Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json)
Hash identifier: Cr8IGAJ9iUQggCXceea0IuMUjvEKkIu3ft2+IBzE/sY=
Subject key identifier: 10:A9:EE:0D:82:A6:38:3A:CD:4D:DA:9C:2C:09:A0:EE:BC:92:45:75
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 019923D615667A650BB4FB068B7411FE454F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
Manifest number: 06AB
Signing time: Sun 07 Sep 2025 11:00:56 +0000
Manifest this update: Sun 07 Sep 2025 11:00:56 +0000
Manifest next update: Mon 08 Sep 2025 11:00:56 +0000
Files and hashes: 1: So0J85BPs3UG_C6BWLfnLZ9c_3I.roa (hash: +ubxlITiYsafbFryEurkXW802YUQIUAFsrYygMwxezQ=)
2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: LHjmiNKDj+GtmXoyqMGMgUaL3qAdvq7F2bYAuSw8WA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:15:66:7a:65:0b:b4:fb:06:8b:74:11:fe:45:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: Sep 7 11:00:56 2025 GMT
Not After : Sep 8 11:00:56 2025 GMT
Subject: CN=10a9ee0d82a6383acd4dda9c2c09a0eebc924575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:74:c8:cb:78:d2:c8:76:fe:0a:22:1a:36:
67:a3:7c:c5:29:f0:27:da:87:dd:ea:d1:57:75:24:
e3:ee:48:f6:e4:bd:8d:b3:ec:5f:48:e2:29:ed:24:
3d:59:51:9c:79:9f:9e:01:92:4f:55:b0:18:f2:b9:
cb:c3:5c:37:23:4c:47:58:5b:60:6b:bb:1c:f4:67:
99:31:2a:1c:61:97:14:c3:7f:7e:c1:e4:0b:b8:f0:
9b:56:f4:b3:a6:b5:3c:b0:47:d9:66:d9:f2:db:f5:
30:77:c9:b3:31:32:c0:ad:60:e6:76:4c:6e:2c:e7:
8b:98:08:23:2f:d4:66:38:9a:9a:84:89:b0:17:5c:
68:51:80:a6:69:08:2e:ad:42:2f:e5:33:66:ea:dc:
41:58:4c:78:cb:cc:dd:b4:ed:25:50:bc:29:c1:e2:
9b:9d:ad:a2:28:db:45:04:1e:0d:a1:ea:df:1e:d4:
58:79:92:e7:1b:37:27:10:61:c0:9e:c3:08:77:66:
1f:04:6c:e5:f8:65:cf:b0:36:ac:9f:91:25:80:86:
e4:f9:5d:ec:fb:56:41:02:7a:e4:cd:32:01:53:56:
54:ae:9a:9e:16:a4:07:07:23:96:6b:3b:d5:49:fc:
2e:b0:15:f4:1d:0d:0a:42:d9:d4:61:bf:bd:44:8d:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A9:EE:0D:82:A6:38:3A:CD:4D:DA:9C:2C:09:A0:EE:BC:92:45:75
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:25:19:3b:0c:55:c1:5c:d9:e4:63:29:fb:60:52:ae:94:e4:
21:db:d7:36:c0:17:cf:f8:8e:7c:6a:a0:0b:6d:a0:67:17:f5:
a1:d6:4d:7d:6e:73:42:47:04:a6:6a:a4:cd:4b:e9:29:91:ba:
b9:13:d2:56:29:7b:2c:ee:ca:5d:1c:6f:da:7b:37:96:90:98:
5c:a3:ea:8a:89:f6:3d:c3:69:4a:aa:7f:e6:45:94:f1:7b:c6:
56:cc:43:21:1b:7c:12:eb:29:28:a3:6b:6c:3b:4d:80:78:74:
56:d2:c9:5f:42:87:15:c3:fd:81:71:c5:40:92:27:9a:29:82:
8e:6c:4d:05:39:dd:d9:81:94:dd:b2:3a:5e:20:63:5e:03:23:
c0:46:2d:a5:51:0c:40:eb:2f:3c:dd:63:2a:30:7b:4a:4b:fd:
7e:4c:7e:cb:b1:a9:f3:8c:7c:97:ba:7b:48:0f:eb:7a:dc:01:
62:e3:0e:dd:6d:03:11:9d:91:24:9b:34:39:ca:c1:53:04:65:
aa:54:eb:91:2c:26:37:0e:22:58:25:8b:e1:29:0b:ed:88:a4:
d5:d9:6c:b0:66:e5:de:d4:c8:15:bf:e7:fc:8e:f2:e9:28:71:
4b:5f:ac:c9:ac:39:cd:be:8a:9b:20:c8:cf:ff:3f:87:25:8e:
74:54:46:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:42 2025 by rpki-client