Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: 3nhRCOl95QjCEM9RUO306Uqkm/Lx7PnGahuMXRs6GYQ=
Subject key identifier: 67:AA:A3:AD:38:CE:A0:53:13:C5:1A:AD:44:35:F1:B8:B3:91:D3:E4
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 01988EEB6DB63ED46838C9140ECE8AFB062A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 1252
Signing time: Sat 09 Aug 2025 13:00:50 +0000
Manifest this update: Sat 09 Aug 2025 13:00:50 +0000
Manifest next update: Sun 10 Aug 2025 13:00:50 +0000
Files and hashes: 1: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: IcALLGxi7+X3RC9kwFh5WRhAZ9bKTsK3i8C/UUcr+D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:6d:b6:3e:d4:68:38:c9:14:0e:ce:8a:fb:06:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Aug 9 13:00:50 2025 GMT
Not After : Aug 10 13:00:50 2025 GMT
Subject: CN=67aaa3ad38cea05313c51aad4435f1b8b391d3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:97:64:db:42:d5:a1:b4:b6:8c:76:31:37:
33:cf:9e:5b:37:72:42:ed:a4:94:0d:8c:0f:26:aa:
23:3f:d1:69:75:8b:93:0b:3f:ee:7f:ee:77:b4:42:
e6:f9:66:8c:8e:73:2d:f6:c3:19:3b:e5:1c:36:b3:
65:ef:c7:1e:f0:72:96:4d:b6:00:d8:fb:01:3f:55:
4d:0f:de:cd:46:09:43:ff:ac:bb:59:fe:67:16:ce:
0f:d5:19:aa:9c:c2:c0:01:60:15:39:f7:e1:c7:ba:
8a:4b:d1:53:46:0d:c0:9c:92:0d:5e:8d:42:34:69:
c1:b1:2a:be:c1:aa:85:1f:b2:29:ba:62:b9:cd:ba:
54:7d:f8:62:cb:cc:18:4f:c5:92:66:a4:c3:3c:af:
c1:cb:32:3a:c9:46:c4:0b:f7:50:f2:23:bd:eb:cc:
16:0f:df:17:02:70:4b:2e:01:34:cc:e5:f9:ef:80:
93:f0:33:a5:b8:26:3a:51:b3:47:5e:7c:a5:97:4f:
f9:2b:89:b8:9c:b5:db:ea:c9:b5:82:40:6a:e2:2b:
48:d6:87:b1:30:a1:98:7f:a3:cb:40:7e:e5:16:2c:
bd:76:eb:e2:b4:7f:8e:19:18:57:24:03:e0:60:59:
e9:a5:93:c3:d9:69:58:6a:3e:6a:3c:cd:40:7e:19:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AA:A3:AD:38:CE:A0:53:13:C5:1A:AD:44:35:F1:B8:B3:91:D3:E4
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:29:95:69:ee:27:41:88:a7:72:d5:6c:d2:1c:c3:b6:19:dd:
a9:87:dd:53:8e:f0:31:f3:20:79:2b:5b:c1:ca:32:2d:13:a3:
54:2b:ae:57:97:2a:81:19:7b:1a:ae:55:8a:d7:d1:10:3c:eb:
85:69:59:4a:06:4a:f9:6d:01:91:20:99:9f:bd:d2:a3:90:d0:
a8:c2:73:94:fd:4b:e6:60:98:7b:95:80:50:58:b0:9b:9e:c4:
71:1b:09:20:04:90:1d:ea:b1:d6:6a:7e:11:09:3b:7d:75:93:
e9:37:b9:f3:87:f2:b9:03:ee:96:a5:1e:6f:61:0d:dc:cf:ce:
ab:af:b5:39:21:d9:6f:8f:da:85:e5:f2:78:bf:f0:bf:ed:14:
4d:f4:0e:dd:35:5c:84:2e:ee:85:c5:a9:b0:b1:cb:20:b4:ff:
21:16:9c:8b:7f:dd:3a:66:2c:0b:8b:93:d7:7f:92:ae:6f:f1:
f3:3d:eb:06:dd:ee:02:bc:0d:a3:38:0e:43:53:d1:3a:98:9c:
c9:9c:3b:dc:ca:a1:f3:21:55:a7:97:4b:58:3f:e5:86:e7:db:
75:53:1e:4b:b9:1c:67:46:4c:45:6c:72:95:cd:a9:45:21:9f:
d0:6f:fa:db:7c:33:d3:b3:f2:9c:0c:ed:a5:4b:8d:5b:0d:5a:
68:08:78:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO6222PtRoOMkUDs6K+wYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YTgxYmE3NTg5YThlMWJmMGUxYTA5Y2Y0YWEwZjRlOTA5
MDFkNTcwHhcNMjUwODA5MTMwMDUwWhcNMjUwODEwMTMwMDUwWjAzMTEwLwYDVQQD
Eyg2N2FhYTNhZDM4Y2VhMDUzMTNjNTFhYWQ0NDM1ZjFiOGIzOTFkM2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmiXZNtC1aG0tox2MTczz55bN3JC
7aSUDYwPJqojP9FpdYuTCz/uf+53tELm+WaMjnMt9sMZO+UcNrNl78ce8HKWTbYA
2PsBP1VND97NRglD/6y7Wf5nFs4P1RmqnMLAAWAVOffhx7qKS9FTRg3AnJINXo1C
NGnBsSq+waqFH7IpumK5zbpUffhiy8wYT8WSZqTDPK/ByzI6yUbEC/dQ8iO968wW
D98XAnBLLgE0zOX574CT8DOluCY6UbNHXnyll0/5K4m4nLXb6sm1gkBq4itI1oex
MKGYf6PLQH7lFiy9duvitH+OGRhXJAPgYFnppZPD2WlYaj5qPM1Afhn2XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeqo604zqBTE8UarUQ18bizkdPkMB8GA1UdIwQY
MBaAFEmoG6dYmo4b8OGgnPSqD06QkB1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDIt
NjAzMWQ1ZGUzZjM5LzEvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDItNjAzMWQ1ZGUzZjM5
LzEvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSmVae4n
QYinctVs0hzDthndqYfdU47wMfMgeStbwcoyLROjVCuuV5cqgRl7Gq5VitfREDzr
hWlZSgZK+W0BkSCZn73So5DQqMJzlP1L5mCYe5WAUFiwm57EcRsJIASQHeqx1mp+
EQk7fXWT6Te584fyuQPulqUeb2EN3M/Oq6+1OSHZb4/aheXyeL/wv+0UTfQO3TVc
hC7uhcWpsLHLILT/IRaci3/dOmYsC4uT13+Srm/x8z3rBt3uArwNozgOQ1PROpic
yZw73Mqh8yFVp5dLWD/lhufbdVMeS7kcZ0ZMRWxylc2pRSGf0G/623wz07PynAzt
pUuNWw1aaAh4og==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:09 2025 by rpki-client