Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
File: SjQVWNugttuUxVzgbjBv9lGdbvE.mft (raw, json)
Hash identifier: Kq4kypYvUZnFQVwjP35XE1MpJPrbt3GLquOhzGQzfs4=
Subject key identifier: 38:85:D2:D3:28:BC:68:D3:95:AB:3E:39:96:DA:24:35:E5:BE:3F:26
Authority key identifier: 4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
Certificate issuer: /CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Certificate serial: 01989F0333D4B1D7CF9CC4D56BACAE433ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
Manifest number: 0865
Signing time: Tue 12 Aug 2025 16:00:43 +0000
Manifest this update: Tue 12 Aug 2025 16:00:43 +0000
Manifest next update: Wed 13 Aug 2025 16:00:43 +0000
Files and hashes: 1: SjQVWNugttuUxVzgbjBv9lGdbvE.crl (hash: vMSN2xOdXIOv+DW5aBbvzc1FYutq6LpW7IfTbQqLpp4=)
2: yPI4iRYmm1fwcu2gPm48e2JKRd8.roa (hash: BDXqRGsDwDyhjpTf6VKbLY0k53gndOvrvWCUreaVIQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:33:d4:b1:d7:cf:9c:c4:d5:6b:ac:ae:43:3a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Validity
Not Before: Aug 12 16:00:43 2025 GMT
Not After : Aug 13 16:00:43 2025 GMT
Subject: CN=3885d2d328bc68d395ab3e3996da2435e5be3f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:00:3d:e8:b0:93:22:9f:a4:f8:d1:c3:3b:
29:24:8c:f8:f6:5b:0f:4a:dd:6e:c7:73:7b:3e:05:
00:f8:69:6d:e2:dd:c8:e3:13:cc:d9:87:2b:71:5b:
8a:4d:5b:33:02:8a:1a:91:94:71:bf:9c:a3:e9:08:
a5:32:9e:0e:d1:a7:32:b9:89:87:67:1c:03:07:ce:
fd:e4:f0:e1:8c:83:be:8f:0c:3a:25:ff:00:f2:19:
bc:60:95:c7:be:f5:9c:e0:4e:35:ae:fb:70:0e:df:
44:22:de:09:57:b3:27:f2:f1:11:64:d3:5d:4f:ca:
9c:b9:52:fb:24:7b:3b:ce:f7:87:0c:64:e5:60:ab:
ba:d7:e6:38:33:c0:d3:a9:ed:8b:60:69:8d:bc:5b:
81:1c:a6:bd:fb:b1:15:00:fa:72:43:fc:95:0b:ab:
c0:e5:70:62:ba:fe:d9:27:b4:ad:df:b8:a6:20:6c:
70:58:23:ca:76:2a:7c:a2:0e:01:a1:53:9c:f9:b5:
42:23:66:2a:01:69:fd:80:5b:19:cc:56:3f:79:39:
46:6e:f8:67:6c:29:6d:37:28:ba:89:43:e9:1f:f0:
8e:c0:04:3b:86:77:1e:3e:f5:f7:aa:1f:c8:70:b2:
56:6c:c8:d4:08:5d:dc:88:dc:ee:4d:7e:9c:84:04:
c9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:85:D2:D3:28:BC:68:D3:95:AB:3E:39:96:DA:24:35:E5:BE:3F:26
X509v3 Authority Key Identifier:
keyid:4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e7:22:90:bf:c8:6b:3f:29:64:bc:01:83:67:3e:71:18:5a:
98:f0:c2:52:68:80:20:26:e3:62:fb:7c:1c:d0:6f:3e:59:c1:
a6:c6:80:4b:f7:b0:b8:8b:ab:64:e7:f1:36:63:00:e4:d1:62:
ea:fe:e4:81:fb:c0:7e:0c:b7:8d:b9:c9:e8:07:df:b7:ca:3c:
33:98:7f:18:a5:63:8a:03:d6:4f:8d:e9:0e:00:26:3b:39:8c:
36:92:a3:db:96:92:89:94:f5:28:02:9f:d3:75:aa:54:bf:37:
f3:85:71:81:ad:42:c3:0d:af:14:8e:97:d1:38:96:d5:16:b3:
b9:30:ea:59:d9:ce:e5:da:b3:88:6b:b2:af:3f:ee:ee:10:ce:
d3:be:b6:a9:95:11:67:83:5c:b8:eb:9a:18:95:04:d0:a5:84:
5a:3d:13:bf:67:91:c1:93:c3:e3:92:92:7d:95:a1:1c:80:2c:
d2:b5:d6:fb:fc:56:38:e3:cb:fb:4e:10:20:e5:ed:3c:fb:7a:
39:8a:52:3b:f9:83:94:0b:5e:f0:80:5d:1f:37:0f:2f:e7:72:
8b:f9:27:40:87:f6:81:b9:63:63:9e:9c:c8:92:28:65:8f:46:
28:58:59:0f:94:81:df:68:bb:1b:3d:f8:82:92:68:5d:55:4e:
f3:b8:17:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:10:43 2025 by rpki-client