
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
File: SFNVcGg2xtB8f9JdW1nbC22JT7U.mft (raw, json)
Hash identifier: /RoVniWKPaXo+15cK4axMMmeBwuWgfepUKgjkj/V9SA=
Subject key identifier: 3E:E2:3F:74:A3:DC:F3:1A:D6:DA:80:96:E4:68:C9:EB:7C:3E:1F:16
Authority key identifier: 48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
Certificate issuer: /CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
Certificate serial: 0198D5BBD507A62B043C9DB0A9F44967EEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
Manifest number: 09E4
Signing time: Sat 23 Aug 2025 07:01:53 +0000
Manifest this update: Sat 23 Aug 2025 07:01:53 +0000
Manifest next update: Sun 24 Aug 2025 07:01:53 +0000
Files and hashes: 1: SFNVcGg2xtB8f9JdW1nbC22JT7U.crl (hash: ZkzPBqzZLTNDOsSsf3clG2zYK98rs7yOXqdYGQRre5k=)
2: xMvpgjkxKbx_nJXqKUz8HP8cBlY.roa (hash: xpvtl/jAMstPAGZTh7RwpFcbxDqkgPOXgahD3aZqXp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d5:07:a6:2b:04:3c:9d:b0:a9:f4:49:67:ee:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
Validity
Not Before: Aug 23 07:01:53 2025 GMT
Not After : Aug 24 07:01:53 2025 GMT
Subject: CN=3ee23f74a3dcf31ad6da8096e468c9eb7c3e1f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:44:05:0a:ca:b7:eb:f9:56:5f:9a:8c:28:93:
f9:72:55:7a:33:4e:e3:8b:43:a3:bf:a2:d5:c3:44:
6d:31:62:6f:a9:88:19:a6:19:44:70:58:cd:21:d0:
06:b5:05:0a:a0:86:bc:7a:b4:b0:15:e5:14:d4:1e:
49:ad:52:91:d2:67:b5:9c:d8:4b:55:dc:cf:10:aa:
19:e4:9d:96:e1:9f:7a:e4:bd:96:f6:1d:56:ff:4d:
50:74:d3:53:cb:d6:d0:9c:3a:56:98:8e:ce:e9:a0:
16:59:35:27:23:ff:60:30:16:fd:15:3f:1d:99:5b:
fd:45:4a:ea:5b:38:a6:5f:a2:b9:59:43:c1:9d:15:
5e:dc:5b:01:c3:70:3d:3b:cb:c9:b2:f3:de:61:de:
7a:b9:a9:be:40:19:53:03:fb:e4:6f:2f:7a:b0:93:
88:6e:0c:ff:73:ac:ac:96:f8:c6:81:0c:1f:2a:59:
c7:b2:c7:1b:0d:45:91:c4:0d:c9:0f:8a:e6:43:cd:
74:ff:b1:d2:92:30:56:5c:d3:00:f8:5f:b2:1e:6a:
7e:11:9c:c3:dd:5c:ea:94:0e:79:f5:d8:24:11:17:
ba:5c:b7:8d:13:e7:89:dd:82:6b:84:9f:85:0a:34:
dd:76:ee:57:eb:15:21:a8:49:1f:29:3e:cf:37:84:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E2:3F:74:A3:DC:F3:1A:D6:DA:80:96:E4:68:C9:EB:7C:3E:1F:16
X509v3 Authority Key Identifier:
keyid:48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:71:57:28:6e:0c:7c:3e:ed:11:af:1d:61:59:cc:3e:ce:a0:
ff:2b:9b:e6:e6:1c:ba:9d:d6:90:f3:94:9e:86:99:73:0d:09:
69:3b:1f:c3:2d:5e:7b:55:07:df:26:9c:54:a9:04:bb:5a:7e:
21:c6:40:37:5a:c3:76:f6:71:ea:d8:49:e0:99:eb:3d:ed:f6:
c0:75:29:2f:21:bc:f3:d2:f7:83:f8:43:29:64:fe:67:26:c2:
6b:08:b5:34:d9:7b:5c:9f:40:f2:ae:05:74:52:a7:84:93:f0:
a5:08:1a:0c:11:ec:6c:7d:5f:94:9e:5b:2b:88:d9:92:05:63:
da:36:c4:2a:04:7e:5b:13:79:bf:84:9b:35:bb:e3:d0:5d:b1:
c8:aa:7f:46:12:24:2d:d3:9c:be:f3:bb:15:6b:fb:04:b0:b6:
9c:12:a9:84:3c:71:92:c9:91:3e:98:a5:8e:96:b1:6e:c0:3f:
f0:7a:8d:9d:61:ae:12:e5:09:8d:ea:3f:44:24:36:2f:af:3a:
9c:d6:1e:f4:af:07:80:62:65:b4:35:bc:2c:fc:4f:05:0d:10:
93:a1:d3:d0:5f:e3:48:17:09:f3:57:82:9d:3e:36:af:8a:ad:
82:c0:ca:e7:cf:bc:ec:07:35:cb:68:5f:17:5c:06:1b:00:9a:
62:67:81:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:41 2025 by rpki-client