Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
File: SGgL3la9O_VhV4oP4QjLwcanWds.mft (raw, json)
Hash identifier: xe7wEP6MRiQp9UMpsH44VTM/KSjGxaq9TVNN86xVznw=
Subject key identifier: A0:7E:FD:49:1C:ED:35:86:BA:B5:44:FE:09:A1:6A:CA:9C:FC:6B:0D
Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
Certificate issuer: /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Certificate serial: 0198D77384CDD1D8A815BC9E0363186CB631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
Manifest number: 0ACA
Signing time: Sat 23 Aug 2025 15:02:08 +0000
Manifest this update: Sat 23 Aug 2025 15:02:08 +0000
Manifest next update: Sun 24 Aug 2025 15:02:08 +0000
Files and hashes: 1: SGgL3la9O_VhV4oP4QjLwcanWds.crl (hash: OTyjFQDAA8A1CHV7aYNnrZNwFAscsOW4ivkcO0L/AiE=)
2: XlwydODeF8gcZq2lEX8o8gcX3v8.roa (hash: TCKQsk1WAUMm3psVkuDPcRNKeGExKBO69fhhu70s8wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:84:cd:d1:d8:a8:15:bc:9e:03:63:18:6c:b6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Validity
Not Before: Aug 23 15:02:08 2025 GMT
Not After : Aug 24 15:02:08 2025 GMT
Subject: CN=a07efd491ced3586bab544fe09a16aca9cfc6b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:30:a4:37:6d:9d:54:fd:65:ce:12:8f:ec:
13:05:ad:e6:ed:d8:b8:07:24:3e:d8:20:f2:84:75:
ca:63:48:bb:6e:60:3e:f6:9d:c2:48:59:9e:bf:8d:
59:b2:0f:80:da:26:42:a4:8c:fc:2c:9f:4d:04:6e:
ff:ad:50:06:81:bf:8c:f8:84:ef:db:bd:8b:d4:59:
ce:5b:fa:83:ef:91:e6:a4:f7:03:1b:38:c5:50:23:
a8:d3:50:1a:97:f2:83:5f:be:e7:13:05:f1:ad:3c:
0e:43:f5:ad:d0:0b:81:6a:ff:82:51:1f:80:0b:a0:
b5:89:8b:50:74:c1:54:7b:42:be:61:29:07:a4:b8:
bd:1e:c5:13:62:6b:e9:d5:88:7b:48:0a:c4:7c:d5:
d8:4a:38:32:5b:b4:f8:17:f7:a3:9a:0b:b9:c7:eb:
85:9e:ea:9a:a4:da:99:39:98:cd:68:f1:cd:a4:48:
f6:5b:e9:d8:21:9b:44:5b:f3:b6:66:fe:25:c6:16:
89:33:43:c9:6d:5f:59:87:ba:19:01:55:11:98:6a:
22:95:f5:0a:3e:73:25:28:65:68:2a:c8:27:b3:a7:
44:76:2b:85:b3:2d:3a:4c:f2:fa:b7:7d:23:cb:54:
bf:5a:f0:2f:58:45:5b:d0:95:64:4b:9a:19:bd:fc:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7E:FD:49:1C:ED:35:86:BA:B5:44:FE:09:A1:6A:CA:9C:FC:6B:0D
X509v3 Authority Key Identifier:
keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:81:e5:05:67:ab:01:b9:24:9f:bb:6d:21:b7:ca:37:3f:fb:
6a:3b:9f:7a:92:5c:e8:0e:d5:5e:2f:e8:46:80:a2:27:1b:fb:
a8:50:93:b9:62:19:03:92:be:61:9b:62:b3:0d:fb:8e:74:ce:
a7:7a:cd:c6:15:cf:d2:a5:67:96:41:95:ee:fe:92:cd:b7:a5:
27:5a:d3:0b:df:d7:ff:4d:da:29:dc:db:f0:4a:e1:cc:db:d5:
3a:a1:14:f0:ab:f4:57:46:90:a6:4d:20:7d:6d:66:94:ba:e0:
c7:01:5b:c8:06:f6:81:34:11:3a:3f:17:c3:85:f9:91:7c:ab:
30:c5:dd:7c:da:ce:af:3c:c6:3c:61:f9:d1:33:eb:73:a2:21:
a7:f9:0b:ee:2b:27:9a:b2:77:b6:e6:39:39:e9:6d:3a:dc:1e:
55:29:e4:05:49:c8:d9:4d:4b:52:62:f7:85:2c:a2:83:45:fc:
6f:ca:18:f4:c2:1a:c9:ef:a0:fb:d0:42:16:e9:11:a7:20:4a:
fc:5d:80:fb:69:69:f3:e9:eb:18:b8:d6:f3:3b:f9:fd:7e:05:
74:79:8e:c9:d9:ac:19:9f:ae:7a:db:cf:09:6c:9e:e3:45:79:
b0:7a:a9:17:9f:d3:1e:24:38:01:4f:eb:1e:5f:fc:88:14:0b:
f6:74:eb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:15:53 2025 by rpki-client