d:
e7:c1:4f:6d:c4:e2:74:dc:37:22:30:dd:49:1a:f7:14:2f:7c:
53:32:f0:5d:4d:80:34:fc:31:18:92:fb:2e:51:c1:fb:b3:bb:
81:e6:28:0b:6d:ac:db:34:2f:c7:10:80:4a:95:09:87:47:32:
1c:87:ef:3a:3f:8b:2c:5e:05:03:4c:e5:06:04:0e:c9:14:d2:
5e:14:5d:12:22:db:7d:2c:eb:c5:96:ef:a7:66:c0:58:f1:82:
52:52:d0:25:1a:ef:cb:15:61:00:1e:19:4e:95:45:bb:a4:96:
3b:51:04:53:14:00:39:ab:fd:c9:8d:92:55:da:f0:41:c8:cf:
62:ae:ea:1b:eb:31:c4:4f:7e:45:2f:84:7b:16:e7:f0:11:c8:
3c:50:d4:c8:73:3c:4e:ef:ee:42:69:19:4a:f0:b0:b1:8c:a6:
12:5a:79:ce:35:2c:74:46:0b:10:1a:9d:42:ef:17:2f:61:b6:
81:eb:8a:e8:95:22:ce:fc:df:c3:c3:4d:da:95:05:2c:7e:00:
4a:85:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:31:02 2025 by rpki-client