Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File: SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier: f3dMyKa2lsqOMsdjP+zdFZkIg6mrqqA81lxxbaYF0Uw=
Subject key identifier: 5C:57:33:0C:D2:4C:5A:C1:62:09:F5:44:0F:BF:5F:35:B6:03:5C:77
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer: /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial: 019A06A47ABAA0F1F62C5775F721F0478D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number: 16D0
Signing time: Tue 21 Oct 2025 12:00:33 +0000
Manifest this update: Tue 21 Oct 2025 12:00:33 +0000
Manifest next update: Wed 22 Oct 2025 12:00:33 +0000
Files and hashes: 1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: CZ70+AS/Dj7M6GBWK+7nZCJAKTxgIHYmbxAYTDXVDvA=)
2: qamXgGdELqVwuCRXcGaE5fyjphY.roa (hash: XwiZQCHwX+Vwexgrkkuz5eMSgh62jyoQLxKiqhe1Bqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:a4:7a:ba:a0:f1:f6:2c:57:75:f7:21:f0:47:8d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Validity
Not Before: Oct 21 12:00:33 2025 GMT
Not After : Oct 22 12:00:33 2025 GMT
Subject: CN=5c57330cd24c5ac16209f5440fbf5f35b6035c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:b4:ad:21:ea:f5:4d:7e:14:97:e9:f5:6c:
03:b3:1d:2c:22:45:f7:5c:98:cf:82:5f:2c:1e:dd:
ac:83:8a:5f:ec:49:df:dd:af:1e:d5:f7:70:b2:ab:
85:8e:e5:f0:6d:04:bb:b8:bf:5f:60:03:cd:0a:2c:
e2:8a:c4:89:48:d2:67:79:b7:d6:2d:a9:e2:d6:fe:
dc:77:f2:f6:74:1b:b3:c5:fe:76:22:41:11:1a:dc:
57:8c:a3:f8:88:b3:8d:a3:e3:0b:f8:79:15:40:c7:
06:ae:8d:09:d5:d7:e9:2c:60:08:58:2b:6e:f0:ac:
c1:6b:9b:07:9c:99:58:10:70:9f:3d:9f:aa:2b:10:
17:5c:e9:81:43:05:44:9e:7d:e1:90:26:97:44:9b:
f0:83:01:2f:75:22:f7:97:d5:13:4b:10:a4:3b:85:
cc:89:39:c9:82:c3:6a:ef:43:df:51:50:dc:0b:0c:
ce:9e:c4:3c:e7:5c:f7:0b:00:2c:43:f4:2d:37:c3:
19:ca:6f:66:37:f9:3c:c0:67:36:a9:6c:4f:90:21:
3c:c9:1f:c1:9a:47:6b:61:ac:ea:f2:a0:85:fa:67:
8a:85:b7:78:3f:91:e6:c1:75:69:2b:ab:ca:8f:94:
9f:21:06:88:84:4e:eb:b9:93:e4:20:dc:19:df:a2:
ae:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:57:33:0C:D2:4C:5A:C1:62:09:F5:44:0F:BF:5F:35:B6:03:5C:77
X509v3 Authority Key Identifier:
keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:52:12:b4:19:2c:0e:4a:68:4e:29:ad:f2:83:6c:7a:10:e2:
88:00:c4:9b:0e:4b:c7:a7:0b:fe:6b:5a:57:22:bd:00:09:aa:
44:4b:a3:de:8e:c4:2e:c1:b1:fd:68:b9:b7:7d:85:2f:7a:47:
71:d7:4a:7a:f6:6c:a5:2b:f1:d7:a4:05:8f:f0:25:a2:8a:d1:
b0:1d:d5:72:75:1e:29:a5:41:da:71:26:8b:ef:0f:75:a2:69:
cf:8c:bd:59:28:4f:2c:41:bb:75:8d:dc:03:9c:d1:df:3e:7c:
8e:36:fa:a0:5c:01:68:a2:c2:ac:df:12:dc:68:3a:93:5f:a6:
c5:83:33:61:0d:19:8f:34:37:87:13:29:66:f7:d4:aa:6d:a6:
da:17:26:1b:4b:75:4e:38:20:d9:36:5e:9e:e7:2e:43:00:5a:
35:c3:8c:13:65:12:92:97:15:e0:27:0f:d4:ff:6a:da:54:3f:
32:2d:4d:02:6c:87:a0:d9:db:e3:37:b5:3a:17:0f:fe:19:92:
5c:82:26:25:93:0f:b2:44:10:c3:f4:7f:ae:f5:16:d0:9b:85:
ae:8c:37:f8:18:2d:1c:2f:34:3f:bd:46:f5:90:af:83:cd:f9:
e7:60:b8:6a:75:2c:ad:d1:3e:74:1b:3a:79:9e:90:2c:1f:0b:
c1:b9:c0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:58:40 2025 by rpki-client