Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/60dca4-3e9e-4056-a05d-57d22bb1bb9a/1/SGLw6V7KPtYlnnTDJ5W78aISehA.mft
File: SGLw6V7KPtYlnnTDJ5W78aISehA.mft (raw, json)
Hash identifier: AJ8n8GKCDYa6DUb2YWL8XiszaFMaO/YONIgyfyH+6ww=
Subject key identifier: C2:C8:27:FD:E3:85:DE:98:5C:0F:EC:15:26:BE:31:1B:AE:30:4E:9B
Authority key identifier: 48:62:F0:E9:5E:CA:3E:D6:25:9E:74:C3:27:95:BB:F1:A2:12:7A:10
Certificate issuer: /CN=4862f0e95eca3ed6259e74c32795bbf1a2127a10
Certificate serial: 0198492E25D5E99F6B6826B911142EB9EF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGLw6V7KPtYlnnTDJ5W78aISehA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/60dca4-3e9e-4056-a05d-57d22bb1bb9a/1/SGLw6V7KPtYlnnTDJ5W78aISehA.mft
Manifest number: 04
Signing time: Sun 27 Jul 2025 00:00:17 +0000
Manifest this update: Sun 27 Jul 2025 00:00:17 +0000
Manifest next update: Mon 28 Jul 2025 00:00:17 +0000
Files and hashes: 1: SGLw6V7KPtYlnnTDJ5W78aISehA.crl (hash: EtNZYCxoPRg2+tLKisU/V2BKcbw7G38CV7oGnzz8OAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/60dca4-3e9e-4056-a05d-57d22bb1bb9a/1/SGLw6V7KPtYlnnTDJ5W78aISehA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/60dca4-3e9e-4056-a05d-57d22bb1bb9a/1/SGLw6V7KPtYlnnTDJ5W78aISehA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGLw6V7KPtYlnnTDJ5W78aISehA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:2e:25:d5:e9:9f:6b:68:26:b9:11:14:2e:b9:ef:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4862f0e95eca3ed6259e74c32795bbf1a2127a10
Validity
Not Before: Jul 27 00:00:17 2025 GMT
Not After : Jul 28 00:00:17 2025 GMT
Subject: CN=c2c827fde385de985c0fec1526be311bae304e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:63:69:e4:8f:be:a8:53:32:e5:32:0b:86:
c6:b2:37:cd:01:ae:c4:cc:41:a3:7f:14:65:1b:4d:
ac:bf:14:72:ec:bf:21:f7:cf:c0:e1:2b:f5:63:52:
88:59:ea:35:15:f8:a1:13:50:43:3e:ba:e4:2f:fa:
c2:64:50:a4:01:b2:8b:bc:34:20:a8:f3:e8:74:49:
68:b1:0c:9f:87:c5:48:bb:f0:3e:67:ee:d9:7f:65:
4d:27:c7:88:84:e3:b3:1e:24:ba:d9:17:3e:32:be:
82:ce:e4:94:2b:fa:ec:bd:85:e1:d7:51:32:a3:d7:
6c:00:cf:b9:34:a8:70:5e:2f:c3:96:b0:7d:a6:ee:
8d:0e:c9:9e:b9:ba:9d:b2:c0:b0:0c:b7:07:43:f6:
da:f5:e7:78:f1:4a:f0:01:f5:04:7a:da:66:7d:80:
24:ea:65:1f:b9:38:d3:81:09:53:b5:11:12:27:fb:
f9:27:20:f4:36:31:bc:d8:33:9d:40:98:9d:37:43:
3e:8f:75:6f:43:df:3b:bd:81:7d:29:1e:08:e6:3e:
26:1c:67:d8:d1:90:b4:bd:c2:3c:78:77:80:79:58:
76:35:bc:19:44:a3:f4:a0:38:53:f4:ee:63:f4:ac:
f6:bc:77:fd:09:14:70:de:e7:64:f8:f4:29:09:f9:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C8:27:FD:E3:85:DE:98:5C:0F:EC:15:26:BE:31:1B:AE:30:4E:9B
X509v3 Authority Key Identifier:
keyid:48:62:F0:E9:5E:CA:3E:D6:25:9E:74:C3:27:95:BB:F1:A2:12:7A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGLw6V7KPtYlnnTDJ5W78aISehA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60dca4-3e9e-4056-a05d-57d22bb1bb9a/1/SGLw6V7KPtYlnnTDJ5W78aISehA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60dca4-3e9e-4056-a05d-57d22bb1bb9a/1/SGLw6V7KPtYlnnTDJ5W78aISehA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a0:da:47:07:40:a8:27:87:78:02:5b:e9:28:9b:f3:cd:ee:
14:31:72:fb:9a:ec:60:da:b4:c6:54:e8:a5:e2:db:df:ae:1c:
f3:54:b2:d3:31:e7:05:21:c9:3c:a2:f2:7d:f0:59:d5:84:d5:
3b:ec:96:3b:22:6c:0f:cb:2a:88:9d:14:75:0e:55:f5:99:90:
66:fa:33:de:60:2a:c3:cb:9a:b4:ee:7e:a9:b3:11:b6:9b:6f:
1f:a1:52:9e:82:35:0a:a5:54:16:b7:22:80:b5:94:03:0e:d7:
9a:72:25:cd:af:47:04:c5:82:90:ef:24:14:87:31:dc:af:72:
ed:80:18:4e:81:43:08:0a:bb:f9:1f:4e:20:97:d2:37:79:be:
b4:5d:e1:df:b8:16:d1:96:da:92:f3:0a:09:c6:58:76:f4:a5:
b8:25:7a:44:ca:e9:04:42:e5:ca:31:45:3a:fb:d3:25:75:50:
97:62:c0:17:d0:f0:d0:1c:56:0d:b2:b1:54:2e:06:e1:ec:56:
75:72:80:47:8c:70:93:79:43:6b:d8:e5:14:2d:a0:e1:fc:e5:
a8:88:9e:08:cf:10:b6:a6:2e:44:8c:8a:56:03:81:9f:12:3b:
e2:e8:34:88:95:c4:58:82:83:a6:dc:98:99:1a:0b:6d:30:85:
12:36:6f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:39:46 2025 by rpki-client