Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
File: SGiJzk60_XR4GCSDld5fuT0f4UI.mft (raw, json)
Hash identifier: lhcewQbDcvwSzuevYARX/q9BIPNoGmLl+GAb1vXajGk=
Subject key identifier: 80:00:40:7D:9C:46:57:E0:D8:2E:C0:B7:54:87:81:0E:26:19:07:AC
Authority key identifier: 48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
Certificate issuer: /CN=486889ce4eb4fd747818248395de5fb93d1fe142
Certificate serial: 01964FA3408CC46CE54C519888425C7890AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
Manifest number: 78
Signing time: Sat 19 Apr 2025 20:00:20 +0000
Manifest this update: Sat 19 Apr 2025 20:00:20 +0000
Manifest next update: Sun 20 Apr 2025 20:00:20 +0000
Files and hashes: 1: FfqUAa7-KKr54JP8aBzk5nNv21g.roa (hash: PY8USvms98PE+f6r3SXsrpm0zwpXY4+1N+NCv5EFelE=)
2: SGiJzk60_XR4GCSDld5fuT0f4UI.crl (hash: JBVn/u2zltUsTXl54gc57uiondfiXaA/klxYbP/8Ido=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:40:8c:c4:6c:e5:4c:51:98:88:42:5c:78:90:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486889ce4eb4fd747818248395de5fb93d1fe142
Validity
Not Before: Apr 19 20:00:20 2025 GMT
Not After : Apr 20 20:00:20 2025 GMT
Subject: CN=8000407d9c4657e0d82ec0b75487810e261907ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:b6:5e:a1:b1:57:55:ef:fd:a4:fe:02:1a:
0a:35:a0:43:c2:57:41:54:ab:7b:f0:de:15:26:bb:
dd:b9:28:1d:b5:d9:fd:48:f4:24:f5:8d:89:02:7a:
6f:d4:4b:2e:39:6c:e4:cd:d2:4d:98:ff:b8:dd:cf:
84:67:6c:d7:4b:66:5e:00:34:f2:a8:51:cf:59:17:
2e:14:9e:85:d8:a7:f1:e6:75:97:27:53:ff:be:45:
c6:17:6f:00:4c:c1:69:2b:c4:1c:8b:3b:f8:f4:9b:
3f:e5:ea:7c:02:b2:9b:3e:bf:27:e5:75:5f:41:83:
0c:c8:93:e8:3a:25:58:83:02:27:75:6b:ab:ed:0a:
0c:a2:ca:14:29:e2:96:47:f7:53:89:03:57:52:fd:
5e:77:31:73:d0:aa:72:21:ce:40:02:31:69:ff:7f:
0d:98:63:d0:4f:4b:b1:87:83:18:a0:72:cd:16:97:
8d:a3:10:0e:4a:59:59:46:99:3d:07:08:fc:7c:ad:
e2:96:73:37:b5:ab:02:9e:1a:02:d0:67:92:b2:ff:
ad:85:d1:61:d8:f9:ee:e0:b9:7c:e6:6c:33:a5:87:
26:b6:d6:66:c3:bc:25:35:c1:3d:ff:41:b1:00:2b:
39:1e:f4:81:fe:c1:af:2e:c7:9b:99:19:22:82:cb:
8a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:00:40:7D:9C:46:57:E0:D8:2E:C0:B7:54:87:81:0E:26:19:07:AC
X509v3 Authority Key Identifier:
keyid:48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c8:47:cf:c9:cd:9c:25:77:48:54:e4:da:43:b9:d5:f1:3e:
12:06:ac:c7:a8:1b:48:b7:77:15:98:c8:c0:c6:87:14:e8:a2:
5d:97:a0:e7:ed:89:5d:59:4f:08:8b:5d:ba:cb:36:b2:2f:60:
63:46:5f:d8:09:be:3d:42:d0:68:dd:16:16:48:36:e8:37:7f:
f5:d6:b3:73:d2:3d:8c:d6:dd:b8:29:a5:49:e3:cb:bf:b6:c2:
b9:f9:c0:bd:fb:82:68:20:a4:75:b5:a2:e9:4f:b0:d6:35:91:
62:61:6c:fa:23:95:e5:94:b1:e9:19:c6:88:1e:32:ec:20:eb:
7f:af:45:9c:a8:5b:fd:66:cc:c3:8d:55:d0:f7:c6:61:b6:a7:
de:7a:56:25:69:1e:31:81:d1:be:49:61:a3:aa:47:ca:44:60:
a0:ad:e6:d5:65:f6:73:37:7a:12:14:25:87:fd:4e:ac:a7:0b:
3e:d6:2f:05:27:dd:f7:b8:df:ff:ee:03:22:df:13:8b:fd:5f:
fe:27:0b:b7:24:46:42:64:ea:f6:55:4b:ee:98:1e:90:c3:5a:
29:de:9d:29:74:0d:54:c7:f5:53:7f:91:bc:0b:32:2c:25:47:
44:e5:bb:f5:bd:e2:20:be:20:46:cc:ee:be:98:ba:04:f6:d5:
d3:9b:6f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:23 2025 by rpki-client