Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
File: SGUQoxFpcvztleiova_W5FXe0Lo.mft (raw, json)
Hash identifier: pUk7OUdtOWAwLXpOLbyVMunjpYmaau/yoBH8uyI4rjI=
Subject key identifier: E8:8E:13:3E:28:23:11:60:A0:4D:B1:72:FE:62:0E:6B:68:1A:48:1E
Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
Certificate issuer: /CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Certificate serial: 0197B70E5FD5B749D97FCAB79E8E350A9F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 15:01:01 +0000
Manifest this update: Sat 28 Jun 2025 15:01:01 +0000
Manifest next update: Sun 29 Jun 2025 15:01:01 +0000
Files and hashes: 1: SGUQoxFpcvztleiova_W5FXe0Lo.crl (hash: mMlBd1Y1HU/CiAQmw1HRUsOOQkJCR2NbXr6PLrqLcxA=)
2: lQwR3y5IAJ7kyCCFVo104fC4SsY.roa (hash: MwEmP7Sqq33K1HUPXLtLK+kd2q/HJrM3DtuK+SIM+zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:5f:d5:b7:49:d9:7f:ca:b7:9e:8e:35:0a:9f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Validity
Not Before: Jun 28 15:01:01 2025 GMT
Not After : Jun 29 15:01:01 2025 GMT
Subject: CN=e88e133e28231160a04db172fe620e6b681a481e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:00:cd:96:08:64:3a:17:e1:6b:cb:b1:9a:
cc:75:c6:5f:42:25:70:66:4e:18:de:a3:64:b1:35:
66:74:f0:83:da:52:d9:dc:8a:f1:25:ba:2d:7e:4f:
82:b2:81:75:27:54:eb:00:56:59:e3:cb:46:62:8e:
b8:1c:ff:66:dc:50:c0:fc:f0:31:a6:7b:3e:59:eb:
77:56:8f:02:e8:51:00:4d:c4:98:c4:c1:ea:e8:1c:
06:16:53:4f:e8:d6:1c:2a:fe:15:01:d6:ed:d5:33:
3d:ba:a6:48:b4:63:2a:de:01:4a:cc:2e:e4:7d:da:
a6:ff:36:00:ad:64:e0:15:0c:48:35:e8:56:d2:1d:
b3:c4:22:4e:f9:dd:59:16:68:c2:cb:46:66:b9:27:
3f:21:e6:5b:09:94:8e:8f:cd:cd:0e:5f:6a:7c:67:
07:50:39:46:45:06:9f:50:76:fe:ba:9e:17:13:d6:
98:00:c4:7b:05:e2:60:89:ee:da:59:5d:b0:50:72:
3d:34:0a:20:08:47:09:65:ef:b2:f4:2a:58:18:42:
46:2b:29:2b:3c:a8:c4:0f:37:e0:da:0b:9e:9c:35:
ce:97:24:ad:b8:72:53:cf:6c:32:ec:9b:8b:7e:90:
46:97:f4:49:9e:16:d0:be:35:17:a4:dc:34:63:21:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8E:13:3E:28:23:11:60:A0:4D:B1:72:FE:62:0E:6B:68:1A:48:1E
X509v3 Authority Key Identifier:
keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:14:11:d4:1a:04:da:2c:1c:2c:43:4e:22:48:00:c5:35:af:
fd:1c:06:97:ea:8c:77:89:5d:f3:5b:aa:23:de:7b:dc:c9:58:
c4:d1:68:f0:9d:38:51:52:3e:4f:d8:23:ff:dd:99:b3:13:8f:
e8:2c:8a:8b:5a:9f:45:67:e1:72:26:20:fa:52:d5:ad:a6:d4:
62:38:63:86:46:c5:67:fa:51:2c:59:b1:c8:11:57:b3:2e:0c:
54:dc:a4:51:9b:99:be:06:20:4e:4f:0e:97:43:95:29:57:62:
12:3a:49:f0:05:bb:fe:48:5f:85:4c:5f:e6:0a:4b:eb:7b:94:
4e:44:64:2c:07:ef:99:0e:a0:0b:2a:07:43:9c:05:64:21:51:
f0:f4:1a:d1:e6:da:b4:f7:b2:f7:4a:87:d5:9f:70:dd:7a:fd:
79:60:4c:fc:9d:b9:47:20:fd:a3:81:c2:69:b9:7c:7f:ed:25:
42:78:db:29:4f:1e:61:34:18:65:01:ec:c0:18:53:10:39:db:
de:45:3c:4f:a1:a6:fa:c3:4d:03:b3:43:4d:90:d4:41:85:60:
a3:3a:e3:3b:51:1a:31:6a:f5:8c:4c:a6:dc:ee:c3:0e:65:b1:
81:3f:4f:3a:3b:3e:3c:ec:8d:0a:64:30:5c:4b:a1:e1:db:5e:
1a:37:8e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:39 2025 by rpki-client