Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
File: SGiJzk60_XR4GCSDld5fuT0f4UI.mft (raw, json)
Hash identifier: zeVqXe7q6fOun7lGihF7RZ1glBVPZMIiv2BxABw5mhw=
Subject key identifier: D7:82:D8:2B:6E:32:64:6D:8D:E2:58:93:CE:E6:98:1D:78:55:9B:57
Authority key identifier: 48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
Certificate issuer: /CN=486889ce4eb4fd747818248395de5fb93d1fe142
Certificate serial: 0197B6D758694FBF04D15E9ADC9861A52175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
Manifest number: 0132
Signing time: Sat 28 Jun 2025 14:00:55 +0000
Manifest this update: Sat 28 Jun 2025 14:00:55 +0000
Manifest next update: Sun 29 Jun 2025 14:00:55 +0000
Files and hashes: 1: FfqUAa7-KKr54JP8aBzk5nNv21g.roa (hash: PY8USvms98PE+f6r3SXsrpm0zwpXY4+1N+NCv5EFelE=)
2: SGiJzk60_XR4GCSDld5fuT0f4UI.crl (hash: lvbsbWcf3lfkC7KR+Lp6dJikn8YNqh5EC1OxZQjQtNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:58:69:4f:bf:04:d1:5e:9a:dc:98:61:a5:21:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486889ce4eb4fd747818248395de5fb93d1fe142
Validity
Not Before: Jun 28 14:00:55 2025 GMT
Not After : Jun 29 14:00:55 2025 GMT
Subject: CN=d782d82b6e32646d8de25893cee6981d78559b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7f:c6:f0:2a:5a:28:b2:25:27:24:46:f0:45:
17:8c:7f:b5:b6:73:a2:b9:29:3a:d0:9b:ff:89:3b:
61:1b:be:cf:fa:1f:34:12:a2:03:e8:a1:50:6f:54:
16:56:fc:16:88:6a:dd:6e:bb:c9:d1:5e:7c:0d:bc:
08:8d:fe:ef:57:af:4a:8b:df:67:0d:78:4b:d5:ec:
d8:d0:ad:8a:99:58:86:c3:5a:9d:00:8c:39:71:0d:
c2:51:4d:21:55:cd:1a:d3:f9:f1:2b:74:5b:4d:d8:
3b:50:0a:2d:ed:5a:17:1e:fd:0b:bb:7b:a5:49:69:
fd:47:a6:9f:a3:13:05:0f:7e:44:b2:72:0c:bc:81:
be:20:43:f8:53:0f:ae:58:b3:73:62:3c:e9:7e:8a:
1c:eb:c5:26:34:73:50:31:c9:ac:38:49:3d:5b:0f:
b7:f0:59:5f:db:ff:f4:f7:f0:17:8a:42:3a:df:a0:
1a:bc:98:aa:6f:02:4e:96:53:5c:fd:c9:1c:40:f1:
25:d0:af:d0:83:8c:9f:16:ba:61:f5:d6:e6:6c:1a:
cd:bb:8a:12:c5:f3:c9:cb:0c:d8:85:06:ee:22:84:
c6:25:21:a0:ea:b1:43:c0:65:7d:e7:8f:16:ee:81:
47:3e:e8:63:0c:b7:c2:a1:68:b5:f3:4d:f8:a0:64:
05:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:82:D8:2B:6E:32:64:6D:8D:E2:58:93:CE:E6:98:1D:78:55:9B:57
X509v3 Authority Key Identifier:
keyid:48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:40:d6:60:53:1f:70:54:31:d6:2a:5f:87:d8:93:b2:fc:7e:
b2:9f:2c:4a:75:f1:d9:e6:ff:1c:21:68:22:9c:1b:55:24:fd:
c5:af:67:9e:c4:10:24:59:ef:fd:66:7e:ef:d4:6a:ad:2e:71:
91:cb:20:49:cf:b8:0d:13:7f:42:61:99:77:e1:cb:f9:d9:bc:
7b:d1:5c:89:93:8f:f2:3a:ec:f1:82:2e:e3:a5:0b:41:4f:ac:
91:62:ec:4f:40:c9:47:c8:90:a9:b2:74:53:69:55:0f:4c:a4:
47:ee:0e:79:70:23:ff:15:fb:c6:f3:a0:87:aa:87:24:ad:2d:
31:02:90:27:c1:2d:d9:d6:aa:52:2c:28:f8:9d:16:ea:38:58:
31:53:35:f8:2d:21:0a:4b:cc:33:c1:f4:72:46:1c:ad:99:54:
78:5d:69:32:af:bc:0d:09:e1:58:f5:ef:ce:a9:ac:78:90:c4:
72:c2:fe:08:c6:f3:dc:ef:2b:90:18:ec:e8:7a:68:bf:bc:ce:
bb:7e:88:ae:f6:dc:4c:77:91:1e:2f:a5:a3:06:ea:a2:29:da:
42:f3:f6:6f:eb:d6:60:53:5d:58:dc:88:80:35:81:20:75:49:
56:66:04:d7:a9:70:65:e9:ae:86:f4:45:66:9f:df:7e:10:35:
e2:78:e4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:00 2025 by rpki-client