Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
File: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft (raw, json)
Hash identifier: P2zyHKZOGKzPL993j9FQQqfVbZUIxyGtNO4cQFsf0oE=
Subject key identifier: AE:39:20:45:80:14:EA:64:00:2E:C5:64:C8:F8:7E:3B:6F:9C:F8:E0
Authority key identifier: 49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
Certificate issuer: /CN=49f9b880f259b88190702c22bf832171b7597434
Certificate serial: 0198D4733B51BB92EDE1CB0E5389B7A52C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
Manifest number: 129C
Signing time: Sat 23 Aug 2025 01:02:58 +0000
Manifest this update: Sat 23 Aug 2025 01:02:58 +0000
Manifest next update: Sun 24 Aug 2025 01:02:58 +0000
Files and hashes: 1: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl (hash: Ry44nsBKPCK0DDY7yGx2UpSBk84tKDNgZysoBawq72o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:3b:51:bb:92:ed:e1:cb:0e:53:89:b7:a5:2c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f9b880f259b88190702c22bf832171b7597434
Validity
Not Before: Aug 23 01:02:58 2025 GMT
Not After : Aug 24 01:02:58 2025 GMT
Subject: CN=ae3920458014ea64002ec564c8f87e3b6f9cf8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:0a:00:ce:b7:bb:14:54:64:21:2f:be:8d:
e8:9d:a9:f1:f1:29:b2:05:8e:8f:b8:66:7d:0d:98:
af:d7:1c:4e:d8:90:06:36:76:14:e6:c4:d6:2e:e6:
de:a9:da:39:f5:79:bc:b1:9a:86:c1:65:5f:2f:9f:
5e:0d:71:0b:69:b7:88:dc:0f:7f:d6:7e:fe:75:fc:
f1:31:46:bf:f2:d5:89:1b:63:3b:97:83:61:8f:1a:
4a:14:60:21:1a:31:44:62:c7:0d:c7:f9:d6:ca:3c:
6d:85:b4:73:63:41:f8:13:67:9b:b4:df:af:36:71:
be:cd:5f:06:f0:b2:e2:ea:62:75:79:9b:b4:39:0d:
cd:15:7b:db:04:aa:00:fb:e6:ce:b7:52:47:b3:ff:
e3:15:93:92:2c:21:40:60:64:a2:ba:2b:c5:35:c8:
2c:10:81:42:d2:b8:53:50:35:1a:9e:ff:d2:4b:d0:
bb:38:38:65:11:b4:a3:b8:c1:17:8c:66:a5:31:0d:
63:f4:28:06:41:7a:83:f9:85:f5:ec:c0:21:7b:b6:
c1:57:65:17:c1:5d:9d:c2:51:e1:05:10:8e:a0:7d:
06:30:41:6f:24:b9:59:ae:eb:ff:0f:58:45:0b:c8:
b7:b6:59:0e:4d:9a:bd:29:4f:2f:47:80:26:38:6c:
ba:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:39:20:45:80:14:EA:64:00:2E:C5:64:C8:F8:7E:3B:6F:9C:F8:E0
X509v3 Authority Key Identifier:
keyid:49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:cc:e5:c0:4b:8b:cc:b6:21:2c:09:b5:e8:fb:85:95:80:5d:
66:69:e3:bd:5c:0f:3c:c5:5c:8f:7f:0e:8e:fd:07:f5:64:8e:
30:c0:41:d3:8e:6b:67:84:0d:ea:3d:70:b1:36:71:41:8a:8a:
83:07:31:2d:38:fd:ee:c0:0a:fd:e0:f7:03:42:a4:44:9d:6e:
81:4f:d2:b8:68:ce:f6:86:ed:40:3c:fe:74:5c:e5:bd:b4:a0:
ea:16:b4:19:4a:a9:38:39:12:52:8a:2b:2c:b8:b4:24:95:9f:
ca:6d:96:94:eb:43:71:80:6a:49:b6:4d:b0:e3:45:32:96:e6:
2d:90:5d:3a:4d:59:7e:05:bd:67:11:fa:70:3e:15:19:8b:ab:
18:ed:dd:d6:b7:71:b0:27:cb:0b:32:5c:b0:5f:52:06:dc:fe:
6d:c7:4a:d5:11:c9:d9:12:1e:1d:2d:57:0c:1e:6c:03:df:5f:
da:de:e8:34:71:de:2f:28:fb:9b:d4:16:64:59:dd:82:5e:4d:
87:97:2d:d3:66:08:29:21:7d:5b:d5:68:04:a6:e3:d9:9b:4d:
62:00:a4:7b:5f:37:22:64:04:96:5c:dc:b4:2a:c4:99:3c:f6:
71:22:ed:c3:35:f9:ea:50:7d:20:90:be:e1:ad:fa:af:37:4a:
46:64:6e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:34 2025 by rpki-client