Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
File: SGUQoxFpcvztleiova_W5FXe0Lo.mft (raw, json)
Hash identifier: T/g6uVuhad2YRCNR3HHE+w+vf6qV8bWKCUZsTqQ3FxE=
Subject key identifier: CB:0B:3D:EC:AF:A9:65:D1:5D:46:D3:4A:AF:64:9A:01:A2:87:19:09
Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
Certificate issuer: /CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Certificate serial: 0198D4E020C3090DF03AB6A94DFEFCB7EE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 03:01:54 +0000
Manifest this update: Sat 23 Aug 2025 03:01:54 +0000
Manifest next update: Sun 24 Aug 2025 03:01:54 +0000
Files and hashes: 1: SGUQoxFpcvztleiova_W5FXe0Lo.crl (hash: iXoz9k0xXk1x9gRUPPzuoRWaLxRZw/qKeXqd4C7Z1Vw=)
2: lQwR3y5IAJ7kyCCFVo104fC4SsY.roa (hash: MwEmP7Sqq33K1HUPXLtLK+kd2q/HJrM3DtuK+SIM+zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:20:c3:09:0d:f0:3a:b6:a9:4d:fe:fc:b7:ee:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Validity
Not Before: Aug 23 03:01:54 2025 GMT
Not After : Aug 24 03:01:54 2025 GMT
Subject: CN=cb0b3decafa965d15d46d34aaf649a01a2871909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:06:3d:9b:53:21:1a:c3:4b:9f:a5:7a:34:
e3:de:9c:aa:cb:f8:7a:9a:36:48:b0:c3:b7:e8:52:
fe:58:f0:38:78:d8:5e:20:d1:80:ca:b3:13:ba:44:
a4:e5:77:94:12:7b:68:80:b3:13:22:ab:95:7a:57:
0f:da:57:9f:26:f3:85:4c:26:44:ca:34:46:59:da:
79:6d:07:0e:5c:fe:01:ae:aa:a5:7c:06:93:22:49:
ac:b9:de:b4:dd:37:26:9b:ef:cb:92:0c:29:5a:67:
36:6e:84:dc:42:35:b1:44:12:17:b8:9d:68:23:8f:
1d:f7:3b:76:ce:02:b3:12:06:8b:69:60:9b:fb:25:
a2:1e:db:fd:74:e9:61:33:03:0c:15:e3:6f:7e:0f:
f5:64:61:c8:38:63:4a:0b:6f:21:a4:0c:81:f6:e4:
6a:77:4d:45:ba:21:f4:1b:8f:6b:be:8f:ce:4d:90:
78:f2:35:cd:04:ca:a0:85:2b:79:ee:24:22:b2:73:
3e:fa:61:83:d0:9e:54:3c:24:e4:ff:6d:a2:93:30:
5d:56:05:04:d6:3f:cd:87:3c:72:5f:05:2e:84:aa:
c8:f0:96:c6:56:67:36:1c:50:65:b3:39:30:d0:04:
74:5d:01:af:9b:2d:bc:5c:f5:53:43:d6:63:d3:fe:
be:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0B:3D:EC:AF:A9:65:D1:5D:46:D3:4A:AF:64:9A:01:A2:87:19:09
X509v3 Authority Key Identifier:
keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8d:66:6b:31:db:4f:8a:73:1e:7b:20:34:75:71:fe:eb:19:
07:20:ab:c9:6f:8e:90:b3:2a:d6:3f:c0:9c:83:b3:2e:9b:e6:
e9:c8:9f:cc:ce:e3:d6:29:1c:9d:5a:82:c0:aa:25:ea:b6:e5:
39:ab:a8:90:c9:af:d3:fa:9b:97:be:97:39:88:ac:9c:ca:a0:
0f:60:14:02:a3:ff:b0:37:36:2c:1a:ab:d6:e9:88:4f:61:ea:
52:b8:ce:ae:7b:2c:e9:08:6e:ca:f2:e9:a3:a4:ae:65:e0:9e:
3d:b9:cc:bc:b5:44:97:65:84:05:d7:67:80:5f:fe:de:93:c4:
45:a7:22:ca:e2:37:1a:14:0b:91:c9:7b:47:2f:7f:40:f0:05:
b7:0c:50:cc:34:34:93:28:f0:70:08:ac:93:c6:f1:56:43:2e:
ad:eb:0f:9b:71:7c:c2:82:2b:16:1d:9d:b5:6a:ce:14:11:ae:
d3:3a:14:9f:f9:41:12:c8:cc:07:92:0d:12:4e:70:4e:bf:53:
23:33:c8:78:1e:14:4e:59:0f:5e:12:37:10:52:05:0c:03:fb:
de:27:ef:dd:35:24:5c:db:8d:6b:ee:24:73:99:73:0d:1b:f9:
24:cd:ee:54:ab:e0:01:dc:c9:bf:40:bd:dc:f6:77:75:97:bb:
06:93:8b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:20 2025 by rpki-client