Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
File: sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json)
Hash identifier: mkNybRgRQjymX9he4YG/6kkYsudWx7KW8U/SgbK55mk=
Subject key identifier: 7B:25:36:16:72:5F:3C:D5:30:40:E8:00:E7:D4:02:44:55:30:BE:12
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 01987CE5B8B5C71197CF7C44B2B4629F7B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
Manifest number: 0340
Signing time: Wed 06 Aug 2025 01:01:26 +0000
Manifest this update: Wed 06 Aug 2025 01:01:26 +0000
Manifest next update: Thu 07 Aug 2025 01:01:26 +0000
Files and hashes: 1: WuP_ar5p0VQaYjgm5CdF94AIxBs.roa (hash: ydupRdA76pUpd82bhv9cS8ujQ+gdAK4Xhs2n/s0tNgc=)
2: m74VvsI6EdMo76uevvan59QpkqE.roa (hash: 1fe03vMMsl3oUUL4Se2ddc8JmIOlm8Qdn5iC5j3XfoY=)
3: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: QkoesryQFqi4JMSujh+MJFYHGPfJoqry9Yxglk91X5A=)
4: yVlE6wtOmHPbBbPTbGfVtRfQk3I.roa (hash: kF1ch8ftfefkwMb34eMIq7SQs/1Z3Ao5ZWwxrMyDhdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:b8:b5:c7:11:97:cf:7c:44:b2:b4:62:9f:7b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: Aug 6 01:01:26 2025 GMT
Not After : Aug 7 01:01:26 2025 GMT
Subject: CN=7b253616725f3cd53040e800e7d402445530be12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b9:7d:64:d2:af:97:6e:6f:d7:06:9f:cc:4d:
5d:b3:5d:82:fe:06:51:ac:82:47:d2:28:95:3d:57:
6d:ef:93:d2:9b:d5:fc:dd:83:3d:68:11:38:ae:96:
92:9c:4e:d0:14:ec:53:c0:cc:d9:cc:9c:71:9c:5e:
30:5f:ae:bd:3c:53:9f:ed:43:1f:b1:f9:5a:ba:48:
62:f3:bc:75:df:26:6b:75:e8:d8:ec:07:4e:58:e6:
55:c2:39:1b:1b:44:b0:6d:f1:e5:13:a9:d9:50:6e:
fe:91:b2:3d:7e:bf:c1:7b:5d:e5:3b:03:9e:84:99:
9c:1a:05:da:e5:0d:47:72:cb:ae:2c:d4:fb:9f:69:
35:6e:c6:9f:c4:3f:a3:83:51:3b:50:ba:59:4c:5b:
7f:67:4e:14:49:15:e9:6b:8a:d6:63:92:0e:a7:4f:
06:7a:4d:83:a3:aa:51:51:b3:74:b3:b8:c8:53:d6:
aa:1c:f3:b2:60:b9:6e:16:24:ca:d3:9e:db:9b:84:
10:b4:12:92:d5:b6:06:97:81:f3:f8:c5:e2:b0:83:
5c:d5:dc:66:f7:28:c6:06:9b:f6:ad:68:a4:d3:2b:
79:ad:fd:26:3a:7d:26:8a:da:ff:f2:a4:fa:cb:bd:
b2:ac:da:f9:ae:0e:f2:24:6a:c8:51:b7:ce:25:1b:
77:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:25:36:16:72:5F:3C:D5:30:40:E8:00:E7:D4:02:44:55:30:BE:12
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ad:52:70:03:79:e4:c3:bb:9c:f0:fe:d3:00:db:99:1e:07:
9e:2c:c5:ab:5a:7e:d6:9d:86:d5:c6:42:14:58:ed:40:f9:aa:
fa:da:04:0f:55:6e:70:d7:3e:db:91:06:98:6e:32:af:13:1f:
b8:7d:a9:f0:b7:6c:b1:ae:91:4f:e5:91:f3:c2:9b:89:cf:13:
36:3a:35:d8:b0:f5:9d:ad:ed:c8:89:61:1e:92:4d:43:94:ae:
00:a0:47:97:53:a3:cf:bc:14:57:c9:c9:33:8b:1f:96:7e:e6:
3a:25:46:6f:74:ff:c1:21:86:13:11:fd:af:e7:11:e0:1c:9b:
11:07:38:7b:ff:16:0c:bc:24:c5:d0:3b:e0:37:b2:84:48:a8:
0b:08:e9:d6:14:68:16:15:0a:a3:e1:da:fc:8f:66:86:7b:4f:
1b:04:51:1f:f5:66:fb:28:4e:bd:40:a6:1b:0b:f5:1b:b0:bd:
83:f6:49:d8:ad:b7:4c:05:35:36:c0:62:7b:c3:7c:6e:ea:3e:
93:30:d1:e9:68:60:1b:c4:11:fd:85:3c:d2:b7:f5:47:11:0a:
f3:0a:70:68:65:59:97:54:49:34:e1:b6:31:4c:3b:f2:1f:5d:
e8:f0:ec:70:76:0d:e0:3a:d1:07:ea:e4:ea:e2:00:8c:c6:90:
a5:19:0e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:34:43 2025 by rpki-client