Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: Z/uExqZHFvbDd9o20QLzRgeaNXFqB6ah0jbuJsXJ0XQ=
Subject key identifier: 46:6D:FF:4D:FA:41:26:EA:79:0C:23:9D:4E:2E:7F:3A:08:F6:62:A0
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 01988DD937F1899C9987054C42AFB743D4E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 08:01:19 +0000
Manifest this update: Sat 09 Aug 2025 08:01:19 +0000
Manifest next update: Sun 10 Aug 2025 08:01:19 +0000
Files and hashes: 1: 44FBBoaP1hY4HlkyJxoeqw82Ez0.roa (hash: Ij/VEJNQIjQvvNrHY8dRfRHlSxSYc7lDRay7etVRtiI=)
2: Vwp4sUHwufYyD-bPptLzOvd6WdQ.roa (hash: YWIoCXXcHFga0/3pa1NcRYE9BSy/d2UDiqjf+NsI2BE=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: OATkBbtCDGt3VoSqZk3t/d7SV3dL/OBEck0BwNOVZ4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:37:f1:89:9c:99:87:05:4c:42:af:b7:43:d4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Aug 9 08:01:19 2025 GMT
Not After : Aug 10 08:01:19 2025 GMT
Subject: CN=466dff4dfa4126ea790c239d4e2e7f3a08f662a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:06:28:b6:a8:75:52:7f:ed:4a:20:6c:8f:
8f:24:93:a5:1f:73:38:8e:50:94:32:71:c7:6c:a6:
c2:74:b6:34:35:78:59:4c:74:ed:9d:47:ec:49:0e:
01:7a:73:1a:5d:33:bd:4d:15:f5:9b:48:38:3b:30:
f7:9d:c1:5d:d3:25:de:4e:2a:76:d6:ff:f0:cb:a4:
0a:d4:65:c0:55:50:36:17:70:9e:5a:4d:8c:3d:0f:
c5:34:fe:73:24:ba:b6:ba:dc:2c:dc:cd:77:49:49:
57:84:10:4b:3c:23:f0:fe:95:d5:99:ba:16:05:4a:
ac:ff:aa:ca:70:99:8f:68:86:b7:e7:2b:da:c3:9c:
de:3b:72:bb:89:e7:8a:c6:93:63:8c:a4:45:15:ac:
37:6f:c0:23:0b:cb:6f:df:d5:f6:fc:76:bc:34:ea:
d9:0a:fa:2e:6f:57:e0:c0:b1:06:06:23:aa:b4:39:
65:0a:d5:c0:fc:22:7a:f6:f1:fd:b7:6e:60:7b:00:
3c:9b:1c:f8:27:8c:1c:93:66:ed:4c:c1:40:da:a9:
9c:26:f4:95:6a:c7:42:5c:73:fe:a6:4f:db:a0:0a:
32:25:5b:66:23:0b:49:f5:90:22:d4:7e:86:2a:35:
bb:30:95:82:32:ab:04:82:69:f4:e8:45:5f:1b:2f:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6D:FF:4D:FA:41:26:EA:79:0C:23:9D:4E:2E:7F:3A:08:F6:62:A0
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:1a:ff:23:47:8d:01:98:3c:60:f1:ad:84:25:8e:22:8d:fd:
7e:4a:78:9e:9d:55:31:7b:6f:e9:59:3f:7a:ec:5b:d9:f1:cb:
98:c5:52:db:29:00:a0:48:a4:7d:8e:3c:3b:33:b0:e1:c3:4b:
d7:11:52:89:86:fa:14:35:29:ff:35:8b:12:03:8a:aa:1c:dd:
e9:ce:c6:b7:0b:d2:f4:61:8f:a7:86:8a:04:bb:1f:ca:a2:43:
53:4b:67:a9:23:90:be:30:a2:df:4b:5d:28:bc:8b:06:e7:9a:
1e:fd:17:65:40:6e:12:b9:d2:bf:14:32:cd:8f:e1:9f:6d:c1:
0c:d7:af:f6:19:1a:21:f6:25:0f:72:a1:8a:bc:d1:db:de:ce:
4a:da:30:37:d1:4e:e0:5c:89:4b:7a:39:94:80:f3:fc:e4:41:
5f:39:30:8a:25:f1:c2:27:60:05:81:06:b0:e9:24:e9:36:b3:
34:13:38:da:20:e8:c0:5f:77:89:11:50:d2:3f:e9:81:a4:1f:
38:a8:5c:d9:83:f1:d2:d8:79:e4:b5:ff:b4:b3:eb:a2:b2:ce:
fb:e2:5d:43:8f:69:c7:b6:49:ef:de:47:4b:5d:d1:04:ca:84:
c1:be:0f:5f:3e:6d:50:d7:0e:fa:7c:d4:f6:e1:71:9f:f7:b5:
42:5c:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:31:20 2025 by rpki-client