Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json)
Hash identifier: sn3+CENIixbqFbO2lFpaJxlQi9n/KoxfRhWW3HgIE5k=
Subject key identifier: E8:EF:0A:1C:A9:74:AF:16:F6:8A:1B:B8:3F:9E:5E:6B:7C:AA:58:D0
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial: 0198D5BC3E9042BDC1ABEDB1DA7165776F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
Manifest number: 09A7
Signing time: Sat 23 Aug 2025 07:02:20 +0000
Manifest this update: Sat 23 Aug 2025 07:02:20 +0000
Manifest next update: Sun 24 Aug 2025 07:02:20 +0000
Files and hashes: 1: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: 1b9OWDdcwcc63LYIJJ/hMass1J2BGpb6CZe+SwDRVeY=)
2: hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa (hash: +x4Da87nsosWbKf7z+mFyLUyvFKLPH55B5hxOSqBXYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3e:90:42:bd:c1:ab:ed:b1:da:71:65:77:6f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
Validity
Not Before: Aug 23 07:02:20 2025 GMT
Not After : Aug 24 07:02:20 2025 GMT
Subject: CN=e8ef0a1ca974af16f68a1bb83f9e5e6b7caa58d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:10:4c:aa:df:ef:e5:d4:f3:6d:69:cf:18:
1d:04:26:6d:9a:13:82:92:a6:b7:e3:3e:9c:3f:f8:
b2:89:4c:84:2b:50:ca:c8:ff:f1:8b:d0:a0:37:64:
7f:c7:b8:3b:3b:3d:35:5e:4d:b4:ba:e2:24:bf:5f:
4d:97:cc:cc:84:9b:49:e5:1b:70:e3:2c:d6:53:48:
aa:52:0c:46:7d:3a:90:8d:23:35:4c:56:2b:3b:0a:
35:9d:b9:63:2f:4a:f6:5b:4f:01:c0:6f:86:3b:05:
23:86:a8:13:d7:31:d8:f0:86:89:3b:d9:3c:d4:8a:
75:bd:f3:27:90:12:11:fc:43:ac:55:1f:c9:36:ae:
a1:72:af:4e:00:9a:a6:f6:60:a3:d7:e9:56:b1:ba:
50:3b:7d:0c:51:10:7f:46:30:15:67:a7:8f:9c:e2:
2d:e5:c8:de:71:e4:aa:0d:4e:63:65:13:c2:f8:da:
bb:91:ca:6c:71:6c:be:8d:41:96:d3:31:7a:39:6f:
f9:6c:98:fa:49:bf:78:35:5a:5a:1e:62:96:89:fe:
e3:61:9b:f3:ec:5f:3a:e8:5f:84:71:c2:4c:85:dd:
9a:d5:18:e2:87:31:9a:1a:7a:df:dd:ae:93:e9:95:
41:7c:58:4d:f5:77:50:e1:6a:84:5e:70:2f:8f:19:
c1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EF:0A:1C:A9:74:AF:16:F6:8A:1B:B8:3F:9E:5E:6B:7C:AA:58:D0
X509v3 Authority Key Identifier:
keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e4:65:e6:ef:23:20:c1:09:7e:f6:12:b6:49:a0:72:f6:cf:
21:91:85:67:97:f0:bc:a7:d7:8b:ce:32:cf:fa:fa:19:86:01:
bd:7b:b3:ae:40:2c:64:ff:d8:35:d2:d1:bd:33:7c:aa:fd:3a:
c6:43:eb:50:9a:24:5a:f6:ab:c7:a5:71:4c:01:15:81:58:df:
21:14:5a:59:0b:10:9b:fb:fe:0e:50:05:7b:28:6c:e8:ad:79:
da:95:8f:24:f6:31:31:f8:b5:3f:29:9b:d4:fe:d8:93:ac:c4:
5a:d7:00:69:1c:59:ec:38:f6:2d:78:b4:80:fc:d6:ce:79:54:
34:9c:a2:f9:92:25:d7:8a:e7:fa:6a:6f:dd:4f:2a:4f:b8:b8:
5c:64:70:5a:6c:c2:33:d1:1d:6e:12:6b:d6:4b:82:a3:26:dc:
c9:41:b1:6e:6c:40:62:35:b0:99:98:6d:67:bd:ec:c9:87:ba:
b1:8f:fb:60:ba:bc:5a:50:74:7d:bb:1b:f7:11:0c:57:c5:3b:
2f:9f:60:aa:09:e9:51:95:76:d5:31:91:21:63:1f:31:ff:25:
55:9b:a0:d6:f1:07:a8:b0:05:ab:db:26:11:28:8f:39:24:f6:
15:de:51:fb:96:21:bf:05:f9:89:a1:3f:1d:d1:fd:51:9c:b4:
93:f7:64:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:49 2025 by rpki-client