Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
File: SGiJzk60_XR4GCSDld5fuT0f4UI.mft (raw, json)
Hash identifier: LpFBUwPJibz74LV7ixfz54cW2a9ms/K1aqv2g5hITMw=
Subject key identifier: 94:12:8B:81:B2:4F:AC:EA:02:49:B5:24:E9:49:2D:8F:67:BE:AB:5C
Authority key identifier: 48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
Certificate issuer: /CN=486889ce4eb4fd747818248395de5fb93d1fe142
Certificate serial: 0196A2AE182EC264C3D36327C9A292391BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
Manifest number: A3
Signing time: Mon 05 May 2025 23:00:40 +0000
Manifest this update: Mon 05 May 2025 23:00:40 +0000
Manifest next update: Tue 06 May 2025 23:00:40 +0000
Files and hashes: 1: FfqUAa7-KKr54JP8aBzk5nNv21g.roa (hash: PY8USvms98PE+f6r3SXsrpm0zwpXY4+1N+NCv5EFelE=)
2: SGiJzk60_XR4GCSDld5fuT0f4UI.crl (hash: wT5iNimU0cJDHyfHpw6LZmeY7S6Twrg3wzX3SRVA8hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ae:18:2e:c2:64:c3:d3:63:27:c9:a2:92:39:1b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486889ce4eb4fd747818248395de5fb93d1fe142
Validity
Not Before: May 5 23:00:40 2025 GMT
Not After : May 6 23:00:40 2025 GMT
Subject: CN=94128b81b24facea0249b524e9492d8f67beab5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:e0:09:22:ae:52:8a:92:2d:c0:ac:17:11:
35:12:d4:0a:df:df:fc:0d:b1:c7:a5:36:85:d8:f2:
cc:d3:e2:0e:24:89:d1:34:93:68:d7:fb:e7:05:86:
aa:ef:9f:16:dd:8d:ce:7b:0a:99:67:94:c9:6f:65:
a1:04:e1:3f:27:42:34:f5:22:d4:88:14:82:bc:44:
0c:b5:62:6e:19:1c:b8:f4:9f:67:9a:43:c2:26:a8:
05:6b:e6:d0:67:ca:64:58:a4:cc:0f:72:83:69:fa:
0f:ed:57:0e:1d:fe:04:24:c8:0c:56:8c:8a:62:75:
ac:15:da:aa:64:24:c3:5b:c7:b8:e6:45:94:3f:ec:
a8:bc:e5:f8:68:c8:84:f4:0a:90:ea:94:8d:4b:0a:
1e:f5:7e:ac:d2:ee:0a:67:96:87:e6:12:21:f9:01:
f5:19:fa:98:b0:c5:17:a2:9f:3b:be:86:c3:a1:ba:
76:65:af:70:01:c8:17:79:a2:b7:44:5b:72:14:99:
d2:a2:21:86:82:63:13:57:32:5b:99:9a:44:5a:db:
4b:fb:0e:5c:fa:0e:9e:7c:2d:ee:4f:c9:82:c9:04:
4c:f1:a4:8e:f2:27:c3:be:a0:d9:d8:04:c5:eb:9e:
95:12:7a:f7:b4:cc:b5:a3:cf:4f:72:f8:5a:f2:38:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:12:8B:81:B2:4F:AC:EA:02:49:B5:24:E9:49:2D:8F:67:BE:AB:5C
X509v3 Authority Key Identifier:
keyid:48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:09:e7:e8:66:21:7d:f5:09:db:8c:8e:1c:6c:b9:24:b1:20:
9f:33:da:4a:f0:b1:1d:88:d9:2d:9b:da:1e:f0:12:47:0c:e8:
61:a5:f4:be:f2:98:f4:d8:b2:5a:8e:68:44:7c:be:53:a0:cf:
11:08:10:77:04:0e:a6:12:f5:35:49:2f:63:65:4b:db:8c:b3:
b5:3a:eb:3d:cb:94:21:79:0c:09:ea:6c:77:3a:04:15:eb:dd:
cb:e0:02:56:f5:4f:85:91:4a:da:60:72:2d:45:87:13:b3:8c:
dc:23:54:39:30:8e:64:ca:d3:7f:1a:05:19:b6:e7:ab:42:fd:
dc:78:11:0f:86:85:40:e4:af:f8:ae:a3:fa:c8:5c:f3:35:0a:
90:ac:d1:c8:8a:ea:fe:fe:78:d1:a6:00:0b:b8:5e:f6:b3:7f:
0e:d8:eb:36:2e:a8:0f:54:b8:0b:55:11:15:8e:15:5d:7e:28:
e2:5b:4e:40:11:81:42:92:f5:9c:3b:2d:8e:e2:11:55:8c:a1:
2c:b0:97:c9:d7:a7:ed:4e:6c:5a:8a:0f:c2:4e:74:f6:90:2e:
ca:59:2c:10:6c:08:93:fe:c7:b8:fc:f2:01:b3:44:52:04:ac:
f3:62:af:0e:ff:3e:8e:0e:24:1b:b5:60:7a:85:75:63:1f:e9:
37:2e:47:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:35:10 2025 by rpki-client