Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
File: SGiJzk60_XR4GCSDld5fuT0f4UI.mft (raw, json)
Hash identifier: uSJEBXK5AEqlnQckRhSMDtagiRIe4yOlqlg5ynMQ9YU=
Subject key identifier: 90:BA:D0:EF:97:4B:FF:94:3C:68:CA:AB:44:B4:D7:41:C1:D8:2A:B9
Authority key identifier: 48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
Certificate issuer: /CN=486889ce4eb4fd747818248395de5fb93d1fe142
Certificate serial: 0197752E3B51543CB40343B6FC5B676712F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
Manifest number: 0110
Signing time: Sun 15 Jun 2025 20:00:53 +0000
Manifest this update: Sun 15 Jun 2025 20:00:53 +0000
Manifest next update: Mon 16 Jun 2025 20:00:53 +0000
Files and hashes: 1: FfqUAa7-KKr54JP8aBzk5nNv21g.roa (hash: PY8USvms98PE+f6r3SXsrpm0zwpXY4+1N+NCv5EFelE=)
2: SGiJzk60_XR4GCSDld5fuT0f4UI.crl (hash: t/VEzkTg5BpR4SGQgjZN3TqYuyRdOCjtalGxzw/Z06Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:2e:3b:51:54:3c:b4:03:43:b6:fc:5b:67:67:12:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486889ce4eb4fd747818248395de5fb93d1fe142
Validity
Not Before: Jun 15 20:00:53 2025 GMT
Not After : Jun 16 20:00:53 2025 GMT
Subject: CN=90bad0ef974bff943c68caab44b4d741c1d82ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:f5:5e:c6:fd:d5:0e:ca:ab:f1:a6:92:44:
d7:65:03:39:9f:02:cd:fa:2e:45:83:57:1d:ee:54:
5f:de:2d:1e:17:3b:23:bd:13:1d:c9:b4:6a:ae:7c:
df:4c:87:d0:c8:09:5c:92:5e:36:3a:45:51:1b:e6:
31:a0:bd:3e:5a:3a:cb:df:9c:ab:16:3e:51:1f:1d:
80:e5:6c:82:93:b9:36:e1:3c:66:d1:d1:10:54:d8:
d2:c9:c7:1a:38:9c:c6:83:1e:c1:75:2a:c9:f9:ed:
5a:61:35:1b:0b:07:0a:c5:b0:7a:41:a9:6a:10:52:
b6:24:6c:75:26:34:d3:84:8b:8e:d4:6b:d0:fc:2a:
87:db:af:5d:bb:71:a4:2d:e6:28:fe:5b:f4:d0:6c:
77:26:a7:45:ba:36:96:06:ee:57:64:89:4a:7a:9d:
83:0a:38:bb:93:f9:2c:eb:dc:94:f4:1b:75:a0:6a:
47:3e:d1:13:7c:37:94:80:b3:4a:93:96:7c:66:df:
70:29:95:fe:08:41:b3:5e:f6:13:e3:bd:d5:a0:0a:
f2:8b:29:14:c3:c3:16:d5:a3:03:07:61:01:6c:8f:
04:33:77:78:5d:f5:cd:fa:11:63:a1:90:cb:a1:4f:
60:65:7b:31:11:4d:a0:74:03:ed:56:e1:59:14:21:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BA:D0:EF:97:4B:FF:94:3C:68:CA:AB:44:B4:D7:41:C1:D8:2A:B9
X509v3 Authority Key Identifier:
keyid:48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8d:a6:ab:3a:5b:ec:d4:44:7e:7e:6e:6b:5c:25:5e:2d:18:
97:32:5d:98:03:b0:b2:ee:fe:c1:6e:95:5b:11:b6:c2:a5:2f:
73:98:71:8b:99:42:9b:21:92:d0:a3:03:06:e2:66:ae:ce:13:
be:85:ec:f8:61:ac:af:de:dd:4d:c6:f9:b2:68:2f:81:62:8e:
e7:07:22:19:3a:4a:39:62:b2:16:16:b0:d0:2c:29:8b:4d:62:
b5:c9:70:05:5f:72:17:f2:6e:fd:38:ef:cf:82:87:a2:76:5f:
81:0c:e5:6c:e1:9e:fd:14:3f:c0:5c:f4:f4:0a:a0:2a:5b:62:
10:5d:6c:67:f3:0a:ff:48:1c:5a:0f:58:42:9a:39:6c:82:1c:
ed:ef:b7:c0:db:0d:90:66:ab:c5:56:4c:b4:74:02:1e:db:5d:
cf:75:60:d2:c3:ce:bb:44:57:b7:4d:98:76:17:2c:98:8b:71:
77:eb:ae:94:fe:12:51:5a:ca:0e:73:82:b5:53:01:af:00:38:
a0:06:53:21:3e:cc:d4:3f:14:95:7e:67:5a:1c:2f:a5:be:b8:
ca:a4:95:10:07:9e:fc:02:b0:99:46:c6:79:3a:46:d8:c7:f5:
f2:5e:c9:ca:9f:35:4a:83:0d:09:68:a5:1d:cd:2e:4a:fe:72:
d8:e2:96:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:53:17 2025 by rpki-client