Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
File: SFk-QNpaUvMi21oEwg-0htThVQI.mft (raw, json)
Hash identifier: kAEOVSsUu79Q5vB12kp789jIjrWnCO97jcexkSN6KUE=
Subject key identifier: 23:BE:4C:D0:F4:80:9B:BE:F3:43:AA:F6:FB:4C:52:48:71:32:86:24
Authority key identifier: 48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
Certificate issuer: /CN=48593e40da5a52f322db5a04c20fb486d4e15502
Certificate serial: 0198D6608EFCBF10653A27211CA776545B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
Manifest number: 1305
Signing time: Sat 23 Aug 2025 10:01:48 +0000
Manifest this update: Sat 23 Aug 2025 10:01:48 +0000
Manifest next update: Sun 24 Aug 2025 10:01:48 +0000
Files and hashes: 1: SFk-QNpaUvMi21oEwg-0htThVQI.crl (hash: /IVeS0gxmv0mtLi9naClSun8VQIaJM7/gjRYmHlw6sM=)
2: Xe1gxuRIIOL95lwNFDlJJ4LeD98.roa (hash: E3ThdKoNF/zSVQO/0Rh8O4e1tJqwTsPdKIVV0WmD0l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8e:fc:bf:10:65:3a:27:21:1c:a7:76:54:5b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48593e40da5a52f322db5a04c20fb486d4e15502
Validity
Not Before: Aug 23 10:01:48 2025 GMT
Not After : Aug 24 10:01:48 2025 GMT
Subject: CN=23be4cd0f4809bbef343aaf6fb4c524871328624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1e:26:7c:f9:99:a7:58:6d:27:41:c4:db:25:
61:22:eb:a5:c7:98:6e:99:9c:33:17:3c:9f:2b:1f:
9f:16:fc:58:ee:ab:ff:1e:08:32:48:d3:2e:14:b8:
d0:12:67:fd:51:bf:09:fe:b8:34:78:8e:7c:af:5f:
e0:83:e8:5b:f8:54:a7:9f:1c:58:59:d7:91:4e:66:
be:9c:55:55:b7:38:13:cc:09:fd:22:86:f1:45:1e:
39:14:f1:ea:66:ac:13:f7:ab:f7:2f:c7:04:ff:6a:
5c:00:21:14:6c:51:b1:78:47:0f:3a:59:93:53:75:
d0:75:17:ba:35:78:09:3c:27:dd:de:e2:a3:c9:ca:
7a:7f:6c:dd:16:22:ec:62:33:4e:02:88:d4:57:31:
fa:34:c1:12:9e:b9:7e:e0:23:a9:e4:5e:4a:e0:37:
06:fe:46:d3:8f:2c:87:e5:03:41:c6:ce:bf:5c:93:
65:e5:f1:46:30:df:f3:26:1c:45:6f:0f:a0:c6:d8:
49:f7:ca:70:14:e8:a0:0a:89:b2:06:4b:1b:3d:db:
be:8d:76:e8:2b:8e:c3:d8:25:4d:2e:6c:ae:6f:72:
40:59:e9:f6:c7:89:63:ce:6a:70:44:0c:24:6d:d9:
6e:a5:9d:02:fb:6f:1b:8f:51:73:ad:f4:e5:b6:d0:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BE:4C:D0:F4:80:9B:BE:F3:43:AA:F6:FB:4C:52:48:71:32:86:24
X509v3 Authority Key Identifier:
keyid:48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:38:a7:ca:4c:af:e2:3d:f3:2d:d1:2a:fc:d4:d2:4e:4d:02:
5f:3a:33:0f:b5:7d:00:4a:dc:bb:58:f2:aa:ff:7b:76:b8:3c:
57:ba:77:2b:64:58:97:c6:52:85:47:57:62:ee:e4:96:84:c9:
28:18:22:4a:c9:b1:92:4f:b8:cd:9e:1e:c4:1e:44:2f:4f:09:
f1:43:bf:09:ac:dc:76:70:0a:d2:70:c6:90:59:ec:31:63:db:
ae:6b:ad:af:cf:12:eb:b4:07:f0:dc:34:e7:67:f1:47:94:ad:
39:9f:dc:84:09:ef:25:1a:8f:8f:85:26:1c:57:15:b6:c4:86:
40:56:c6:95:ad:71:98:2b:7d:75:89:08:90:13:9d:8e:fe:40:
76:5c:ee:7e:27:9f:fd:3a:72:d8:6a:b4:f1:4b:58:07:ac:64:
48:a7:98:43:58:5c:0f:c5:dc:cb:3a:6d:4b:b0:34:c3:56:67:
38:94:e1:d5:98:11:a3:15:8a:0b:2d:3c:49:fd:16:91:b5:51:
38:54:37:81:a4:f0:56:3a:2e:01:ac:94:15:fe:a6:44:4d:1a:
a8:39:2e:2f:7e:45:34:88:5a:f4:9b:ea:ff:ca:63:61:9a:2f:
22:97:58:3a:61:29:49:87:16:b5:4c:19:c5:b5:cd:8b:e6:c4:
5d:ca:ed:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:34 2025 by rpki-client