Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
File: SGiJzk60_XR4GCSDld5fuT0f4UI.mft (raw, json)
Hash identifier: rzR18RskepYXpS9a0aFojBkwwPGwYCRdX1jKq4RHfzo=
Subject key identifier: DE:5C:C0:D6:71:89:81:54:AA:5C:EC:4F:F0:F0:35:76:15:C3:08:67
Authority key identifier: 48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
Certificate issuer: /CN=486889ce4eb4fd747818248395de5fb93d1fe142
Certificate serial: 019923D5BCA8D3BCC72D2B399DE1D7C962C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
Manifest number: 01EF
Signing time: Sun 07 Sep 2025 11:00:34 +0000
Manifest this update: Sun 07 Sep 2025 11:00:34 +0000
Manifest next update: Mon 08 Sep 2025 11:00:34 +0000
Files and hashes: 1: FfqUAa7-KKr54JP8aBzk5nNv21g.roa (hash: PY8USvms98PE+f6r3SXsrpm0zwpXY4+1N+NCv5EFelE=)
2: SGiJzk60_XR4GCSDld5fuT0f4UI.crl (hash: i0rv6sggOjTHqPzwi9g5E8yihM2EXpobIjm4wNY0ADs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:bc:a8:d3:bc:c7:2d:2b:39:9d:e1:d7:c9:62:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486889ce4eb4fd747818248395de5fb93d1fe142
Validity
Not Before: Sep 7 11:00:34 2025 GMT
Not After : Sep 8 11:00:34 2025 GMT
Subject: CN=de5cc0d671898154aa5cec4ff0f0357615c30867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0a:b2:7e:12:37:70:a7:39:cd:34:bd:1d:66:
f6:98:cc:c6:0e:c6:4b:d6:5c:eb:6a:19:62:fd:03:
bb:69:db:42:1b:ce:5b:27:ab:91:29:50:0c:ca:0d:
fa:c3:b5:3a:8f:ba:1b:08:93:7f:4c:4d:75:5d:5a:
ec:16:ef:a9:eb:2b:dc:f6:85:c1:fe:c8:55:e5:75:
6b:29:b2:58:3c:a4:4e:b9:45:00:62:a1:55:ac:37:
33:09:9d:1b:a9:38:f4:4d:65:11:4c:38:4b:f1:56:
03:59:17:e5:53:2d:82:76:32:c4:bf:62:b8:d3:d5:
68:f7:cc:77:b4:b0:69:7e:76:ec:53:9a:3c:89:5d:
51:ee:e0:aa:85:e3:aa:05:02:db:3f:33:da:1f:3f:
7d:34:89:eb:8f:a0:a3:a1:a5:aa:d9:8b:ab:6d:7d:
c2:a9:9d:e1:b3:40:c6:d4:34:95:f4:82:35:2a:4e:
49:77:54:41:16:b6:e0:f2:18:4c:21:84:43:7c:1a:
ec:38:7e:cc:8a:fe:da:43:28:55:24:95:67:a5:92:
2e:8d:f7:a5:4c:30:bd:dc:9e:6f:0d:1b:50:bd:bf:
ff:a7:97:c0:79:06:28:c5:7c:95:74:c9:ff:52:35:
04:f2:48:78:41:93:60:7f:cb:6b:33:2a:fc:6b:82:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5C:C0:D6:71:89:81:54:AA:5C:EC:4F:F0:F0:35:76:15:C3:08:67
X509v3 Authority Key Identifier:
keyid:48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9a:30:3b:16:cc:09:e1:c4:d2:31:0f:1f:02:f1:a1:54:53:
21:cf:7e:4e:89:eb:16:46:5e:3b:3d:c0:5c:64:dd:43:b4:c4:
16:fb:51:fd:9e:a1:f5:97:10:d7:fc:8e:bb:4a:b4:07:5d:69:
d3:99:45:27:17:27:03:6f:b0:87:d7:59:55:65:8f:db:0f:a0:
ca:d0:99:08:2a:97:e2:12:47:33:57:44:de:fb:05:48:d9:09:
ca:9f:72:c6:9d:48:c7:fa:cc:5d:be:2f:be:2b:08:08:6d:48:
84:3c:65:0f:95:c4:7a:4f:1f:8c:dd:da:bc:56:4a:40:6b:0e:
dc:0e:36:ee:d5:24:1c:f4:89:94:d3:3c:3e:2e:07:01:5c:e5:
0a:9f:74:7a:d8:61:49:9e:76:3b:05:46:ea:39:79:ad:30:ab:
c3:be:ab:7a:53:96:44:8c:57:8d:eb:18:32:63:e6:8b:d7:d2:
87:f1:68:2b:f5:b6:cd:87:6a:d4:7f:e2:4f:2f:f8:d6:e2:5a:
05:da:d1:54:c2:15:92:75:32:ec:c6:74:7b:17:11:09:c7:f4:
83:be:c7:76:ba:1b:f9:9c:50:e0:a4:ae:f7:86:95:02:78:84:
88:01:90:3c:00:6a:0b:a1:0d:7f:9e:a6:9c:5c:80:64:bc:02:
6b:22:b3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:27 2025 by rpki-client