Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
File: SglzwfRD7EqDh6rXrKddB7b6qdo.mft (raw, json)
Hash identifier: gdDpBOZmzxKOsL6BA6GHYD4IAZA1BQfbozObMF/0ihI=
Subject key identifier: 2B:2E:EF:78:EC:AE:B0:6B:20:BA:1A:CA:35:AB:7B:B1:9A:6A:31:1E
Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
Certificate issuer: /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Certificate serial: 0198443F20BA93179D3D2DFEC09A09B43D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 01:00:44 +0000
Manifest this update: Sat 26 Jul 2025 01:00:44 +0000
Manifest next update: Sun 27 Jul 2025 01:00:44 +0000
Files and hashes: 1: EbOu1qDq7ZlN0le3FwRJ22JwUEc.roa (hash: 9DLeiprUkEPr3xfx5ncHn6G4kT050WW6ahOVAnuzCHg=)
2: SglzwfRD7EqDh6rXrKddB7b6qdo.crl (hash: ZtZT8LqDQa8Qatpo+98M8QOBRDhnE+UbLBItHP2Ahn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3f:20:ba:93:17:9d:3d:2d:fe:c0:9a:09:b4:3d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Validity
Not Before: Jul 26 01:00:44 2025 GMT
Not After : Jul 27 01:00:44 2025 GMT
Subject: CN=2b2eef78ecaeb06b20ba1aca35ab7bb19a6a311e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4e:87:25:56:3a:fe:92:a6:e6:cc:43:a3:f4:
41:b9:d2:26:21:ea:59:f3:d6:3c:88:a0:af:db:f8:
a6:8c:db:f5:f1:0c:5a:70:9b:18:95:bd:ee:05:be:
55:a5:4e:90:ff:20:18:47:d3:d5:c3:86:ae:86:dc:
69:a2:2e:48:df:21:e6:5a:a1:c5:85:db:0c:55:7a:
e8:a7:1d:a3:05:e3:9a:68:3f:df:9c:3a:c0:9c:34:
2f:b8:c2:6d:bb:d3:1c:73:e5:be:88:30:25:ea:36:
bc:8a:d6:a0:44:49:27:dc:e5:de:de:6b:51:75:aa:
b9:5b:10:ba:08:89:34:a8:ba:1c:16:db:a7:29:0b:
a6:48:65:f0:bd:0e:02:fc:e8:b5:1e:13:59:34:9a:
8d:68:00:db:58:79:e2:e7:5e:47:90:fe:d2:82:10:
ca:11:3b:b0:e5:c9:3a:21:d8:33:c1:04:81:7f:59:
84:49:da:95:ec:9f:f7:2b:fd:53:64:b6:3f:bb:37:
a8:14:74:5a:17:23:3e:0a:c7:3b:b9:90:c3:f6:f9:
46:09:50:2d:bb:18:e8:84:e0:a2:1d:5d:44:61:2f:
9e:f1:c0:d3:9f:bf:fe:e9:58:f5:2c:9d:7f:82:47:
88:0d:24:4b:4e:19:c4:56:5c:3c:32:30:dd:8e:58:
86:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2E:EF:78:EC:AE:B0:6B:20:BA:1A:CA:35:AB:7B:B1:9A:6A:31:1E
X509v3 Authority Key Identifier:
keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:59:d2:67:28:bd:b7:6a:ec:30:a7:5b:ea:7c:56:23:fc:ac:
d5:6b:ff:3e:03:da:fd:66:7c:c5:9d:79:b1:47:b9:13:1f:04:
6d:de:36:4a:81:d6:18:f8:1c:0f:ad:6e:5e:62:16:9b:e5:16:
a4:cc:cf:da:ad:1e:79:be:fd:4d:88:bd:50:e9:c5:25:76:01:
76:86:bb:53:ed:f2:b8:f5:37:23:0c:fc:98:04:0d:44:db:e9:
37:15:01:82:9b:64:07:a6:a9:42:01:18:d6:94:04:c5:47:d3:
f7:ef:3f:bf:7d:25:a8:ee:fb:19:02:66:77:a1:4e:c9:53:87:
94:1d:f0:8f:a5:f5:70:ac:ce:cf:26:2d:06:aa:32:66:e0:ee:
16:1d:79:38:b4:97:21:c9:74:e2:24:ae:c9:26:93:39:17:20:
45:76:bb:29:89:fe:c7:08:c3:87:53:d1:d0:ec:e4:cf:2c:b7:
14:e3:d9:7b:2a:40:49:93:46:83:0b:fc:83:ac:80:67:44:48:
2f:de:91:4b:8d:6a:4e:f0:e7:ba:0b:a8:30:c4:c3:81:dd:ab:
5b:f8:9b:5e:f9:9c:63:04:2f:c0:c6:29:d9:8f:fa:de:1a:a3:
24:76:7b:d2:a9:56:a4:fb:b7:59:49:23:12:46:ff:a3:b1:7a:
ac:3c:84:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:53:19 2025 by rpki-client