Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
File: SFF8v1-HKM7CSvPC6G7PuANT5g0.mft (raw, json)
Hash identifier: p2aOt7041Np3d/h621qIwhCyiPQLT1kZ+u4YoATKyjQ=
Subject key identifier: F6:36:F5:8E:C2:31:8A:48:E5:CA:3F:E7:75:7F:0A:67:38:25:BF:95
Authority key identifier: 48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
Certificate issuer: /CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Certificate serial: 019A00359E4E66B25B9FA4E28E8E9F334B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
Manifest number: 0DC4
Signing time: Mon 20 Oct 2025 06:01:45 +0000
Manifest this update: Mon 20 Oct 2025 06:01:45 +0000
Manifest next update: Tue 21 Oct 2025 06:01:45 +0000
Files and hashes: 1: SFF8v1-HKM7CSvPC6G7PuANT5g0.crl (hash: +dVR1DMmk8wp+hTveYPp8yIwuOTg7H6pn1OhWdm2ygE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:9e:4e:66:b2:5b:9f:a4:e2:8e:8e:9f:33:4b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Validity
Not Before: Oct 20 06:01:45 2025 GMT
Not After : Oct 21 06:01:45 2025 GMT
Subject: CN=f636f58ec2318a48e5ca3fe7757f0a673825bf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:cd:2c:a6:82:04:bc:96:31:c4:ca:3d:6d:
50:49:b7:3d:d4:89:31:a0:89:e3:09:42:64:1d:d2:
29:39:fe:4d:51:da:82:9d:87:32:78:50:2b:08:a8:
02:a8:0f:21:41:c1:bc:65:46:0e:fe:3c:37:63:04:
e2:a2:2c:be:7f:80:df:21:13:c8:ad:11:50:12:a7:
e6:1b:aa:11:8b:33:3c:a1:b8:82:06:97:18:74:d2:
24:75:6d:47:21:c8:63:cb:11:a9:e1:e2:4b:c4:95:
f6:aa:b6:70:01:6c:a2:ae:8c:c7:7a:f4:b0:31:92:
1e:68:4e:69:e4:19:50:37:5d:31:0a:bc:c5:51:b8:
30:98:c7:e5:70:40:11:be:86:ce:59:76:e0:5f:08:
3f:25:75:53:eb:29:95:5f:aa:e4:1e:2f:ac:96:12:
30:ff:b7:f6:68:78:f1:0d:1c:b6:e5:dc:b7:f8:04:
2f:2b:35:f2:82:3b:01:18:9d:4c:42:84:66:00:b6:
b9:23:1c:99:ac:f3:7b:ed:d0:04:a3:d3:52:2a:8e:
09:72:16:d1:7b:24:c5:9c:64:95:2e:41:01:a4:ac:
21:44:40:ad:f5:a5:23:64:bd:33:87:04:82:8b:cb:
4a:fa:dc:c5:08:6d:e5:f6:70:6f:1c:1b:77:7d:8f:
5d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:36:F5:8E:C2:31:8A:48:E5:CA:3F:E7:75:7F:0A:67:38:25:BF:95
X509v3 Authority Key Identifier:
keyid:48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:13:3a:aa:f7:1b:f3:8e:f6:9b:84:6d:4e:7e:cd:b7:02:dc:
96:23:41:71:bf:2b:d7:8a:65:2c:ea:5d:e1:64:2f:2d:ab:23:
6f:87:16:10:e2:35:19:59:55:d5:a8:c6:d0:9f:57:e4:d1:70:
a7:3e:f2:3c:b1:b5:22:24:9f:ed:19:b6:ae:24:80:c4:54:8f:
9e:c5:de:11:48:73:a2:83:c3:c0:0e:5d:79:89:8e:be:af:66:
7b:0c:f8:24:bd:53:67:4c:05:a0:78:05:9a:62:a3:17:37:68:
55:b6:2d:38:5a:a0:16:bb:a4:86:af:40:f0:74:c1:86:58:42:
7d:da:17:3c:66:a3:e1:94:fc:4b:27:2c:12:2e:44:b3:0b:82:
11:0a:ed:d5:17:8a:55:a7:96:6e:52:e6:92:8f:22:d9:b0:2b:
15:40:2c:ae:f1:04:68:a4:f5:41:b1:86:d8:80:0c:cc:c3:d7:
54:58:c3:5b:63:68:ab:00:8d:22:05:7a:59:ad:33:17:75:c1:
76:d0:3c:35:b8:da:a9:39:a9:cb:bf:7b:92:69:1a:59:dd:0e:
ff:e9:2a:e5:4a:fe:b7:c6:69:d7:51:0b:4c:4a:d9:4d:40:5d:
14:00:72:86:c9:cc:9d:ea:0a:5e:d5:20:a0:87:85:8d:0c:28:
e2:0b:cb:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANZ5OZrJbn6Tijo6fM0t9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTE3Y2JmNWY4NzI4Y2VjMjRhZjNjMmU4NmVjZmI4MDM1
M2U2MGQwHhcNMjUxMDIwMDYwMTQ1WhcNMjUxMDIxMDYwMTQ1WjAzMTEwLwYDVQQD
EyhmNjM2ZjU4ZWMyMzE4YTQ4ZTVjYTNmZTc3NTdmMGE2NzM4MjViZjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom3NLKaCBLyWMcTKPW1QSbc91Ikx
oInjCUJkHdIpOf5NUdqCnYcyeFArCKgCqA8hQcG8ZUYO/jw3YwTioiy+f4DfIRPI
rRFQEqfmG6oRizM8obiCBpcYdNIkdW1HIchjyxGp4eJLxJX2qrZwAWyirozHevSw
MZIeaE5p5BlQN10xCrzFUbgwmMflcEARvobOWXbgXwg/JXVT6ymVX6rkHi+slhIw
/7f2aHjxDRy25dy3+AQvKzXygjsBGJ1MQoRmALa5IxyZrPN77dAEo9NSKo4JchbR
eyTFnGSVLkEBpKwhRECt9aUjZL0zhwSCi8tK+tzFCG3l9nBvHBt3fY9dtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPY29Y7CMYpI5co/53V/Cmc4Jb+VMB8GA1UdIwQY
MBaAFEhRfL9fhyjOwkrzwuhuz7gDU+YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZGOHYxLUhLTTdDU3ZQQzZHN1B1QU5UNWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZDJmMmQtYTQyNS00NGFiLTliNWQt
OGMzYjQwMjg1NTY2LzEvU0ZGOHYxLUhLTTdDU3ZQQzZHN1B1QU5UNWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZDJmMmQtYTQyNS00NGFiLTliNWQtOGMzYjQwMjg1NTY2
LzEvU0ZGOHYxLUhLTTdDU3ZQQzZHN1B1QU5UNWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxM6qvcb
8472m4RtTn7NtwLcliNBcb8r14plLOpd4WQvLasjb4cWEOI1GVlV1ajG0J9X5NFw
pz7yPLG1IiSf7Rm2riSAxFSPnsXeEUhzooPDwA5deYmOvq9mewz4JL1TZ0wFoHgF
mmKjFzdoVbYtOFqgFrukhq9A8HTBhlhCfdoXPGaj4ZT8SycsEi5EswuCEQrt1ReK
VaeWblLmko8i2bArFUAsrvEEaKT1QbGG2IAMzMPXVFjDW2NoqwCNIgV6Wa0zF3XB
dtA8NbjaqTmpy797kmkaWd0O/+kq5Ur+t8Zp11ELTErZTUBdFAByhsnMneoKXtUg
oIeFjQwo4gvLFg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:23 2025 by rpki-client