Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File: Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier: hlko+FGFM74RhdyJvpiCKkC7vsNVk58CqjkLvhHUMhg=
Subject key identifier: E1:D8:7E:AF:A7:EF:57:C1:32:3C:C2:A7:5B:5B:25:38:CB:8A:82:35
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 019A4EF44E46A1DF3EBA0340180E73CEA0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number: 133A
Signing time: Tue 04 Nov 2025 13:00:24 +0000
Manifest this update: Tue 04 Nov 2025 13:00:24 +0000
Manifest next update: Wed 05 Nov 2025 13:00:24 +0000
Files and hashes: 1: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: V8wxDzB+RnGUeXXlghMvBIr+Mk5NdGTdpxLa2pq8Cz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4e:46:a1:df:3e:ba:03:40:18:0e:73:ce:a0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Nov 4 13:00:24 2025 GMT
Not After : Nov 5 13:00:24 2025 GMT
Subject: CN=e1d87eafa7ef57c1323cc2a75b5b2538cb8a8235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ef:5b:95:cc:de:72:a3:30:a0:e4:5c:0c:06:
95:ae:ea:1a:d6:a1:27:b4:c9:27:fd:87:47:25:74:
f2:2a:e3:e8:b0:6a:78:1e:7d:b1:98:45:c7:7a:92:
5d:c1:6a:93:61:42:bb:c8:21:cc:6a:4a:0e:97:69:
5d:95:e1:9e:b8:77:60:1b:c9:0f:bc:73:21:38:59:
cc:66:fe:86:29:48:99:1f:ff:ba:21:bf:d9:b2:66:
36:e5:41:22:45:c7:69:e6:f4:67:a7:bb:eb:f2:a5:
90:14:ab:33:f1:0a:b9:46:48:0c:55:10:81:9b:06:
7e:fe:87:71:51:2c:95:55:0c:4b:c8:36:a8:81:75:
3a:96:c2:df:09:1c:2e:e7:d5:41:18:dd:e5:70:98:
8e:ba:73:95:40:5f:75:d1:eb:6c:50:92:8e:a2:3c:
1c:63:6b:06:87:fc:da:98:cf:be:ef:36:9d:c0:92:
d1:b6:86:77:16:88:3f:54:75:89:8f:db:2a:81:b8:
ed:77:77:85:49:43:51:4e:b0:d3:cd:91:66:85:61:
1f:d8:07:88:54:8b:86:16:5a:73:17:27:a4:6f:ba:
d9:ac:4e:5b:bb:df:18:6b:55:5d:53:a8:b7:99:7d:
67:02:7e:d8:86:f4:55:13:fe:08:5a:c8:df:d0:26:
c6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D8:7E:AF:A7:EF:57:C1:32:3C:C2:A7:5B:5B:25:38:CB:8A:82:35
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:42:97:af:7f:7f:2a:f0:32:72:29:c3:4a:08:ff:44:0e:b3:
db:c9:f7:9d:4f:38:0d:93:2e:89:91:37:e4:45:a5:05:d8:b7:
ea:f4:fd:d2:21:95:93:38:24:4b:76:54:b2:e6:53:83:72:79:
7f:3a:09:8a:8c:69:7b:10:bf:c0:02:7d:92:b6:1b:12:4e:58:
1f:c7:07:6d:7e:63:a4:83:ef:b6:19:93:b9:24:ad:3f:43:3e:
b6:8b:06:dd:bb:41:2a:e6:ec:59:6e:9b:41:db:9f:bc:9b:17:
20:ba:d5:14:98:34:b7:bc:2b:62:80:ad:6f:84:59:14:77:f0:
4e:d5:fa:6e:e2:be:d6:b8:c6:38:cb:64:ca:68:48:8a:d4:57:
c7:ed:23:b8:b7:90:89:a2:6e:68:10:e0:8b:d0:9b:f0:44:12:
6e:32:3c:31:ad:d0:3c:24:c9:79:41:05:4c:76:69:65:e2:46:
2c:58:d3:87:1a:8e:50:a0:02:9d:b1:0e:64:a3:ad:7a:31:fd:
4e:05:3a:36:dc:8b:6a:00:71:17:6e:aa:4a:b9:46:fe:fc:10:
65:c1:69:fe:23:61:9b:e1:73:3f:66:a9:cb:d6:d1:29:f1:6e:
8b:cf:15:49:83:a0:1f:af:37:6a:89:fd:28:27:76:8f:8a:b0:
c1:ec:1f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:35 2025 by rpki-client