Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File: SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier: 7MIJT/1i1/X3sW6dx7F4aRK4Yxn2wvvf6wugL2Wdflw=
Subject key identifier: 28:89:CD:10:96:29:96:91:1B:38:12:82:F4:B3:92:7C:1F:DE:42:14
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer: /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial: 0197B7B348358E9B8F8DDB63B1EF9C8CF44B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number: 159E
Signing time: Sat 28 Jun 2025 18:01:09 +0000
Manifest this update: Sat 28 Jun 2025 18:01:09 +0000
Manifest next update: Sun 29 Jun 2025 18:01:09 +0000
Files and hashes: 1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: RPry5rTALC3nSW9sFgzBdLE7qyGCK7fd47oUlK9Zcpk=)
2: qamXgGdELqVwuCRXcGaE5fyjphY.roa (hash: XwiZQCHwX+Vwexgrkkuz5eMSgh62jyoQLxKiqhe1Bqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:48:35:8e:9b:8f:8d:db:63:b1:ef:9c:8c:f4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Validity
Not Before: Jun 28 18:01:09 2025 GMT
Not After : Jun 29 18:01:09 2025 GMT
Subject: CN=2889cd10962996911b381282f4b3927c1fde4214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:30:cf:56:14:41:63:de:f9:58:c9:79:42:
b5:d5:1f:42:46:cb:34:6a:52:12:b1:b1:da:6d:7f:
29:e8:df:46:5f:02:3a:3c:53:3d:88:e2:9f:36:a0:
a8:33:a9:50:14:28:83:ef:b0:98:37:02:7a:9f:83:
10:21:de:43:38:57:f9:ab:5e:65:1f:f3:bf:1f:88:
86:f1:40:a7:0c:0d:b4:43:5b:f8:c0:b4:a1:af:19:
13:19:ca:0b:02:08:c4:5c:40:89:74:2d:2c:05:9c:
c1:28:6c:2d:b0:49:7d:e7:70:1f:c8:33:65:e3:08:
7d:ef:0d:5c:e6:7a:39:67:e2:ab:c7:11:ca:a8:63:
bc:0c:8d:96:47:c3:84:9e:f3:22:9b:ab:6f:f9:ca:
c2:49:cd:9e:35:8a:a6:87:ae:10:e3:0e:dc:86:5e:
30:2d:15:11:c8:da:e8:93:c1:c6:f4:f8:c8:d2:47:
78:91:a9:15:54:45:ae:29:84:53:cf:3f:f8:8a:f6:
ef:c2:bf:70:ee:53:93:5d:d3:da:97:4f:7b:2b:4f:
39:80:01:9d:b2:37:7c:bd:b2:86:28:cd:c8:e6:4e:
4f:22:87:78:bf:82:d5:e0:a4:d6:fa:ca:63:a8:08:
d6:cd:44:1e:3c:56:7a:da:11:59:8e:14:d6:af:0a:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:89:CD:10:96:29:96:91:1B:38:12:82:F4:B3:92:7C:1F:DE:42:14
X509v3 Authority Key Identifier:
keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c4:92:43:5c:57:3c:b7:40:8a:11:46:20:43:68:51:65:0d:
64:f0:05:65:67:1e:22:eb:0f:73:f5:3f:47:e2:7a:bf:5e:71:
b1:a2:77:dd:88:d2:f9:da:86:f9:1a:0b:fe:3a:88:94:e3:35:
22:74:4f:d0:a5:6a:9a:f3:23:01:62:47:df:46:a1:b2:f7:28:
da:bf:46:65:e3:7d:34:f8:1d:98:f1:0a:b3:84:34:39:aa:68:
f2:24:67:1f:84:be:f9:a7:a3:15:ee:b7:ce:da:2c:52:a1:0a:
a3:30:9b:39:b3:20:0a:82:a8:b0:1f:0a:b5:72:44:e2:dd:84:
cb:77:c2:f4:4f:40:38:e9:a7:5b:6c:ff:88:c7:be:c4:16:17:
45:bf:84:d4:c3:e6:b7:1f:59:67:a4:1c:34:46:e4:5c:bc:4d:
63:64:e2:09:0d:27:83:02:b3:91:60:bc:2e:3e:8e:be:a0:2c:
0b:22:2e:6a:fa:72:7d:36:99:2e:8e:61:6e:4b:e3:1d:3b:c6:
9b:2f:47:d4:68:9d:b5:f5:05:22:94:11:5d:bf:87:a9:23:7b:
28:c1:0c:09:15:4d:68:38:68:45:25:1b:97:02:29:a3:93:65:
f4:2e:77:d9:c8:c5:38:0e:99:64:8a:8b:dd:01:b2:fd:aa:b6:
db:6f:09:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:57 2025 by rpki-client