Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/sgzLpAbArQxb4AB22ZgLNIhWmoo.mft
File: sgzLpAbArQxb4AB22ZgLNIhWmoo.mft (raw, json)
Hash identifier: BR7qw+q03YWu9WPiocRHXWIJ8GetEbKoeccPvnlm1AQ=
Subject key identifier: 08:AE:17:F8:42:62:55:93:8B:65:AD:57:82:4B:C8:BF:65:B2:78:65
Authority key identifier: B2:0C:CB:A4:06:C0:AD:0C:5B:E0:00:76:D9:98:0B:34:88:56:9A:8A
Certificate issuer: /CN=b20ccba406c0ad0c5be00076d9980b3488569a8a
Certificate serial: 019847782B37537D6F2397F5F4BD4F5C7E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgzLpAbArQxb4AB22ZgLNIhWmoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/sgzLpAbArQxb4AB22ZgLNIhWmoo.mft
Manifest number: 10E5
Signing time: Sat 26 Jul 2025 16:01:54 +0000
Manifest this update: Sat 26 Jul 2025 16:01:54 +0000
Manifest next update: Sun 27 Jul 2025 16:01:54 +0000
Files and hashes: 1: sgzLpAbArQxb4AB22ZgLNIhWmoo.crl (hash: d6K7JnQNkOiGy38axOD3JHggATJy5e1qrqPmnEx6u/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/sgzLpAbArQxb4AB22ZgLNIhWmoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/sgzLpAbArQxb4AB22ZgLNIhWmoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgzLpAbArQxb4AB22ZgLNIhWmoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:2b:37:53:7d:6f:23:97:f5:f4:bd:4f:5c:7e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b20ccba406c0ad0c5be00076d9980b3488569a8a
Validity
Not Before: Jul 26 16:01:54 2025 GMT
Not After : Jul 27 16:01:54 2025 GMT
Subject: CN=08ae17f8426255938b65ad57824bc8bf65b27865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:92:06:8e:24:17:86:59:ec:dc:bb:98:1e:
ed:fc:e4:95:79:67:64:54:95:e8:1e:0d:db:db:46:
29:e1:de:89:b1:c9:86:68:d9:85:87:c2:55:a0:1e:
83:a4:29:7f:e9:fd:3a:78:25:67:a4:03:2d:0b:c2:
61:e4:6e:a3:1c:15:cb:4b:2a:21:7c:2e:de:98:70:
4f:e2:a2:8a:bf:8a:e2:d7:6f:24:2d:d1:f4:87:b4:
01:0c:c1:a3:b7:25:63:e9:7f:19:13:65:21:2b:ff:
cc:f1:6e:d2:5f:92:96:71:f7:7f:ae:c8:89:38:21:
9b:89:eb:71:f0:34:8a:72:17:31:9d:0a:6e:5b:61:
63:17:6f:74:31:e6:45:d5:16:dc:38:52:be:54:b3:
4c:fa:31:c9:89:c0:49:ef:7c:40:ba:0f:f1:4e:0a:
4f:12:a9:96:4d:d3:3b:5f:54:90:6c:6e:28:0f:c3:
f2:24:09:cb:ed:63:5f:25:4f:75:f2:ae:20:0e:13:
80:7b:ef:59:fa:93:f4:56:05:aa:48:20:9b:68:5f:
0d:21:79:46:62:bb:42:cf:99:66:4f:27:57:99:18:
5c:8e:4e:b9:88:88:1e:12:0c:c2:db:c6:18:80:cd:
94:52:1d:59:af:2d:83:db:74:53:50:3d:7c:fa:b5:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AE:17:F8:42:62:55:93:8B:65:AD:57:82:4B:C8:BF:65:B2:78:65
X509v3 Authority Key Identifier:
keyid:B2:0C:CB:A4:06:C0:AD:0C:5B:E0:00:76:D9:98:0B:34:88:56:9A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgzLpAbArQxb4AB22ZgLNIhWmoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/sgzLpAbArQxb4AB22ZgLNIhWmoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/743a50-d7f4-42d1-a09d-7ca93ecb2234/1/sgzLpAbArQxb4AB22ZgLNIhWmoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a4:ce:5e:8b:34:6f:1d:f1:1c:1f:42:88:42:a5:f2:32:d9:
5f:d5:a2:03:dd:46:30:3e:3e:6b:6a:87:24:db:15:1e:97:b1:
eb:26:8d:df:00:57:d9:fb:35:73:e3:a3:57:99:c5:94:6b:4a:
95:d0:c2:04:30:4f:85:de:ad:b2:93:60:65:7b:7a:e9:ce:b5:
40:64:2d:70:2c:33:00:da:68:44:e6:9b:d8:d8:1b:f3:40:d1:
f1:13:9d:bb:80:ca:b7:45:73:2d:9e:7f:3d:55:8d:4a:e0:3a:
fb:88:e7:84:11:f1:9a:c4:33:57:da:f8:75:5f:18:76:f7:ae:
05:13:63:54:60:c6:f9:cf:9b:a6:2a:15:cc:58:07:f8:6c:e3:
8c:0a:7d:e7:13:9d:dc:50:f5:cf:4e:dd:0f:6a:64:2e:3c:3b:
5e:4b:0e:9c:51:7d:80:75:84:46:a3:7f:6c:76:b4:8a:3a:96:
de:0d:ae:5c:5b:ea:32:9d:ff:dc:29:0d:b2:08:f7:b7:92:c7:
6b:5a:c8:22:5f:d6:d7:7d:ee:8f:26:98:f8:19:80:d0:54:42:
7f:55:2e:7d:75:dc:65:76:49:08:bc:c7:31:f0:36:99:24:d7:
67:29:61:55:7a:b1:4a:02:f2:0e:5b:36:57:25:b9:ef:bb:96:
54:a4:ac:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHeCs3U31vI5f19L1PXH6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMGNjYmE0MDZjMGFkMGM1YmUwMDA3NmQ5OTgwYjM0ODg1
NjlhOGEwHhcNMjUwNzI2MTYwMTU0WhcNMjUwNzI3MTYwMTU0WjAzMTEwLwYDVQQD
EygwOGFlMTdmODQyNjI1NTkzOGI2NWFkNTc4MjRiYzhiZjY1YjI3ODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZeSBo4kF4ZZ7Ny7mB7t/OSVeWdk
VJXoHg3b20Yp4d6JscmGaNmFh8JVoB6DpCl/6f06eCVnpAMtC8Jh5G6jHBXLSyoh
fC7emHBP4qKKv4ri128kLdH0h7QBDMGjtyVj6X8ZE2UhK//M8W7SX5KWcfd/rsiJ
OCGbietx8DSKchcxnQpuW2FjF290MeZF1RbcOFK+VLNM+jHJicBJ73xAug/xTgpP
EqmWTdM7X1SQbG4oD8PyJAnL7WNfJU918q4gDhOAe+9Z+pP0VgWqSCCbaF8NIXlG
YrtCz5lmTydXmRhcjk65iIgeEgzC28YYgM2UUh1Zry2D23RTUD18+rUtDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiuF/hCYlWTi2WtV4JLyL9lsnhlMB8GA1UdIwQY
MBaAFLIMy6QGwK0MW+AAdtmYCzSIVpqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2d6THBBYkFyUXhiNEFCMjJaZ0xOSWhXbW9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83NDNhNTAtZDdmNC00MmQxLWEwOWQt
N2NhOTNlY2IyMjM0LzEvc2d6THBBYkFyUXhiNEFCMjJaZ0xOSWhXbW9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83NDNhNTAtZDdmNC00MmQxLWEwOWQtN2NhOTNlY2IyMjM0
LzEvc2d6THBBYkFyUXhiNEFCMjJaZ0xOSWhXbW9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqTOXos0
bx3xHB9CiEKl8jLZX9WiA91GMD4+a2qHJNsVHpex6yaN3wBX2fs1c+OjV5nFlGtK
ldDCBDBPhd6tspNgZXt66c61QGQtcCwzANpoROab2Ngb80DR8ROdu4DKt0VzLZ5/
PVWNSuA6+4jnhBHxmsQzV9r4dV8YdveuBRNjVGDG+c+bpioVzFgH+GzjjAp95xOd
3FD1z07dD2pkLjw7XksOnFF9gHWERqN/bHa0ijqW3g2uXFvqMp3/3CkNsgj3t5LH
a1rIIl/W133ujyaY+BmA0FRCf1UufXXcZXZJCLzHMfA2mSTXZylhVXqxSgLyDls2
VyW577uWVKSs1Q==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:53:49 2025 by rpki-client