Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json)
Hash identifier: sk1scE6u50kWat/d3AUz8AyS5y5EY4tYTZRs+jOAl40=
Subject key identifier: A8:42:A8:97:16:F8:C9:3B:13:EA:55:EB:69:3D:60:3B:1B:DB:D4:82
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial: 0199FF22C5518094785A84749378CDDA3689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
Manifest number: 0A41
Signing time: Mon 20 Oct 2025 01:01:32 +0000
Manifest this update: Mon 20 Oct 2025 01:01:32 +0000
Manifest next update: Tue 21 Oct 2025 01:01:32 +0000
Files and hashes: 1: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: kG+uxigrL0yoQD3SGg+o7U4aVMEnikOJCiiLdcnUn1I=)
2: hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa (hash: +x4Da87nsosWbKf7z+mFyLUyvFKLPH55B5hxOSqBXYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:c5:51:80:94:78:5a:84:74:93:78:cd:da:36:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
Validity
Not Before: Oct 20 01:01:32 2025 GMT
Not After : Oct 21 01:01:32 2025 GMT
Subject: CN=a842a89716f8c93b13ea55eb693d603b1bdbd482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:26:8a:fd:b9:cc:12:76:3e:b6:c2:c4:95:
4e:ca:a7:c8:62:1f:c1:34:c6:49:a1:0b:29:31:97:
a6:a0:c4:27:78:d9:1a:45:6e:6a:08:4b:f8:9a:a6:
80:ab:51:1b:f8:34:76:b9:8b:95:49:cd:2e:93:cb:
01:86:fd:7a:da:66:94:59:f6:15:0c:81:64:59:db:
12:5d:df:af:d0:42:e5:a5:54:34:61:ed:54:ed:65:
1b:b2:aa:a6:70:6b:e9:6c:02:2d:0c:43:08:90:a5:
ab:87:0f:5d:af:12:d2:3d:f6:e4:57:be:dc:e2:71:
ba:6f:ca:f9:c7:a9:1c:07:a2:74:20:f9:d1:77:b3:
f0:6a:cb:f8:82:91:3a:6f:a3:f9:7b:c9:91:17:e1:
bd:ee:a3:86:84:07:17:85:df:de:1f:93:b7:50:d3:
6a:d6:04:dd:04:07:9f:95:3a:30:e3:1a:2a:b9:62:
3a:30:ea:a1:6b:b0:8d:af:0d:82:0a:2c:60:0d:be:
62:f1:82:13:86:2b:b6:bb:ca:b8:3b:f5:2c:4a:57:
df:3b:48:fd:d8:33:ab:8d:c5:85:a0:c9:f0:9b:80:
87:f1:dc:0a:87:87:1c:88:d8:5d:f5:41:c5:56:02:
71:7f:f5:d1:9a:6b:9c:09:a7:93:12:5e:0f:69:04:
10:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:42:A8:97:16:F8:C9:3B:13:EA:55:EB:69:3D:60:3B:1B:DB:D4:82
X509v3 Authority Key Identifier:
keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c6:5b:d3:e1:95:99:e7:61:e8:73:e7:81:46:fd:de:2d:d7:
45:26:60:76:7d:02:ac:09:e3:b6:46:a6:04:e1:f8:e7:fd:e9:
cf:0c:88:de:52:c8:9a:ad:0a:f7:4c:ab:e0:04:b3:3e:5c:0e:
e6:75:8d:e6:6b:a0:4a:3c:51:cb:82:11:4e:78:d4:63:1d:67:
21:6b:49:e6:7c:f8:62:72:1f:ee:db:5d:0e:a8:a2:12:a8:27:
51:4b:93:30:41:2a:0e:b2:f9:31:10:90:89:6e:3a:d3:6f:4d:
c7:d3:83:b3:c0:67:f9:d9:48:6e:5d:58:5e:1f:64:7e:03:4b:
6d:7c:f6:fb:1c:be:58:76:c9:d2:df:1c:2a:75:65:88:fb:cc:
93:bc:e4:1d:4b:52:ae:6f:55:6b:90:c4:a1:b5:ad:9a:40:3e:
38:b8:97:98:40:44:30:38:04:9a:c0:59:cb:73:ed:9f:4c:9e:
f7:67:35:77:f5:2b:8f:03:4f:53:0e:45:f5:13:31:f0:37:65:
25:42:5e:bb:e2:58:a1:e8:e6:0b:cd:ba:7c:f3:be:c6:40:66:
c8:57:32:ac:79:f6:d6:ad:ed:09:7a:e3:16:b1:b9:75:1c:32:
bd:8e:97:72:4e:bc:e8:ad:15:ce:b0:32:42:1b:8f:ed:4a:61:
73:61:a2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:43 2025 by rpki-client