Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json)
Hash identifier: RcZcviqcS31Nu2W21fWvqU6IqUyrWj+qKhapvSpG8Kw=
Subject key identifier: 0F:6E:0E:B0:02:08:89:DF:2B:B1:C3:B2:D4:5F:CF:75:83:79:E5:60
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial: 0196BAED1765788FE8C55D12AF3E906D0567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
Manifest number: 0890
Signing time: Sat 10 May 2025 16:00:22 +0000
Manifest this update: Sat 10 May 2025 16:00:22 +0000
Manifest next update: Sun 11 May 2025 16:00:22 +0000
Files and hashes: 1: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: xDceHXOwpTYLX585+5xaf8py3C+sGmxo5vEMLW81qrY=)
2: hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa (hash: +x4Da87nsosWbKf7z+mFyLUyvFKLPH55B5hxOSqBXYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:17:65:78:8f:e8:c5:5d:12:af:3e:90:6d:05:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
Validity
Not Before: May 10 16:00:22 2025 GMT
Not After : May 11 16:00:22 2025 GMT
Subject: CN=0f6e0eb0020889df2bb1c3b2d45fcf758379e560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3f:66:34:c2:e8:d1:4d:a5:f0:24:dd:6f:db:
ee:d5:65:34:42:5c:0d:d3:a7:41:0d:e6:41:c1:c9:
e0:4f:ca:53:e8:25:ef:d2:71:3d:10:cd:6d:5d:f2:
f6:64:87:8a:09:73:e9:60:c0:f0:0f:7e:60:dc:30:
fa:68:f3:0d:1f:6c:ca:e6:a4:47:20:74:0f:88:c4:
c1:12:b0:b1:ff:9f:2f:dc:4c:a8:47:6f:a4:55:54:
92:c2:e0:3b:76:61:28:0a:ee:b6:55:42:f7:26:a7:
60:ca:0a:b6:93:79:20:2b:5e:e6:08:95:af:dc:b2:
8b:cf:24:ba:8c:87:ea:9d:9d:61:9a:4d:94:1b:6f:
28:10:75:58:93:00:de:a6:7f:18:51:bb:ae:9a:21:
50:d4:01:04:40:23:55:a3:28:19:18:a2:90:fc:b8:
fa:06:92:ff:f2:50:96:e6:c8:1a:d5:0a:29:ed:79:
aa:e9:2e:a3:c3:af:09:95:05:b8:5d:fe:06:cc:39:
2f:2c:7d:ab:3f:42:69:8d:cf:0e:c0:1c:0a:97:52:
06:d5:ef:46:92:f3:90:54:cb:a0:c3:92:eb:2f:72:
45:df:08:ea:b4:fc:eb:96:1b:ed:fa:45:42:6f:9e:
5d:b8:23:a2:20:6e:eb:8f:f0:91:ea:d5:f0:34:bd:
48:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6E:0E:B0:02:08:89:DF:2B:B1:C3:B2:D4:5F:CF:75:83:79:E5:60
X509v3 Authority Key Identifier:
keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:59:54:c5:b4:e6:f3:03:5d:62:16:82:96:bd:ef:e7:be:2e:
a9:a1:1a:89:c9:6e:14:c3:7b:4f:62:89:65:ac:d2:7f:df:a6:
eb:90:ca:ff:44:fe:e0:4d:8e:7b:f7:b8:15:6b:f5:06:d5:62:
b4:69:8a:e9:41:d3:cb:36:8d:9a:a3:b1:0f:85:21:4d:ae:c1:
75:26:8c:9b:a7:e4:29:d6:4a:9c:83:5f:ad:3b:c8:d0:c9:e3:
85:1a:59:c2:6c:ed:b4:62:36:ed:91:8a:a5:ae:7a:d8:73:0f:
02:67:1c:58:18:8e:34:bb:65:bd:67:eb:50:e0:57:c1:93:fe:
07:39:35:f4:d8:18:69:28:e9:f0:46:51:fb:b1:4c:e3:46:1a:
b8:98:db:3d:97:02:74:50:f8:2c:db:d2:22:2d:38:04:ea:71:
c8:9b:f3:58:0d:02:e5:27:38:9b:cb:e5:71:ff:92:0d:52:a8:
8a:81:e0:c0:b7:9a:e4:dd:fa:6c:b1:f3:d3:de:af:c5:0a:5f:
ff:3a:b0:40:60:03:71:f0:9a:02:08:ba:a3:7a:27:2a:5b:28:
11:62:ca:f8:96:90:97:98:19:69:af:16:67:31:83:74:f3:1c:
1b:4f:bc:90:ec:ed:08:76:99:4c:c1:b7:72:3b:46:1f:a3:b5:
25:21:53:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa67RdleI/oxV0Srz6QbQVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTMyMTZhYzlkOTIxNzMzYmYzZjQ4NDM5M2EzNDQ5NWMw
ZTJhNjcwHhcNMjUwNTEwMTYwMDIyWhcNMjUwNTExMTYwMDIyWjAzMTEwLwYDVQQD
EygwZjZlMGViMDAyMDg4OWRmMmJiMWMzYjJkNDVmY2Y3NTgzNzllNTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj9mNMLo0U2l8CTdb9vu1WU0QlwN
06dBDeZBwcngT8pT6CXv0nE9EM1tXfL2ZIeKCXPpYMDwD35g3DD6aPMNH2zK5qRH
IHQPiMTBErCx/58v3EyoR2+kVVSSwuA7dmEoCu62VUL3Jqdgygq2k3kgK17mCJWv
3LKLzyS6jIfqnZ1hmk2UG28oEHVYkwDepn8YUbuumiFQ1AEEQCNVoygZGKKQ/Lj6
BpL/8lCW5sga1Qop7Xmq6S6jw68JlQW4Xf4GzDkvLH2rP0Jpjc8OwBwKl1IG1e9G
kvOQVMugw5LrL3JF3wjqtPzrlhvt+kVCb55duCOiIG7rj/CR6tXwNL1IowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9uDrACCInfK7HDstRfz3WDeeVgMB8GA1UdIwQY
MBaAFEhTIWrJ2SFzO/P0hDk6NElcDipnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDct
MjgyOGM0OGUzNTk5LzEvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDctMjgyOGM0OGUzNTk5
LzEvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFlUxbTm
8wNdYhaClr3v574uqaEaicluFMN7T2KJZazSf9+m65DK/0T+4E2Oe/e4FWv1BtVi
tGmK6UHTyzaNmqOxD4UhTa7BdSaMm6fkKdZKnINfrTvI0MnjhRpZwmzttGI27ZGK
pa562HMPAmccWBiONLtlvWfrUOBXwZP+Bzk19NgYaSjp8EZR+7FM40YauJjbPZcC
dFD4LNvSIi04BOpxyJvzWA0C5Sc4m8vlcf+SDVKoioHgwLea5N36bLHz096vxQpf
/zqwQGADcfCaAgi6o3onKlsoEWLK+JaQl5gZaa8WZzGDdPMcG0+8kOztCHaZTMG3
cjtGH6O1JSFTFg==
-----END CERTIFICATE-----
Generated at Sat May 10 19:02:44 2025 by rpki-client