Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json)
Hash identifier: DYJZYYrItOlh+Rexwu8FomOD2dF4gSY3wU3mCcDdIk0=
Subject key identifier: CE:88:24:D2:8D:A5:2D:E1:E4:6D:72:F7:52:6B:7C:9C:22:CF:64:C4
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial: 0197B7EA6B9540129BE296554AF438164A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
Manifest number: 0913
Signing time: Sat 28 Jun 2025 19:01:22 +0000
Manifest this update: Sat 28 Jun 2025 19:01:22 +0000
Manifest next update: Sun 29 Jun 2025 19:01:22 +0000
Files and hashes: 1: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: 5VwOYxJSvegBUtt4YRGZN/3d84BP0/UWc8BNxnvXH+s=)
2: hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa (hash: +x4Da87nsosWbKf7z+mFyLUyvFKLPH55B5hxOSqBXYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:6b:95:40:12:9b:e2:96:55:4a:f4:38:16:4a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
Validity
Not Before: Jun 28 19:01:22 2025 GMT
Not After : Jun 29 19:01:22 2025 GMT
Subject: CN=ce8824d28da52de1e46d72f7526b7c9c22cf64c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:62:dd:b4:6f:a3:59:3f:4b:88:ec:48:d9:c2:
a4:84:df:d4:29:40:27:95:aa:6c:91:4d:17:f5:37:
b7:b9:f4:19:a9:a3:c6:c2:6c:6a:48:ac:ea:d3:ce:
67:02:90:fd:dc:0e:87:f0:91:55:7d:d6:b5:77:5a:
86:87:dd:bd:4a:ff:97:bc:ae:e1:5e:10:c6:96:03:
42:8f:73:0a:fc:e5:fd:58:71:a6:b1:74:b7:68:20:
a1:0f:bd:e8:96:88:0d:50:2b:f8:cd:fa:71:89:40:
61:67:d8:33:42:2a:50:23:d7:06:92:e6:24:86:09:
1c:ab:88:d1:0a:9a:52:26:e0:53:a7:cb:74:7d:30:
ff:92:0a:00:ba:6b:f1:e9:68:f3:cf:4c:7c:7b:07:
60:47:f7:83:b0:fe:5a:e2:74:9f:c5:2e:20:7d:88:
5c:09:2d:91:c1:fa:44:8e:54:76:fd:ac:69:c7:b7:
60:b2:44:95:d3:28:85:a5:8c:af:00:1e:b7:48:dc:
0a:0c:5e:70:00:95:c0:11:af:22:30:d8:47:fe:a0:
98:0e:38:79:f6:03:fb:e8:87:91:35:aa:85:3c:00:
aa:31:bd:7b:b1:b8:14:91:11:18:de:30:41:90:16:
ea:a1:63:eb:98:6c:9a:b6:82:1f:17:84:15:88:98:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:88:24:D2:8D:A5:2D:E1:E4:6D:72:F7:52:6B:7C:9C:22:CF:64:C4
X509v3 Authority Key Identifier:
keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7a:5d:9a:b4:cf:7a:81:b5:4f:59:08:a6:5d:24:77:83:bc:
49:e5:1c:90:df:0a:10:d9:10:01:10:fa:87:8a:1c:d9:d7:ed:
b6:84:ef:9a:96:87:33:52:21:f3:4a:37:27:77:56:cc:28:87:
60:79:c2:aa:08:15:cb:d8:81:0d:c8:54:37:44:ff:aa:3f:6e:
14:d8:07:2c:7a:33:bc:a8:57:c5:4d:73:4b:70:42:31:ff:0e:
54:6d:a8:5c:a5:c5:dc:b0:9b:bc:af:1d:35:de:e9:4d:87:35:
b5:39:08:50:64:40:97:71:37:8a:26:27:41:08:ea:e0:af:d5:
c6:38:02:f9:9f:4e:aa:bd:a9:e6:36:d6:e5:cc:3f:4a:e7:c8:
37:6f:85:52:f4:91:33:10:fe:8d:81:38:fb:ed:a6:9a:85:44:
96:61:47:50:5f:5c:2c:e4:e9:25:eb:3d:d2:45:d5:0f:05:74:
a9:74:86:29:87:12:c6:5d:29:8e:fd:06:c3:5e:24:dd:bc:3c:
0f:8c:ed:fe:63:b1:2c:44:e1:a1:57:cb:19:8e:fb:19:5b:bb:
7d:3a:56:c4:6d:3a:42:a0:30:f4:8b:76:28:82:57:7d:be:09:
76:fc:ba:3e:2f:ce:84:19:1e:b5:a5:4c:d1:35:48:88:ac:c8:
8d:29:a2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:17 2025 by rpki-client