Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
File: SGgL3la9O_VhV4oP4QjLwcanWds.mft (raw, json)
Hash identifier: A6Wuet9XadWtkRpF2NYrC1BQgT1/nTmx9CBT59yJ4x0=
Subject key identifier: 39:51:A9:E0:44:80:92:AB:F2:68:5F:03:9C:72:D0:E8:0D:78:38:5C
Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
Certificate issuer: /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Certificate serial: 0197B7B327F34F7042DC8CED5D6C1CF54938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
Manifest number: 0A35
Signing time: Sat 28 Jun 2025 18:01:01 +0000
Manifest this update: Sat 28 Jun 2025 18:01:01 +0000
Manifest next update: Sun 29 Jun 2025 18:01:01 +0000
Files and hashes: 1: SGgL3la9O_VhV4oP4QjLwcanWds.crl (hash: ffrIxWIFsmyN/LFsflfPnJ3tAoE9eIfktiIv5EmYF+o=)
2: XlwydODeF8gcZq2lEX8o8gcX3v8.roa (hash: TCKQsk1WAUMm3psVkuDPcRNKeGExKBO69fhhu70s8wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:27:f3:4f:70:42:dc:8c:ed:5d:6c:1c:f5:49:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Validity
Not Before: Jun 28 18:01:01 2025 GMT
Not After : Jun 29 18:01:01 2025 GMT
Subject: CN=3951a9e0448092abf2685f039c72d0e80d78385c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:8a:4b:60:82:b8:21:2e:e4:b6:80:7d:60:
cf:09:21:31:33:23:91:22:0c:ac:2e:7c:cb:7a:f1:
d2:26:b2:a2:6e:f8:17:53:5e:45:03:dd:08:2b:cd:
93:56:ad:2a:88:2e:07:a1:8d:52:6b:f2:1f:7c:aa:
58:f0:10:09:5b:08:3c:74:ee:e5:14:3c:8b:4b:59:
a2:5c:a9:88:6c:da:57:ae:fd:87:cb:66:a2:1b:8f:
43:da:4c:ad:82:66:12:10:58:f4:8e:78:25:07:7f:
39:ec:c9:dd:ca:b4:ca:b1:67:68:28:8d:7e:c0:0e:
38:dd:af:b8:ce:bf:c2:1e:4d:4b:72:de:96:cc:c1:
07:c0:86:11:db:36:00:01:76:60:65:ef:02:fd:9d:
ae:29:71:6e:8f:ab:ba:50:9b:a4:08:bd:02:df:7c:
f0:f1:09:dd:d0:dd:c2:2b:2d:1d:44:d4:75:ea:f2:
ca:8b:99:fc:df:6e:76:ec:da:1c:ac:9d:fd:1f:1d:
4a:fe:ee:cc:23:4f:ce:bb:a4:0a:9d:c9:65:17:c8:
77:e2:dd:f3:25:81:0f:86:d3:58:fa:06:c6:f3:e5:
58:92:87:b6:6f:54:a3:58:ba:ba:66:d9:b4:30:ea:
76:6f:52:80:a8:82:f6:67:19:b1:6e:6c:86:82:ae:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:51:A9:E0:44:80:92:AB:F2:68:5F:03:9C:72:D0:E8:0D:78:38:5C
X509v3 Authority Key Identifier:
keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:aa:fc:df:a5:99:b4:f1:5f:12:e5:88:d9:c7:d8:17:94:6f:
d8:06:ee:85:2a:d9:6d:8d:31:f6:a6:97:28:ce:3b:15:af:17:
ec:f6:bd:82:cd:c7:1c:45:02:d1:9e:01:cd:65:9d:d2:b5:0a:
de:ec:fb:16:1e:4f:5e:a9:19:c5:3f:33:46:5d:af:cd:e6:0a:
b3:38:4c:e6:68:a2:73:2c:34:e4:98:b9:90:fa:35:c3:9a:97:
42:aa:99:e7:7e:c0:14:54:5f:b3:60:14:9a:be:e8:31:af:dd:
bd:03:a3:00:70:f8:ae:c7:7c:16:a3:80:e8:30:2b:fd:82:07:
88:a2:42:91:58:5d:36:bd:eb:a5:e5:09:47:fe:e6:9c:a8:05:
07:a2:ea:b5:4c:9a:62:13:6c:30:13:4b:51:3c:73:9c:2d:b4:
d9:90:fe:86:33:63:ab:c0:51:3c:73:ba:b5:a1:a6:7f:4a:38:
74:5b:12:34:d2:eb:30:c4:e9:21:d6:a2:7a:6b:86:92:bb:02:
5b:a7:b9:84:bf:dc:a6:32:7e:29:82:89:38:b5:19:b6:b4:18:
44:dc:6d:e3:1f:6b:d1:2b:f9:5e:37:6b:ca:3d:0b:1b:de:f1:
77:52:c4:56:72:be:c2:a4:ba:fb:de:12:f7:ff:db:b7:35:b0:
14:ec:72:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:20 2025 by rpki-client