Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
File: 1SGSgT0i76BLy7JOC_D-NNjfukg.mft (raw, json)
Hash identifier: 4UDU8IGYeaeWYws9EcotMI/Y4yDgtAryFLY6p6DHH2g=
Subject key identifier: C9:B7:7A:B8:5C:67:C6:B9:C4:B2:E6:32:AC:E6:89:33:96:D1:E6:A1
Authority key identifier: D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
Certificate issuer: /CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Certificate serial: 019922FAE92878AEFD0627F6706C8BAC1C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
Manifest number: 0294
Signing time: Sun 07 Sep 2025 07:01:32 +0000
Manifest this update: Sun 07 Sep 2025 07:01:32 +0000
Manifest next update: Mon 08 Sep 2025 07:01:32 +0000
Files and hashes: 1: 1SGSgT0i76BLy7JOC_D-NNjfukg.crl (hash: V/moewbKf+wqulWBRXhyRUlI+W7EuRoV2EpEoOerKiQ=)
2: eDQ7Rqa20D_hI8gI5USdLHd-gF8.roa (hash: r3EJNmKQgbbo4j5pe3uk2ZFcWeVkHRAZ7TxCivW3QgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:e9:28:78:ae:fd:06:27:f6:70:6c:8b:ac:1c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Validity
Not Before: Sep 7 07:01:32 2025 GMT
Not After : Sep 8 07:01:32 2025 GMT
Subject: CN=c9b77ab85c67c6b9c4b2e632ace6893396d1e6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:b2:29:84:75:8b:44:01:83:a4:ea:44:ca:
68:b4:f9:b3:a6:b2:45:be:80:15:b3:00:40:4d:db:
75:3c:2b:f5:53:fd:24:75:04:fe:bc:5b:0e:54:8d:
d8:4c:c5:0c:24:66:74:3e:ec:21:c4:9b:e6:d2:36:
5f:3c:b6:4b:b8:c6:a1:4b:1c:dc:09:c3:37:0b:b6:
35:df:af:9c:8e:0a:ac:d7:f0:cd:a9:23:1f:5d:4b:
f8:2b:b6:10:7a:0a:7a:18:87:cb:bb:68:b8:5c:88:
92:9d:51:f3:df:2a:ce:ca:25:d5:cd:db:f8:52:a5:
06:a8:3e:92:78:3d:1d:5a:90:52:f2:7d:c0:1b:96:
fa:01:7d:b1:1d:d4:4f:16:37:14:74:83:bb:56:f4:
a3:9c:de:7b:04:2f:46:a6:3a:3d:1f:2c:d1:92:4e:
81:3e:aa:ad:06:d4:37:03:7b:cb:7a:3c:cf:c8:f4:
74:81:8b:e2:95:fc:48:7e:b7:b6:5c:80:80:3e:f0:
0b:cf:92:d1:d4:5f:ab:09:00:f6:a7:4b:ee:fa:d9:
78:1f:78:c7:67:38:57:3e:9f:84:72:14:c6:67:17:
56:03:a9:ef:d4:11:12:2e:5c:dd:b8:8d:af:d7:e3:
6b:5d:41:8b:58:03:98:fb:0e:9e:39:7a:ba:9e:1f:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B7:7A:B8:5C:67:C6:B9:C4:B2:E6:32:AC:E6:89:33:96:D1:E6:A1
X509v3 Authority Key Identifier:
keyid:D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c0:5c:f1:42:cc:db:c9:f5:16:f9:85:4a:94:61:e3:b2:06:
4d:53:5b:a8:16:65:11:bb:8e:30:d8:72:7d:64:a1:37:b3:12:
20:06:94:ac:43:9a:fb:03:ee:9f:73:2d:b8:d2:3a:5a:97:e6:
dd:de:a9:3c:3c:67:fe:02:44:2c:c5:f5:d9:b4:f1:e9:39:9f:
38:28:0d:7c:06:14:20:9b:67:93:25:00:97:61:1f:56:b8:bb:
cd:6a:ae:b0:39:e7:d9:b7:54:1b:2c:f7:82:56:73:ad:d2:bf:
d2:4f:b9:65:85:89:3e:85:ac:d8:73:a8:5f:30:8f:91:06:3b:
73:3c:21:c3:c2:23:2e:7f:85:bc:e7:61:83:fc:b9:27:ec:ce:
a3:bb:3f:46:b9:00:fc:4e:00:5b:af:96:6a:c9:72:43:1b:13:
ee:d7:b4:14:6a:25:1c:9e:f4:78:d4:4a:f4:43:10:d9:d6:52:
9e:2f:ad:76:56:d8:1d:03:0a:a2:b1:04:3e:b9:77:f4:b9:5a:
4e:40:35:76:8d:fa:a0:78:37:13:8b:ee:6d:c8:33:71:2d:46:
ac:3d:2d:42:c2:56:c5:92:a3:6f:43:02:22:35:6b:9a:70:e9:
b7:50:8a:4a:92:53:f5:a3:b8:a7:12:00:37:2b:ce:f3:8d:1d:
b5:3e:80:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:47 2025 by rpki-client