Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
File: SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json)
Hash identifier: 0/ue9MN9NJCXpsGd6HYOOHDL+80NsKLN3W5xFWDrb68=
Subject key identifier: 3C:BC:37:54:85:2B:4D:9C:3E:48:E9:14:06:14:B1:64:07:F6:47:64
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial: 01984B53CBADFF208287433E9323038BA364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
Manifest number: 10F7
Signing time: Sun 27 Jul 2025 10:00:39 +0000
Manifest this update: Sun 27 Jul 2025 10:00:39 +0000
Manifest next update: Mon 28 Jul 2025 10:00:39 +0000
Files and hashes: 1: N_mB8DyGTMyRNtWdzOHezqUOwxA.roa (hash: 0iM1AEZNlQrcAYLQC9NYhgIr9GaQK1NMxQpbyZpHQKI=)
2: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: 6rMI+ID4xw4/+SoV62lSpX/6nfcjNqQchsLEE593/Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:cb:ad:ff:20:82:87:43:3e:93:23:03:8b:a3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
Validity
Not Before: Jul 27 10:00:39 2025 GMT
Not After : Jul 28 10:00:39 2025 GMT
Subject: CN=3cbc3754852b4d9c3e48e9140614b16407f64764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d5:45:95:33:db:03:bb:65:9c:e0:4f:64:4a:
91:b4:3c:88:62:21:2d:5c:37:3a:39:57:d3:c1:73:
eb:9f:c0:a3:f1:22:12:92:55:27:46:7d:9e:ad:3a:
d0:d6:46:f6:67:ed:e0:aa:c2:fa:c4:b4:34:5a:ce:
00:32:2e:9e:7e:4b:fc:d4:cb:95:c6:27:ca:ec:d6:
a5:9b:44:63:54:cc:45:6d:a3:df:92:d1:a6:cf:61:
cf:ba:6f:28:0d:20:fc:ca:84:7e:5d:4d:c2:45:68:
af:c7:12:a9:ca:49:02:ef:e7:09:b7:f2:68:2e:17:
f9:b6:3e:f9:51:ec:80:86:dc:71:37:06:0b:bf:e3:
98:d7:a2:1d:16:37:98:b6:77:7e:33:eb:08:ed:9a:
f1:5d:56:fd:0d:b5:e6:59:05:fc:d8:aa:8b:79:03:
16:59:0d:e6:20:2d:04:4f:e3:2d:de:28:c5:32:a5:
b0:ed:f6:13:d8:6c:49:aa:ca:cc:07:35:a0:59:13:
18:76:1a:77:60:e8:36:b6:55:e8:ee:56:0a:d7:0e:
2f:cc:e1:96:c0:75:b2:b1:3f:2f:ad:9a:bb:2f:fa:
94:8d:52:e9:47:88:7f:36:3d:1a:5a:a5:6e:ad:ef:
75:91:40:b7:2e:35:5d:20:bf:aa:0f:73:f2:76:e3:
4d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BC:37:54:85:2B:4D:9C:3E:48:E9:14:06:14:B1:64:07:F6:47:64
X509v3 Authority Key Identifier:
keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7c:16:81:02:78:e0:f9:86:87:63:8a:5b:1c:32:3a:52:5c:
b1:a3:90:5c:ae:77:3d:52:b9:d1:7a:0f:b9:18:a1:81:71:25:
49:7f:c2:f6:e8:c4:67:08:09:68:ad:e9:99:a3:7e:68:ad:1b:
e4:75:58:09:3d:d4:81:81:7e:e9:5e:09:b6:96:23:a2:8b:99:
17:57:35:18:a5:fd:b0:00:9c:60:c5:18:0c:62:9e:1c:d2:a2:
c0:a4:b3:96:32:89:e6:d6:d7:b8:2a:87:32:8c:74:66:10:24:
39:2b:27:f9:6e:a3:ca:6f:d2:84:95:cd:7f:e2:8b:11:c4:14:
f9:b6:f7:6c:88:ea:fc:d8:62:2f:dc:1b:f0:10:6c:24:04:08:
7c:7b:68:94:fd:c0:c3:bc:3d:17:d6:1d:d8:37:08:59:97:11:
01:d5:11:fd:47:c7:a8:21:11:e8:09:ca:c4:b5:6f:dc:6b:4b:
76:1e:27:a6:b6:19:65:18:49:98:6b:f7:a6:02:eb:c1:ef:3a:
05:da:13:ac:40:ff:84:64:cd:de:19:5c:85:7e:df:1d:56:d0:
98:e1:85:32:f4:a0:ec:71:05:d0:22:ce:2f:e9:f1:ed:94:75:
72:01:0f:29:64:df:f4:c5:e7:59:b8:6f:80:c6:ba:46:ef:a4:
fa:b9:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:22:36 2025 by rpki-client