Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: myqOOqH1oU2Zl1Ykxq/yRzeQbI7gZjAHOZi7LMCLxg4=
Subject key identifier: 39:C5:46:0B:8B:61:9A:32:08:E5:24:59:60:79:5E:87:40:E3:9E:7B
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 0197711A1BD4E579C46BC66A988040AA489C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 11BE
Signing time: Sun 15 Jun 2025 01:00:25 +0000
Manifest this update: Sun 15 Jun 2025 01:00:25 +0000
Manifest next update: Mon 16 Jun 2025 01:00:25 +0000
Files and hashes: 1: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: nG1U6Rp8McUDpq+4oTbf7F3iVCW+eSXkKRjyr7V6pkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:1b:d4:e5:79:c4:6b:c6:6a:98:80:40:aa:48:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Jun 15 01:00:25 2025 GMT
Not After : Jun 16 01:00:25 2025 GMT
Subject: CN=39c5460b8b619a3208e5245960795e8740e39e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:1a:3c:74:95:d4:a0:01:9e:c3:4e:d4:d5:
ae:8f:7c:2a:7a:ed:d3:77:c0:6a:1d:7b:00:16:d2:
8f:a8:9f:d5:61:d0:c0:5a:8c:2a:21:50:2b:e8:dd:
37:64:e2:aa:b9:fb:5e:08:ed:8b:89:03:ad:41:a4:
71:26:8d:57:67:79:7b:91:99:9f:57:b5:32:d4:4a:
3a:b9:94:82:b8:cc:2e:22:7e:3f:59:21:1d:67:54:
e3:9e:bf:bb:20:44:31:27:0d:a6:b0:21:53:99:56:
e2:40:10:0d:cf:0b:8b:ce:14:4f:d8:be:8f:82:a2:
46:f4:e1:ff:a1:06:13:26:b4:6a:28:90:61:3a:df:
cc:0c:d9:2d:0a:53:b3:80:ac:53:56:01:4d:21:f7:
a1:6a:f1:59:e8:ac:b6:4e:27:59:60:04:54:5a:d3:
d2:2f:ca:6f:69:d3:eb:3d:1c:12:e8:76:2a:75:b6:
90:e8:b4:26:cc:85:4e:02:fa:41:aa:6e:12:5a:18:
97:05:cb:e3:04:8f:ad:04:54:14:cf:69:d9:3c:c7:
b5:7c:43:1e:ca:88:5a:a5:ee:ac:9e:fd:e6:25:5a:
82:6e:a8:89:59:bd:66:f9:78:16:aa:d3:15:45:70:
e9:8c:81:d6:32:98:43:31:6c:f7:ec:50:5b:6a:ab:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C5:46:0B:8B:61:9A:32:08:E5:24:59:60:79:5E:87:40:E3:9E:7B
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cd:df:e6:07:a3:d5:ef:7d:f2:d2:93:5a:8e:96:22:c2:9a:
95:e1:af:aa:11:f6:b2:02:78:15:b2:35:7d:26:db:dc:81:aa:
f8:79:ef:a5:13:8d:40:61:4c:09:db:0e:f6:1e:20:f8:1d:99:
21:b4:1a:de:09:f5:1b:c0:81:09:67:b0:f3:50:de:d1:71:fa:
85:59:1c:21:f8:23:93:69:30:4a:b1:c9:e3:04:7a:cf:58:19:
0d:e1:0a:24:9a:74:3b:9b:50:ee:2e:00:44:c3:4c:72:05:0f:
b1:c6:9b:17:3b:05:55:90:b4:1a:48:b7:88:69:5e:20:5d:f1:
ec:c8:6e:31:21:3a:48:fe:aa:4b:0a:69:47:2a:30:f9:4c:71:
91:01:21:3d:f9:9f:92:f7:2c:07:e0:90:fd:34:0b:1c:c1:08:
bc:79:ce:e6:b8:fb:4e:2b:54:8c:a7:a1:ad:8b:af:51:41:aa:
f6:da:5c:87:3a:07:30:f1:d5:41:e8:cb:5a:3f:1b:b6:46:0a:
64:f4:69:e8:c4:59:cb:34:c5:dd:eb:f3:69:8b:37:47:e9:47:
57:f2:f4:d3:43:ec:d0:de:b5:f6:99:84:d1:5e:e5:ec:a4:ca:
63:0c:57:3d:36:10:e3:4b:59:36:f3:03:52:c1:28:26:f5:0f:
24:2c:d3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:05:37 2025 by rpki-client