Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: G8+7yoC7hgnyk8m72hWXbFHR2gTmGTRCSUzV3Agh7d4=
Subject key identifier: 96:C8:83:BD:E7:1F:3C:65:BB:8E:B0:6A:27:45:D6:C3:0D:EA:2E:34
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 019A71B9354EF42FE2013B6F91C4C17E8D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 134C
Signing time: Tue 11 Nov 2025 07:02:34 +0000
Manifest this update: Tue 11 Nov 2025 07:02:34 +0000
Manifest next update: Wed 12 Nov 2025 07:02:34 +0000
Files and hashes: 1: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: XeRiJWjUcFMqWmg0leSTGRDxnlNddbPev8qQVYw6yDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:35:4e:f4:2f:e2:01:3b:6f:91:c4:c1:7e:8d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Nov 11 07:02:34 2025 GMT
Not After : Nov 12 07:02:34 2025 GMT
Subject: CN=96c883bde71f3c65bb8eb06a2745d6c30dea2e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:dd:77:ad:45:6a:eb:d5:83:9e:fd:74:22:
13:04:7f:1d:74:d1:3c:ef:f7:45:01:0a:4a:a8:3c:
1e:37:1c:f7:c8:ce:c3:58:10:da:1f:4c:cb:4c:1e:
b2:40:12:60:b5:31:9f:83:cf:a3:d1:c7:1f:35:26:
85:ac:c9:fa:b1:f6:1a:a5:d9:56:5d:62:f8:39:2d:
6c:b6:2d:f9:2d:28:cd:e1:4d:c6:07:f5:72:4e:61:
a0:17:cb:21:9a:e3:39:60:ca:80:a0:5a:4b:6f:e6:
32:ae:7b:16:1c:99:e4:79:73:74:dd:eb:ad:c5:64:
ac:62:3c:c0:97:34:fe:23:8f:93:63:a0:64:47:fb:
82:77:68:8e:5f:89:3d:4e:5f:39:5f:f1:fb:37:82:
ec:24:e5:2d:0b:0c:96:dd:69:2b:4f:44:00:13:7e:
d3:9a:9c:e8:81:4b:76:d8:1d:c9:8e:f2:ff:a5:c3:
6d:83:6a:bf:a0:8f:37:16:4e:34:e4:a8:e3:72:3b:
14:e1:7a:2a:8c:30:a9:57:80:68:b1:0f:75:93:a1:
55:8c:1f:79:06:66:38:4d:ae:20:8a:11:85:77:6b:
5d:a7:47:77:e2:ef:ea:f4:25:46:65:f2:c7:45:2c:
7e:b6:34:7c:6c:72:48:47:ef:3f:6b:50:94:2d:30:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C8:83:BD:E7:1F:3C:65:BB:8E:B0:6A:27:45:D6:C3:0D:EA:2E:34
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:eb:cd:ed:af:d7:29:99:fa:f9:01:a4:ba:fb:dc:dc:8e:d9:
f2:7e:97:8a:3e:f3:e1:81:3b:cd:f7:4d:28:d5:aa:b6:7d:41:
7d:65:44:b4:ab:e2:b4:f6:b4:23:37:60:27:98:9d:08:98:99:
c3:e4:f4:b3:40:db:19:6f:6c:31:9d:7d:4d:a2:53:91:a0:3b:
d6:6d:34:d0:b3:2e:39:b9:51:52:d3:e6:4e:e0:f7:36:4b:34:
9f:da:72:63:98:fd:d3:94:22:c3:d5:3e:3a:cb:b9:76:db:f7:
1d:ff:6a:42:b5:08:cf:31:8d:1d:63:43:f4:b7:db:39:20:b9:
2b:de:ac:ca:71:4e:92:14:3f:a2:dd:28:22:91:96:37:1d:2e:
56:f0:20:17:ef:d8:54:7b:4d:18:2f:de:e3:c1:15:52:3f:16:
f3:aa:8a:ee:60:c0:df:31:1c:08:d7:91:03:7e:53:ae:31:17:
9b:98:04:37:23:49:ab:d0:57:1c:52:66:c9:17:37:57:9c:9f:
98:99:cd:8e:bb:3e:52:08:8a:eb:0b:d4:f9:6a:d5:07:0c:7e:
27:b1:84:e7:f6:75:48:e1:6a:4b:51:05:54:f6:7b:1c:7b:34:
1c:73:60:f1:9b:1f:8f:97:2f:1b:1d:98:d7:c3:8a:7c:de:27:
61:d5:ce:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:17 2025 by rpki-client