Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File: SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier: Aw5P1f8MXfnWFXKcYXmT8y0+QpaIsGc/rQcUtoaKS4k=
Subject key identifier: 23:6F:8F:76:CB:59:80:C6:17:16:6C:9E:92:71:53:CC:A0:09:A8:96
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer: /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial: 0198D583A9CBDA048CACC6652AD813DD59D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number: 1632
Signing time: Sat 23 Aug 2025 06:00:32 +0000
Manifest this update: Sat 23 Aug 2025 06:00:32 +0000
Manifest next update: Sun 24 Aug 2025 06:00:32 +0000
Files and hashes: 1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: RiklYhksRdMBM/aS5yUmlMTpwz8a+VCaJfcBl8TAAho=)
2: qamXgGdELqVwuCRXcGaE5fyjphY.roa (hash: XwiZQCHwX+Vwexgrkkuz5eMSgh62jyoQLxKiqhe1Bqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a9:cb:da:04:8c:ac:c6:65:2a:d8:13:dd:59:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Validity
Not Before: Aug 23 06:00:32 2025 GMT
Not After : Aug 24 06:00:32 2025 GMT
Subject: CN=236f8f76cb5980c617166c9e927153cca009a896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:63:9a:ef:6e:38:91:09:d3:71:13:6d:73:
18:3e:82:70:c3:8f:a9:b4:b1:35:d9:82:36:24:e7:
a3:6c:a1:f8:8b:53:46:8f:e2:bf:da:4e:c8:77:f9:
d4:bb:d0:bd:b3:bb:c1:e1:a0:4f:09:67:c1:ad:b5:
2f:5c:2b:03:da:e5:18:35:86:0b:7d:b7:6f:cf:f4:
ef:b6:91:ae:eb:26:bd:31:ae:ec:93:c0:cd:12:6e:
09:2c:7b:46:06:42:94:ff:d9:a4:78:b9:4e:93:36:
ad:f5:72:3e:c4:15:f1:86:df:37:f1:1c:f0:f4:11:
78:81:c9:80:19:db:7e:56:f3:d4:ca:31:7e:91:c0:
d9:29:42:01:d4:66:d7:be:ef:fa:5d:0a:66:89:0f:
e8:c9:45:7a:99:b0:0a:86:6f:6e:51:4e:61:9a:55:
8c:1c:25:be:77:22:76:5e:92:85:99:5e:23:c9:cf:
56:f6:05:ee:fd:43:19:75:0c:5c:18:50:de:63:8d:
95:29:41:1a:f4:5d:72:bc:23:27:06:73:37:d0:3e:
e9:2a:ac:28:21:d1:5d:f5:0a:78:fb:d7:d6:7a:1c:
dd:38:a1:bb:29:ff:a6:50:e2:01:86:40:f3:14:32:
a3:bf:95:9c:51:ce:28:d1:3b:8f:27:0e:c3:32:c6:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6F:8F:76:CB:59:80:C6:17:16:6C:9E:92:71:53:CC:A0:09:A8:96
X509v3 Authority Key Identifier:
keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2a:f0:59:03:53:76:7c:92:08:d1:5c:a0:2d:91:85:34:e3:
aa:da:68:b2:81:49:75:54:78:db:06:88:0b:93:fa:1e:f2:b1:
6c:29:77:7e:11:c1:4c:86:c7:26:e1:0e:ee:65:18:9e:c4:11:
23:f3:2e:63:af:9f:ed:dd:08:8f:f0:83:93:d2:5f:4c:d5:6f:
a5:b6:a4:33:0d:c6:57:b1:f0:8c:ef:a2:8e:13:63:4d:0b:db:
f1:a3:e3:5f:03:22:7b:14:a3:be:09:19:14:e2:6e:cd:ac:20:
1b:cf:bf:8c:d2:08:ea:58:02:4b:94:6a:f8:65:7c:e5:ee:db:
89:71:a3:31:53:3c:61:14:39:72:29:61:1e:c4:c5:a1:86:f0:
54:7e:0a:86:95:12:d6:45:f6:c6:77:1c:be:da:59:52:b9:6d:
86:59:be:ba:e3:b3:f7:56:7d:7b:50:0c:f8:94:a2:c6:ff:8e:
70:0a:25:dc:6c:30:56:c1:cf:60:f1:81:80:11:49:cd:92:6a:
3c:75:c5:f4:68:4f:88:1a:2e:43:71:77:0e:9c:f6:30:6b:f1:
63:28:3b:64:83:19:c5:e0:9b:ce:40:46:52:a6:cf:07:2f:2e:
a1:f3:21:b3:e0:a4:03:d3:1e:b6:bb:0f:15:65:6d:d8:96:bb:
a2:10:49:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg6nL2gSMrMZlKtgT3VnYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjgwNjk3ZmUyZTJkOTdiNTkxYWQ1YjkxNTgwNTU1YTQ0
ZDAzODgwHhcNMjUwODIzMDYwMDMyWhcNMjUwODI0MDYwMDMyWjAzMTEwLwYDVQQD
EygyMzZmOGY3NmNiNTk4MGM2MTcxNjZjOWU5MjcxNTNjY2EwMDlhODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTVjmu9uOJEJ03ETbXMYPoJww4+p
tLE12YI2JOejbKH4i1NGj+K/2k7Id/nUu9C9s7vB4aBPCWfBrbUvXCsD2uUYNYYL
fbdvz/TvtpGu6ya9Ma7sk8DNEm4JLHtGBkKU/9mkeLlOkzat9XI+xBXxht838Rzw
9BF4gcmAGdt+VvPUyjF+kcDZKUIB1GbXvu/6XQpmiQ/oyUV6mbAKhm9uUU5hmlWM
HCW+dyJ2XpKFmV4jyc9W9gXu/UMZdQxcGFDeY42VKUEa9F1yvCMnBnM30D7pKqwo
IdFd9Qp4+9fWehzdOKG7Kf+mUOIBhkDzFDKjv5WcUc4o0TuPJw7DMsagrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNvj3bLWYDGFxZsnpJxU8ygCaiWMB8GA1UdIwQY
MBaAFEn4Bpf+Li2XtZGtW5FYBVWkTQOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yNGRmNzItZmNjYy00OGRmLWE1YWUt
MWE2NGE4MDc3YjE0LzEvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8yNGRmNzItZmNjYy00OGRmLWE1YWUtMWE2NGE4MDc3YjE0
LzEvU2ZnR2xfNHVMWmUxa2ExYmtWZ0ZWYVJOQTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApyrwWQNT
dnySCNFcoC2RhTTjqtposoFJdVR42waIC5P6HvKxbCl3fhHBTIbHJuEO7mUYnsQR
I/MuY6+f7d0Ij/CDk9JfTNVvpbakMw3GV7HwjO+ijhNjTQvb8aPjXwMiexSjvgkZ
FOJuzawgG8+/jNII6lgCS5Rq+GV85e7biXGjMVM8YRQ5cilhHsTFoYbwVH4KhpUS
1kX2xnccvtpZUrlthlm+uuOz91Z9e1AM+JSixv+OcAol3GwwVsHPYPGBgBFJzZJq
PHXF9GhPiBouQ3F3Dpz2MGvxYyg7ZIMZxeCbzkBGUqbPBy8uofMhs+CkA9MetrsP
FWVt2Ja7ohBJYQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:01:27 2025 by rpki-client