Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: vSgm13RncSmLrGFT8JQBg3IBxKtoDvPJK6bvRjRbE6g=
Subject key identifier: EF:6F:A7:28:F5:CC:18:4E:6D:0C:C6:93:40:36:75:FE:F9:40:FB:1E
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 019933807A3F82F0C4127C7DBA349F34DF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 0DAE
Signing time: Wed 10 Sep 2025 12:01:21 +0000
Manifest this update: Wed 10 Sep 2025 12:01:21 +0000
Manifest next update: Thu 11 Sep 2025 12:01:21 +0000
Files and hashes: 1: 9mLiZaXlrMh-SLMVWKWdzKIZreg.roa (hash: JOVJ8r+m2mKwk5/18fVmvxGEIuiFVBEZYaB5XFvwZO8=)
2: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: 27gsB4KUscRxe7PZcQqEsdyWaMr/BkCImpRgM3iHz5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:7a:3f:82:f0:c4:12:7c:7d:ba:34:9f:34:df:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Sep 10 12:01:21 2025 GMT
Not After : Sep 11 12:01:21 2025 GMT
Subject: CN=ef6fa728f5cc184e6d0cc693403675fef940fb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:d6:4c:5c:5f:c0:de:ab:0c:26:fc:58:2d:
de:04:51:16:b7:2f:70:69:63:91:94:d4:f8:69:db:
77:a0:cb:f8:da:3e:ee:19:53:f5:10:b5:26:73:77:
93:b5:89:fa:eb:ca:92:38:55:b8:d9:64:47:cc:a2:
2a:f7:c5:c9:0e:3b:80:3a:6b:66:0c:57:be:05:e8:
91:cc:a9:06:44:00:f0:8e:d1:bd:04:aa:84:88:bc:
e2:1d:ab:44:80:27:19:b9:c0:e2:b6:db:1f:f4:ba:
db:6e:d6:05:63:70:be:23:01:57:b5:d7:26:b8:e3:
0e:99:c2:36:84:74:db:6e:19:ba:68:c8:69:88:2d:
35:eb:7b:2a:15:90:15:4f:73:97:ba:8c:ab:46:c9:
43:9c:51:44:16:cf:8a:a5:4f:cb:1f:c9:5a:00:18:
1d:3d:59:18:25:1e:a9:ce:da:e3:ea:0a:d2:46:a3:
8c:04:2c:cb:18:51:6f:fd:6a:0f:92:1b:9f:32:2f:
75:74:70:95:a6:07:62:e0:53:a3:76:2a:54:4d:e5:
1c:a6:97:d4:ae:53:8e:f0:17:f5:76:38:b3:2a:c2:
68:bb:f2:20:c7:45:29:9f:13:ec:3a:04:dc:d9:d4:
e0:3e:fa:4f:ec:22:da:73:ee:38:de:4e:ac:65:ef:
8c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6F:A7:28:F5:CC:18:4E:6D:0C:C6:93:40:36:75:FE:F9:40:FB:1E
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4d:22:9a:8a:df:6d:48:bb:74:7c:88:4f:47:f1:19:51:50:
75:35:30:d0:28:19:95:27:c4:d3:e1:8b:26:0a:a1:b0:10:56:
f7:6a:06:07:f2:b0:04:88:93:f3:30:ff:c7:ef:0e:d5:ba:4d:
ae:5b:63:ed:c1:d1:4a:7b:25:82:5b:d5:b1:27:c0:16:2d:0f:
3a:6f:e2:ea:ce:33:60:17:9a:d7:c2:9a:ae:f6:f9:ff:67:ae:
6c:0d:d4:4a:b2:69:1b:93:ec:58:69:2f:fd:35:5a:00:b0:32:
8d:e0:56:f1:11:ac:b5:10:97:27:34:bd:30:75:b1:03:1a:a2:
56:da:a8:0e:46:98:81:d8:b5:31:da:7b:b7:d0:05:9a:3c:e1:
a7:05:c3:69:ff:d6:87:0b:a6:d9:ec:cb:0f:4a:82:35:fd:de:
1c:ca:bc:ba:b0:f1:f7:53:5f:22:bf:1d:db:71:94:16:0b:5c:
da:24:40:24:2e:18:14:44:d3:5c:2f:17:c1:79:1a:9a:b6:7e:
a6:b6:62:da:a7:80:13:f9:42:67:bc:4a:4b:fc:be:20:63:73:
f9:ec:92:0d:e0:2d:a9:f7:c9:3d:6c:19:fb:6d:4c:80:d3:da:
13:93:b8:7e:1a:c9:85:f5:87:b8:e3:49:13:f8:de:0a:97:d8:
55:57:ad:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:16:43 2025 by rpki-client