Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: CPQrOtczo9R1l6xwNMtX+BXaFcXSJA+6j949HNnR3Ts=
Subject key identifier: D0:53:B1:92:7C:A7:1A:C0:45:AA:6A:7B:DE:C9:07:17:3B:1E:F4:01
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 01984B55257A91B43C993F61B16D05B5BAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 122F
Signing time: Sun 27 Jul 2025 10:02:07 +0000
Manifest this update: Sun 27 Jul 2025 10:02:07 +0000
Manifest next update: Mon 28 Jul 2025 10:02:07 +0000
Files and hashes: 1: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: G9oFhppfTJxcpPJZ4r7psqFDUMzIYlObYlNY2/wLWSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:25:7a:91:b4:3c:99:3f:61:b1:6d:05:b5:ba:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Jul 27 10:02:07 2025 GMT
Not After : Jul 28 10:02:07 2025 GMT
Subject: CN=d053b1927ca71ac045aa6a7bdec907173b1ef401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:73:a7:d5:fb:13:63:09:54:15:58:dc:9c:56:
d8:75:3a:d7:4b:ff:ab:7c:32:af:4b:b0:b0:20:28:
7e:e2:3b:d8:35:aa:bc:eb:60:91:55:71:71:f8:fb:
b8:12:81:37:d3:9b:cb:9b:57:9d:ba:09:95:8e:30:
3b:d3:04:ec:e0:94:41:12:91:ef:6b:4e:6c:6b:4f:
3e:20:6c:4f:d0:a4:3e:59:bb:14:de:96:24:a4:1e:
e0:95:3a:ef:4f:3b:7a:ce:d3:14:7e:81:10:6f:57:
86:80:e2:2d:91:43:b1:0d:4e:33:f6:4e:c4:a0:76:
58:27:ac:21:11:9b:54:ac:3b:fb:4e:c2:44:5d:55:
55:2a:f8:5d:81:0b:04:0d:4f:29:3c:cc:52:f3:96:
00:78:31:2e:32:40:9f:1e:13:fa:93:f4:4a:d3:b0:
31:9d:a2:21:ea:52:92:f0:c9:13:d1:f9:5e:a8:fa:
42:76:6b:b8:bf:e9:76:78:2d:ca:c8:8f:f9:46:56:
4b:e5:fe:8d:df:0a:d4:e0:dc:00:43:50:37:61:00:
43:f2:0f:9e:2f:7d:56:37:fa:71:35:21:8c:ac:e7:
5e:e4:47:62:c9:42:47:08:d7:e8:6a:db:fa:f0:59:
84:73:cc:22:51:6e:aa:3f:4b:e9:79:ca:14:6f:7c:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:53:B1:92:7C:A7:1A:C0:45:AA:6A:7B:DE:C9:07:17:3B:1E:F4:01
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b8:fc:fe:64:52:f6:eb:90:34:61:25:4b:ef:f9:76:04:d8:
b9:d6:00:6a:d5:c3:f6:36:d5:7e:59:8c:02:34:fe:1c:84:9b:
bf:c4:69:8b:3c:69:7a:f8:61:4c:51:dc:3a:41:45:77:98:78:
d7:e3:4c:d3:f5:50:4f:a4:7d:ef:a4:b9:d9:73:f3:c1:d3:e5:
3d:75:e5:b6:b5:e3:1e:87:18:c8:1a:b4:c7:7d:d5:57:c8:1b:
f8:21:2d:a9:f4:0e:16:4b:f2:51:b9:ea:5b:9a:71:40:40:14:
4d:69:ae:6f:17:a1:f7:fa:2c:6b:26:82:6a:88:ae:e5:71:6b:
c7:37:cb:bb:d6:a2:77:de:c2:15:ad:42:97:70:bd:16:a7:98:
f6:77:cc:4c:e4:b1:a5:f7:6d:60:9c:e0:e0:fc:d0:15:70:be:
66:07:68:4e:2d:52:7e:fa:e9:e0:7b:a0:97:3b:7d:9c:7b:4b:
95:06:89:10:5b:48:56:f8:5e:a3:df:00:08:fe:95:7d:24:dc:
ea:9e:3e:3b:56:86:7a:71:e8:ea:8b:a6:30:72:c4:b9:90:56:
7a:e0:49:32:fb:92:be:5a:bd:6a:a8:05:b5:dd:d3:45:fa:2b:
60:a3:32:14:a0:2b:f7:ae:19:b8:0c:87:00:69:01:50:71:72:
92:92:d6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:51:05 2025 by rpki-client