Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: maoyj2JNAY6nU5de17MeyalVoRI6AL4iY/tWY8m4KUk=
Subject key identifier: 79:28:36:A8:FD:7D:EC:11:05:54:30:66:47:61:C4:D8:4E:7B:D2:E2
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 01974E58063F7461775E81C8F1E6D731A246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 11AC
Signing time: Sun 08 Jun 2025 07:01:20 +0000
Manifest this update: Sun 08 Jun 2025 07:01:20 +0000
Manifest next update: Mon 09 Jun 2025 07:01:20 +0000
Files and hashes: 1: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: K1vBnWUD/1XbSLOFLajxYcXT9F+uyFk1E8AwqbULkSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:06:3f:74:61:77:5e:81:c8:f1:e6:d7:31:a2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Jun 8 07:01:20 2025 GMT
Not After : Jun 9 07:01:20 2025 GMT
Subject: CN=792836a8fd7dec11055430664761c4d84e7bd2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:16:6d:67:86:fd:a2:f7:9d:3c:3a:e4:e8:
e2:89:eb:f2:40:20:5d:22:43:7f:07:00:33:21:3e:
63:2a:f7:fd:57:72:d5:99:06:6d:85:18:ac:d0:b1:
93:2a:c6:f6:27:a5:2f:44:90:25:2c:72:4c:d1:09:
f8:2a:ac:e6:74:53:ea:fa:cd:20:8d:0f:cc:d3:31:
d2:fa:4b:d5:73:1a:b3:3d:da:56:7f:8f:02:a8:ae:
c9:12:e4:5e:94:99:c5:cf:07:33:95:02:c6:3e:47:
e1:26:c0:63:f9:df:ac:fc:ff:63:67:96:46:60:5a:
f7:c9:b4:b3:a5:39:89:5d:41:9e:02:fd:88:19:09:
2e:c8:30:f5:13:6e:a5:8e:b6:c6:79:54:55:03:2f:
41:2b:7d:40:bd:05:c9:01:8f:00:d2:fd:c4:a0:4d:
76:a9:be:b8:7b:a2:11:6e:d8:e5:40:3e:03:1d:f2:
ea:a7:34:4b:49:e0:a8:45:1f:85:f2:64:24:9f:7f:
10:8e:cb:02:19:2e:e6:63:3c:a4:08:47:33:e4:84:
2a:7d:0d:e6:94:d4:2a:cf:fa:3b:8e:0b:bd:e6:8e:
57:ed:d9:13:63:a8:88:a1:fe:08:dd:e2:e9:52:db:
2f:df:c7:a7:50:9a:57:87:e6:68:67:f1:7a:15:72:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:28:36:A8:FD:7D:EC:11:05:54:30:66:47:61:C4:D8:4E:7B:D2:E2
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9d:d3:8d:d6:1a:eb:b9:68:70:b8:e1:37:6c:30:4f:b5:05:
38:8b:25:72:c1:7a:5a:3b:55:aa:73:3a:c0:82:39:79:56:36:
53:9e:84:50:28:75:b9:a4:77:44:35:eb:c7:fc:80:8e:55:b6:
42:38:86:1e:cb:64:08:01:a8:5c:fc:3d:ad:89:3d:89:f0:28:
cc:44:93:d9:d7:fe:41:5e:ae:6b:db:fd:bc:71:fb:1e:a5:ac:
b8:1b:9a:fc:25:26:ae:d0:5f:4c:b5:73:9f:9f:00:bc:b5:b7:
15:ab:92:50:d0:e1:c4:66:d0:58:24:fb:38:12:00:54:d9:41:
64:90:95:76:03:12:79:0d:1d:31:62:d1:3a:91:75:3d:6b:9e:
cd:f3:c8:33:06:8c:f3:88:7d:73:13:55:1f:17:4d:85:fe:00:
44:3e:f3:66:71:e6:91:b2:cc:ab:3e:dc:32:26:a7:a2:bc:c9:
76:7d:a4:1a:20:f8:e7:cc:a0:24:eb:b0:36:71:1b:ae:ef:c0:
83:e4:ab:e5:d1:65:29:d6:57:47:57:27:17:31:71:64:84:6b:
dc:be:31:9c:e4:7f:36:58:55:82:6f:6f:5f:52:22:54:d6:89:
b2:20:2d:a1:8d:57:d8:42:16:e2:53:c7:7a:3a:51:c7:ac:b1:
6c:23:37:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:58:56 2025 by rpki-client