Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
File: SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft (raw, json)
Hash identifier: btph9/+LKGNxrsMWDp3dYAW6tX1T1BqlU8V+9BEHl1o=
Subject key identifier: BF:08:3E:E8:BF:63:CA:59:0F:26:36:BF:23:16:FD:54:BC:BB:02:9B
Authority key identifier: 4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
Certificate issuer: /CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Certificate serial: 0199225542575DCC6CF0A761249B3E17CD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
Manifest number: 0C4F
Signing time: Sun 07 Sep 2025 04:00:36 +0000
Manifest this update: Sun 07 Sep 2025 04:00:36 +0000
Manifest next update: Mon 08 Sep 2025 04:00:36 +0000
Files and hashes: 1: SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl (hash: 8zgWtC9/Mds2aoZ4CwzW/iKqiL+ruZn5Q4QHy6GhXww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:42:57:5d:cc:6c:f0:a7:61:24:9b:3e:17:cd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Validity
Not Before: Sep 7 04:00:36 2025 GMT
Not After : Sep 8 04:00:36 2025 GMT
Subject: CN=bf083ee8bf63ca590f2636bf2316fd54bcbb029b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:42:7f:9e:5f:ec:5a:99:b8:2e:29:c7:da:
19:d1:55:7d:f6:7d:21:8e:a6:f4:b1:cf:06:76:09:
a7:1f:18:77:26:aa:9b:4d:cd:b5:9b:8a:1e:f6:97:
86:30:c4:80:dc:f3:80:71:c3:31:b3:ae:87:26:bb:
35:f0:14:8f:aa:88:24:a9:4f:99:39:26:59:9c:91:
9a:bb:99:92:45:ad:ce:3e:8a:cb:48:8e:1b:cd:d6:
bb:96:2e:20:01:d9:4c:18:80:a7:52:3b:f6:1c:43:
77:11:c0:4a:d9:67:72:b0:5b:41:3b:2c:58:fc:49:
77:7a:21:b5:fc:8e:f1:a5:13:75:05:5a:6f:94:41:
11:81:e5:de:55:6a:ec:88:b1:13:40:1d:68:fc:eb:
7f:56:64:a1:b4:3b:3d:b1:fc:8b:78:8d:17:33:01:
ea:2e:ce:7f:49:29:19:17:a5:85:68:6e:18:01:49:
43:5f:b3:90:b6:ac:c6:e7:3d:2d:8f:56:6e:c8:ab:
96:43:d0:3c:39:6b:fe:de:40:d8:97:d4:a3:e8:d3:
6a:18:f4:11:d7:de:b7:bb:06:d5:fd:7b:e6:19:d0:
08:1e:cc:54:70:14:fa:43:19:53:d8:48:48:9c:06:
13:87:06:63:cb:4e:11:c1:07:87:20:e0:70:f1:ac:
5d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:08:3E:E8:BF:63:CA:59:0F:26:36:BF:23:16:FD:54:BC:BB:02:9B
X509v3 Authority Key Identifier:
keyid:4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:82:e6:1e:52:6f:f3:c1:79:81:cb:d4:a4:96:04:3a:11:c8:
c4:91:fd:8d:f7:b9:92:09:e4:b5:62:fd:73:f0:b1:c2:3c:3c:
26:fa:e5:dc:54:41:fa:ff:b7:7f:48:58:ba:7a:09:fe:ae:36:
fe:14:a6:2a:25:fa:d7:bd:74:c2:fd:4a:64:70:7f:98:62:4b:
ca:0b:b4:66:42:b9:a0:87:77:0c:89:9f:c0:8b:76:07:8b:67:
4e:a7:f2:a1:77:40:4c:19:bf:db:9e:a7:b3:40:ef:95:e3:7e:
1f:cb:62:d2:89:c5:91:5d:9c:ba:80:50:c9:5c:c6:4d:07:0b:
10:fa:6b:64:0a:e7:1c:9d:bb:9a:e9:cb:ec:94:a0:0b:45:f1:
09:a6:e8:16:6d:48:f6:33:48:f1:02:9b:26:b9:40:57:69:2d:
54:48:89:bb:0e:b6:46:76:68:83:3b:9c:db:b3:1a:4f:fb:a5:
7b:75:25:db:46:82:92:7b:88:f3:86:c1:4b:3b:eb:fa:55:a1:
bb:c4:c4:ab:c1:a4:c1:a3:bb:95:fb:83:2e:2b:bd:cb:4c:a4:
ec:ef:01:f5:35:a4:73:a2:4d:0f:6d:b1:86:b5:94:a4:09:02:
a8:7f:80:86:e0:0b:8f:1f:b2:b3:29:b2:5c:1d:02:fc:1c:af:
c1:2d:50:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVUJXXcxs8KdhJJs+F82XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhM2M0MjY4M2MwODkxMzVhNDllZjFmNTY1M2NiOWNlNWVi
NzBiZTYwHhcNMjUwOTA3MDQwMDM2WhcNMjUwOTA4MDQwMDM2WjAzMTEwLwYDVQQD
EyhiZjA4M2VlOGJmNjNjYTU5MGYyNjM2YmYyMzE2ZmQ1NGJjYmIwMjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyZCf55f7FqZuC4px9oZ0VV99n0h
jqb0sc8GdgmnHxh3JqqbTc21m4oe9peGMMSA3POAccMxs66HJrs18BSPqogkqU+Z
OSZZnJGau5mSRa3OPorLSI4bzda7li4gAdlMGICnUjv2HEN3EcBK2WdysFtBOyxY
/El3eiG1/I7xpRN1BVpvlEERgeXeVWrsiLETQB1o/Ot/VmShtDs9sfyLeI0XMwHq
Ls5/SSkZF6WFaG4YAUlDX7OQtqzG5z0tj1ZuyKuWQ9A8OWv+3kDYl9Sj6NNqGPQR
1963uwbV/XvmGdAIHsxUcBT6QxlT2EhInAYThwZjy04RwQeHIOBw8axdqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8IPui/Y8pZDyY2vyMW/VS8uwKbMB8GA1UdIwQY
MBaAFEo8Qmg8CJE1pJ7x9WU8uc5etwvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2p4Q2FEd0lrVFdrbnZIMVpUeTV6bDYzQy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83NTJkM2UtOTEyNi00MWQ0LWI0NWIt
NDc5MDlkZDU3ODAwLzEvU2p4Q2FEd0lrVFdrbnZIMVpUeTV6bDYzQy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC83NTJkM2UtOTEyNi00MWQ0LWI0NWItNDc5MDlkZDU3ODAw
LzEvU2p4Q2FEd0lrVFdrbnZIMVpUeTV6bDYzQy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGILmHlJv
88F5gcvUpJYEOhHIxJH9jfe5kgnktWL9c/Cxwjw8Jvrl3FRB+v+3f0hYunoJ/q42
/hSmKiX61710wv1KZHB/mGJLygu0ZkK5oId3DImfwIt2B4tnTqfyoXdATBm/256n
s0DvleN+H8ti0onFkV2cuoBQyVzGTQcLEPprZArnHJ27munL7JSgC0XxCaboFm1I
9jNI8QKbJrlAV2ktVEiJuw62RnZogzuc27MaT/ule3Ul20aCknuI84bBSzvr+lWh
u8TEq8GkwaO7lfuDLiu9y0yk7O8B9TWkc6JND22xhrWUpAkCqH+AhuALjx+ysymy
XB0C/ByvwS1Qag==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:49 2025 by rpki-client