Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
File: SGbUAn3jwn6JfXKtsshth6t-WsI.mft (raw, json)
Hash identifier: wx+g9xegaIa64juP1/X3IfKGJD2GO8C1InkKm8FTAiQ=
Subject key identifier: FD:A3:32:25:4E:0A:D1:4C:15:76:CC:C1:45:BB:6D:AA:A9:8B:01:03
Authority key identifier: 48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
Certificate issuer: /CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
Certificate serial: 01984B538D0F34BFEC80D9A9FB281207033A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
Manifest number: 1609
Signing time: Sun 27 Jul 2025 10:00:23 +0000
Manifest this update: Sun 27 Jul 2025 10:00:23 +0000
Manifest next update: Mon 28 Jul 2025 10:00:23 +0000
Files and hashes: 1: MXST_7VxoAANhfz5HopBnTAfZfE.roa (hash: WwAleikgSWf+4k301L6Hz+MXSbtdCoBSAXsJKdsGXBk=)
2: SGbUAn3jwn6JfXKtsshth6t-WsI.crl (hash: /0Pom5q41kHsavdVDG+3Jj9elwbMQQh7sYOWcWclUyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:8d:0f:34:bf:ec:80:d9:a9:fb:28:12:07:03:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
Validity
Not Before: Jul 27 10:00:23 2025 GMT
Not After : Jul 28 10:00:23 2025 GMT
Subject: CN=fda332254e0ad14c1576ccc145bb6daaa98b0103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:a3:d8:55:3c:fb:de:a1:ac:5e:b8:45:78:
55:5e:80:0b:95:d0:79:78:ce:da:41:6e:5e:08:79:
b0:18:d1:9a:e8:59:f1:b8:89:fc:50:e4:42:3d:aa:
ba:cc:15:81:4b:bd:fa:a4:52:d8:75:f1:dd:00:d4:
1a:22:8f:4d:70:c8:c0:3e:2c:1f:a6:87:8d:92:f8:
96:a6:f7:f2:1f:5a:c7:90:42:82:ec:4a:ac:00:47:
65:19:83:f3:2c:12:98:a8:88:ea:1c:53:e1:df:ac:
d5:2c:77:40:da:8b:80:fa:90:5f:9b:7f:68:26:41:
23:ab:29:29:46:30:6a:b5:d2:5c:97:31:5a:e9:97:
6d:d2:d9:10:92:64:57:6e:50:91:cb:ef:b8:a4:dc:
85:ba:b4:06:d5:df:ba:81:20:06:b3:50:32:74:51:
9c:5f:cd:e1:23:42:0b:f3:fe:c6:79:f6:a9:28:2f:
c7:17:4c:cd:3a:56:69:3e:0c:3b:98:59:b3:2a:6a:
55:67:85:a8:0b:dc:cd:b9:33:a7:30:d6:00:44:c6:
00:5e:66:fd:77:03:53:34:be:50:f6:4e:1b:19:73:
1e:fc:da:68:84:92:be:26:c5:ff:da:35:9c:2d:d9:
fd:06:7d:1f:4c:4b:bb:8d:81:3f:90:73:79:f3:9d:
84:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A3:32:25:4E:0A:D1:4C:15:76:CC:C1:45:BB:6D:AA:A9:8B:01:03
X509v3 Authority Key Identifier:
keyid:48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:77:19:33:3c:70:1f:b7:b1:72:96:f7:b8:c7:60:d3:c2:41:
e0:05:34:e6:af:79:05:74:2c:23:0f:5f:8e:2d:0a:23:9d:a8:
b3:f7:c9:05:a9:e0:56:69:65:b1:90:64:86:d7:73:51:f6:8d:
76:fd:88:52:0a:49:5d:05:ed:36:ef:65:94:2e:4b:6f:4b:66:
50:41:c5:f4:ba:e7:a6:6b:69:55:5e:7a:00:a0:eb:c3:26:24:
02:b4:4f:8d:2c:df:36:88:90:9a:53:6d:89:7a:c7:ef:d1:d6:
6a:38:1f:77:cf:bc:bb:ac:53:db:1f:9a:2c:34:78:aa:89:b9:
7f:5b:39:65:4e:57:33:9d:1c:70:5d:59:4c:78:fd:fd:63:55:
e2:d2:98:2f:a0:67:1c:1e:05:ba:21:ff:7d:d1:d7:66:9e:ad:
19:b7:78:ea:ad:04:4f:22:43:b3:ec:8f:74:8c:6f:b7:c3:f1:
31:a4:45:aa:ca:59:54:e4:15:bf:9e:99:8a:72:56:c8:33:da:
e4:59:10:a0:87:41:dd:1a:fc:bc:5e:6f:a0:d4:2a:0d:5b:e6:
03:54:58:c5:41:33:b8:bd:88:03:75:47:61:58:8f:65:ac:4f:
25:af:e7:8e:64:f1:d7:98:df:c0:d5:d1:5d:9b:94:55:84:8e:
1b:0f:b3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:20:20 2025 by rpki-client