
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/60dca4-3e9e-4056-a05d-57d22bb1bb9a/1/SGLw6V7KPtYlnnTDJ5W78aISehA.mft
File: SGLw6V7KPtYlnnTDJ5W78aISehA.mft (raw, json)
Hash identifier: gygZ9q3mrgYWwKFt28EBoWulcNgm1A2eUIDNi5n5lPQ=
Subject key identifier: A0:B3:CA:5F:84:42:1E:05:85:A5:64:F4:3E:CD:82:07:63:73:BA:AD
Authority key identifier: 48:62:F0:E9:5E:CA:3E:D6:25:9E:74:C3:27:95:BB:F1:A2:12:7A:10
Certificate issuer: /CN=4862f0e95eca3ed6259e74c32795bbf1a2127a10
Certificate serial: 01987F4153643BD9B205F607FB7EEF8B5C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGLw6V7KPtYlnnTDJ5W78aISehA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/60dca4-3e9e-4056-a05d-57d22bb1bb9a/1/SGLw6V7KPtYlnnTDJ5W78aISehA.mft
Manifest number: 20
Signing time: Wed 06 Aug 2025 12:00:44 +0000
Manifest this update: Wed 06 Aug 2025 12:00:44 +0000
Manifest next update: Thu 07 Aug 2025 12:00:44 +0000
Files and hashes: 1: SGLw6V7KPtYlnnTDJ5W78aISehA.crl (hash: 6N6HgpaG7ZDhP+8OS9xVKf6gLnkJnT6s2DD6RBmHgqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/60dca4-3e9e-4056-a05d-57d22bb1bb9a/1/SGLw6V7KPtYlnnTDJ5W78aISehA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/60dca4-3e9e-4056-a05d-57d22bb1bb9a/1/SGLw6V7KPtYlnnTDJ5W78aISehA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGLw6V7KPtYlnnTDJ5W78aISehA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:41:53:64:3b:d9:b2:05:f6:07:fb:7e:ef:8b:5c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4862f0e95eca3ed6259e74c32795bbf1a2127a10
Validity
Not Before: Aug 6 12:00:44 2025 GMT
Not After : Aug 7 12:00:44 2025 GMT
Subject: CN=a0b3ca5f84421e0585a564f43ecd82076373baad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:5d:1c:ef:39:19:f8:15:c4:89:9c:10:bb:
e7:ee:d8:d7:21:22:9f:05:f3:4f:bb:a6:49:f4:d6:
9a:a7:69:ed:e3:c4:91:65:e9:29:2d:ec:6f:67:9d:
b5:0e:52:77:5e:a1:40:1c:08:fd:d1:56:8d:9e:fd:
0c:92:68:63:db:ee:d2:72:c9:2c:db:ab:da:73:39:
67:25:c2:42:e5:8a:66:0c:68:0a:a1:f2:d2:fd:f5:
42:04:8d:b4:d1:21:5b:c6:9c:0b:1e:84:64:6a:1c:
eb:0b:c3:aa:5c:49:ff:45:86:f1:83:d1:78:5d:d3:
50:de:0d:d1:c9:ed:de:56:86:0d:ac:3a:fe:e4:55:
42:38:e0:85:1f:02:7e:b0:c3:63:13:97:66:d1:6d:
79:0d:c4:4a:42:be:8f:ec:2e:a4:ce:06:df:94:52:
74:35:0d:e2:b4:39:02:38:af:e3:a3:ad:f9:16:b7:
44:9c:8c:d6:69:11:b0:f2:12:3b:7f:ab:83:c0:3e:
98:a3:46:46:e8:02:2b:64:e0:2a:30:05:7c:fa:b6:
78:3c:6c:53:e8:0d:79:5a:df:2d:6a:67:75:37:9f:
dd:c2:b2:84:b8:ae:7b:f0:27:ec:9b:0d:89:ed:37:
3c:54:5d:fa:ea:de:10:67:e2:eb:2a:3d:37:56:f7:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B3:CA:5F:84:42:1E:05:85:A5:64:F4:3E:CD:82:07:63:73:BA:AD
X509v3 Authority Key Identifier:
keyid:48:62:F0:E9:5E:CA:3E:D6:25:9E:74:C3:27:95:BB:F1:A2:12:7A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGLw6V7KPtYlnnTDJ5W78aISehA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60dca4-3e9e-4056-a05d-57d22bb1bb9a/1/SGLw6V7KPtYlnnTDJ5W78aISehA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60dca4-3e9e-4056-a05d-57d22bb1bb9a/1/SGLw6V7KPtYlnnTDJ5W78aISehA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2d:e0:aa:70:40:73:58:2a:0b:c9:c0:b9:22:05:fb:f3:7f:
85:e0:ec:f1:f0:89:7d:b4:3c:77:d0:7c:07:04:eb:30:5d:72:
2f:36:ab:47:0f:fe:b6:38:d2:66:dd:7a:f1:ea:32:ed:27:6c:
1f:5e:93:c9:c6:a6:90:eb:97:5c:3f:7f:e9:38:17:d8:f0:2e:
0a:24:cc:86:17:e9:66:3f:d7:d7:12:f9:e1:5e:bb:f3:6b:a9:
f8:77:04:73:4f:83:2e:56:63:07:55:40:19:c5:02:07:a6:4d:
25:68:50:c5:6a:17:73:1a:7d:b4:19:43:ba:8a:58:b6:fa:39:
61:a7:85:de:84:91:bc:ae:c0:08:26:bf:01:29:32:fa:4e:fd:
31:7a:17:7a:a4:c6:c0:d3:e4:58:fb:5f:f6:57:31:90:8b:d2:
a4:6b:44:92:05:8e:cb:36:09:ef:ec:51:2c:7f:ba:a9:36:1e:
ca:ab:68:ea:1a:cb:8e:49:cc:2c:a8:3d:70:7e:5d:ee:b3:93:
db:65:86:51:8d:3f:75:5e:16:31:4f:c3:77:bf:57:0b:3a:00:
c0:37:62:29:ba:73:3a:c3:43:7a:23:54:8c:dc:57:85:6f:86:
d1:02:f7:48:3a:0f:d1:68:18:4e:ff:00:31:8d:44:39:0a:52:
80:68:87:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:24:41 2025 by rpki-client