Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
File: SGwtivTOUM5vQ-ffROC1A3AKhsA.mft (raw, json)
Hash identifier: xBBY6BLDf7+Tql3cwXE3iC9nZHhA+0IMH+F0IKe2P3Y=
Subject key identifier: 68:D4:FE:A6:0F:E7:26:BA:77:7B:33:06:8C:DA:79:D2:F6:C6:6E:D0
Authority key identifier: 48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
Certificate issuer: /CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Certificate serial: 01974A43CC05E4CFDC032BA384D7A97E6AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
Manifest number: 063D
Signing time: Sat 07 Jun 2025 12:00:46 +0000
Manifest this update: Sat 07 Jun 2025 12:00:46 +0000
Manifest next update: Sun 08 Jun 2025 12:00:46 +0000
Files and hashes: 1: HfFJEDDUnETMgv_-tGTektHgOG0.roa (hash: n6Dq1dMrKgJPnJf8bwIr5DpzEFmjQ+eea+XVV9e+HTg=)
2: SGwtivTOUM5vQ-ffROC1A3AKhsA.crl (hash: I/UpLGazq5AB5PPjpTNbC+csALmdH89ciy+liUQl1dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:cc:05:e4:cf:dc:03:2b:a3:84:d7:a9:7e:6a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Validity
Not Before: Jun 7 12:00:46 2025 GMT
Not After : Jun 8 12:00:46 2025 GMT
Subject: CN=68d4fea60fe726ba777b33068cda79d2f6c66ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:5e:cf:ac:95:6c:6f:e8:f2:7b:7a:33:cb:
d5:4d:81:07:a3:71:2b:0b:41:7a:d9:f6:84:41:d9:
c1:81:ed:91:bb:d3:47:fe:09:f5:da:b7:d3:c9:1e:
47:f6:fc:ea:18:b9:55:b7:32:d4:6d:17:bd:ee:49:
e3:f8:7a:18:09:5e:71:10:ec:07:d8:f0:97:ac:12:
1d:48:fb:4d:c4:a1:51:17:aa:d3:32:0e:6d:80:39:
21:c0:1c:3c:c9:2f:b0:b8:ca:53:11:f5:bc:ce:b2:
5e:0f:91:73:6d:72:24:40:00:8e:a8:22:5c:47:c4:
2d:0b:3e:3f:a5:17:34:ad:49:a9:05:9f:44:ec:64:
06:d0:51:d8:92:90:db:50:90:3d:f7:a0:5d:5c:4a:
ba:0d:93:34:b9:03:e8:d1:bb:73:58:ae:45:f1:64:
e3:1e:0d:e9:b6:17:39:0d:70:1b:82:57:b2:03:83:
91:d3:b8:d2:f0:ff:c1:29:06:94:7b:37:d7:05:26:
88:c2:a7:bf:62:6a:31:1f:e8:c3:89:5e:ef:83:05:
6a:15:51:5e:5e:17:cd:07:91:58:55:fa:cf:17:dc:
93:d6:68:75:a4:d0:57:a0:c4:96:95:37:b7:da:84:
9a:e7:eb:1a:db:59:5d:70:b9:9f:32:c6:6c:2e:94:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D4:FE:A6:0F:E7:26:BA:77:7B:33:06:8C:DA:79:D2:F6:C6:6E:D0
X509v3 Authority Key Identifier:
keyid:48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6c:e8:61:53:6a:8a:70:41:e4:f4:32:b4:b0:af:15:93:e7:
09:11:ec:bc:3e:10:91:69:91:f3:df:65:ee:40:8f:ab:71:63:
45:8e:d4:d6:20:b3:7e:5a:e3:ad:f2:bd:1d:50:df:b2:84:19:
89:f0:c3:8c:7b:d2:63:94:c8:d4:b0:0f:b2:33:08:b6:23:67:
f1:0d:94:55:16:ef:2e:df:2b:d1:70:9b:5d:be:90:a0:2b:4e:
9e:ad:aa:d0:7e:2b:6a:af:d5:ba:ab:e3:18:80:ef:69:87:a3:
dc:71:8b:fd:23:bf:4a:25:8c:b0:f7:3d:37:ed:8d:17:38:ac:
03:f3:d2:13:76:4d:20:65:79:c2:54:0d:e9:59:b0:c0:06:f1:
75:46:08:02:fa:a7:2a:1c:63:ca:00:02:3b:e0:ff:73:41:53:
4e:78:10:98:d1:9f:6f:e4:3c:00:a8:29:df:c2:6e:f3:db:ae:
61:d8:f1:00:12:68:01:5f:4b:0c:a9:3d:12:59:09:60:83:30:
71:15:c9:af:71:b4:6d:10:3d:93:b3:f3:ac:ef:4c:06:46:90:
a9:0e:97:04:e8:7d:19:48:07:81:0f:0b:9d:f9:13:7c:3a:33:
48:29:79:8d:bc:04:b3:9d:e2:59:2c:60:58:72:74:6f:6d:e6:
8e:ac:c8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:30:31 2025 by rpki-client