Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
File: SGiJzk60_XR4GCSDld5fuT0f4UI.mft (raw, json)
Hash identifier: BW+jZc7te2wDlDrgQl9LJfihOkcxBz9aa8ncmUU58Fo=
Subject key identifier: 5B:31:F1:16:D8:75:62:CC:78:DD:BC:FB:9D:1B:81:4B:7C:0D:5B:55
Authority key identifier: 48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
Certificate issuer: /CN=486889ce4eb4fd747818248395de5fb93d1fe142
Certificate serial: 019874190724E2FD144516DDFC595D1D0122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
Manifest number: 0194
Signing time: Mon 04 Aug 2025 08:00:53 +0000
Manifest this update: Mon 04 Aug 2025 08:00:53 +0000
Manifest next update: Tue 05 Aug 2025 08:00:53 +0000
Files and hashes: 1: FfqUAa7-KKr54JP8aBzk5nNv21g.roa (hash: PY8USvms98PE+f6r3SXsrpm0zwpXY4+1N+NCv5EFelE=)
2: SGiJzk60_XR4GCSDld5fuT0f4UI.crl (hash: zRn0GcUb8RWB77uGVrCs6z6dpA5d9ab/al7mL6Hm3fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:07:24:e2:fd:14:45:16:dd:fc:59:5d:1d:01:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486889ce4eb4fd747818248395de5fb93d1fe142
Validity
Not Before: Aug 4 08:00:53 2025 GMT
Not After : Aug 5 08:00:53 2025 GMT
Subject: CN=5b31f116d87562cc78ddbcfb9d1b814b7c0d5b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:8c:a7:91:db:f1:19:fe:54:7e:7f:23:fb:
3f:d8:27:d4:a6:e4:b3:c9:62:ab:be:b9:e9:20:2f:
47:25:eb:45:43:3f:53:07:5d:0d:d0:8e:7f:df:29:
84:c0:4e:36:a2:38:b4:7c:43:a3:43:21:b5:d8:22:
31:76:90:7a:9e:a3:62:5b:25:fb:83:0e:9d:63:9e:
f0:30:86:48:95:c6:0f:04:f3:b4:75:74:af:10:b6:
25:c7:46:44:1c:80:33:80:10:11:8d:68:49:d4:4c:
d1:15:6c:49:22:d3:33:bc:b9:d9:cf:bc:01:fd:6b:
89:e3:c0:14:45:a0:e5:db:ce:7d:0c:9f:03:7c:45:
3a:a5:96:08:a2:b4:b0:77:6c:27:92:be:e0:e9:5b:
22:f4:92:93:06:93:d8:4d:b8:dd:a0:1c:1e:b6:96:
f7:a2:1c:1c:6d:bb:c0:d7:a1:f8:f4:4a:05:b0:70:
05:23:1a:38:48:61:3b:6f:b1:66:1d:5e:2b:4d:53:
50:fc:f8:81:34:19:95:b7:82:45:d8:d5:2d:8e:36:
90:44:af:5b:48:23:0b:9b:c5:17:8b:6a:86:0b:4e:
06:b2:9d:07:9b:09:85:a8:a1:a3:3b:c6:5f:fa:34:
e4:fe:38:cc:3e:9f:9b:bc:56:ea:ff:de:d2:87:36:
f4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:31:F1:16:D8:75:62:CC:78:DD:BC:FB:9D:1B:81:4B:7C:0D:5B:55
X509v3 Authority Key Identifier:
keyid:48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:65:89:fc:9c:35:ba:a0:75:aa:05:b5:8c:64:4d:10:18:f5:
0f:b3:1f:10:8c:63:5c:5c:24:2c:c8:d4:64:38:42:29:4d:78:
05:fa:44:0c:e1:8d:ba:21:82:5b:22:29:da:4d:45:98:b1:35:
6c:8f:a9:be:43:19:0d:92:a8:5a:15:00:ef:27:98:9e:d5:7f:
bc:57:0e:0a:a0:37:e8:fb:8e:a8:34:1b:12:78:d8:e5:d7:51:
7c:09:41:93:12:00:f8:c5:96:b1:b0:97:54:e1:89:86:82:15:
fa:02:d8:56:b9:40:e1:46:68:80:ea:af:fd:49:a5:34:fa:b1:
57:33:de:cb:34:fe:87:a0:3c:48:a7:ae:c6:9a:c9:56:86:e6:
7a:b1:a9:ee:5c:80:43:a8:a7:49:80:8b:50:57:ca:c6:b3:43:
94:5c:67:7d:3b:63:b5:78:d4:ff:28:63:28:77:8c:fb:d3:71:
50:aa:38:0c:4e:55:98:18:86:e6:40:e8:9b:8c:20:ef:e0:e2:
2a:c7:9d:48:bb:1f:33:d3:c3:5c:35:e1:11:de:86:85:58:62:
06:b6:cb:0f:03:1e:65:fd:e3:35:88:c0:dd:b4:5c:51:45:73:
d7:f8:eb:b2:01:0a:d6:4e:6d:e5:2d:c5:b4:71:d0:f3:da:18:
b9:6d:fc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:55:42 2025 by rpki-client