Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
File: SGiJzk60_XR4GCSDld5fuT0f4UI.mft (raw, json)
Hash identifier: HgTEXEcdZPKfMBnCulxPmOg5Rxip3F4TR9LeBrBSzvM=
Subject key identifier: CA:C7:16:3D:79:01:81:13:37:A1:EE:A4:4E:91:8E:1A:1E:8E:15:19
Authority key identifier: 48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
Certificate issuer: /CN=486889ce4eb4fd747818248395de5fb93d1fe142
Certificate serial: 0198D884CE64F6F0527D15C6E7C7AA110FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
Manifest number: 01C8
Signing time: Sat 23 Aug 2025 20:00:38 +0000
Manifest this update: Sat 23 Aug 2025 20:00:38 +0000
Manifest next update: Sun 24 Aug 2025 20:00:38 +0000
Files and hashes: 1: FfqUAa7-KKr54JP8aBzk5nNv21g.roa (hash: PY8USvms98PE+f6r3SXsrpm0zwpXY4+1N+NCv5EFelE=)
2: SGiJzk60_XR4GCSDld5fuT0f4UI.crl (hash: GQgdB6ZTv2vmf/xMCK8YPBq6+qVFisFsMQoJ9u+Lcl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:ce:64:f6:f0:52:7d:15:c6:e7:c7:aa:11:0f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486889ce4eb4fd747818248395de5fb93d1fe142
Validity
Not Before: Aug 23 20:00:38 2025 GMT
Not After : Aug 24 20:00:38 2025 GMT
Subject: CN=cac7163d7901811337a1eea44e918e1a1e8e1519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:6f:cd:a4:45:14:69:14:c1:f5:e4:da:c2:
e5:fe:2a:81:f0:3f:2b:e1:3a:8d:21:6f:8a:d9:e8:
5c:c8:11:d7:aa:3d:ab:b8:e4:63:27:56:0d:2c:e4:
89:52:c6:0a:f7:b5:aa:ac:2a:10:17:bc:7f:70:31:
20:1a:79:a1:1d:cf:76:9e:91:38:7f:57:dc:6e:19:
b2:08:b3:e1:64:ab:53:a9:ad:c3:d8:42:ea:35:64:
8a:f0:84:f9:9a:f6:b2:5e:f4:0a:ee:46:48:85:b4:
48:ad:c2:45:3f:3d:ca:f5:58:1c:ae:f5:4f:f0:0b:
c9:c1:07:cc:02:60:b0:8a:c5:12:c4:8b:50:e9:31:
d5:7c:11:51:0b:9d:61:93:78:23:a4:a2:c1:9d:77:
6c:e7:f4:b0:8b:d1:17:7c:15:70:8d:af:13:cb:01:
55:d9:5d:33:bc:47:d6:c9:79:89:ec:14:ee:0f:e0:
3c:76:7f:16:05:f9:06:07:08:a3:b0:dd:30:ac:31:
3f:34:9e:35:f0:05:9e:4d:f9:b0:50:b5:c0:df:00:
40:73:21:b9:bd:91:f9:c2:58:84:e7:48:58:fe:c3:
04:cf:a6:b6:7f:6c:38:f3:2e:fa:9a:1c:2a:bf:6f:
1f:3f:a0:d7:c6:d3:bf:d9:a5:ac:0c:50:5e:36:90:
76:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C7:16:3D:79:01:81:13:37:A1:EE:A4:4E:91:8E:1A:1E:8E:15:19
X509v3 Authority Key Identifier:
keyid:48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0d:22:7f:b7:85:1b:c3:34:64:f8:f5:c5:ad:f4:dd:39:86:
29:78:53:d7:e1:bb:58:c9:ff:f5:e2:db:cb:6d:80:42:dc:aa:
1e:33:b8:de:fa:10:76:05:29:a7:73:ba:91:76:86:af:b1:c2:
33:98:13:d2:b7:74:d4:ac:b6:c1:97:02:cf:f4:2c:39:ec:03:
de:8e:b5:0b:f6:eb:13:66:73:8e:d7:a0:3b:e8:eb:7b:09:fa:
2f:ea:b5:ef:24:f9:29:07:16:b8:74:33:8e:e3:7d:ec:5f:7e:
27:2e:fa:02:32:7b:b1:b7:71:e8:0b:11:1a:3d:45:99:69:c2:
ce:75:29:67:24:bc:f4:ff:f0:52:35:4a:71:69:42:32:a1:27:
86:af:0a:b8:94:74:9d:c6:76:f1:ea:f2:ed:a9:de:8d:68:fe:
22:b5:32:48:78:49:32:ab:d1:4e:7f:79:3d:67:04:a3:75:46:
c1:14:ec:67:56:86:56:99:39:c5:40:69:3b:29:5b:7b:42:20:
17:3e:4e:75:6c:11:5c:5f:a6:3e:f3:b0:24:f5:5f:a1:ca:dd:
d6:42:df:42:cf:1e:33:51:d3:2c:b0:b5:49:e7:52:d6:96:e9:
4c:fb:66:89:11:25:15:60:45:07:c4:b9:f2:4c:3b:5c:63:bd:
ba:70:9c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:43:46 2025 by rpki-client