Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
File: SFF8v1-HKM7CSvPC6G7PuANT5g0.mft (raw, json)
Hash identifier: dCtNf+/mCJwKSHSBBEHZENpQiGbzEpLQFnzT+r5NRiA=
Subject key identifier: 11:96:5B:A3:94:DE:2D:95:9A:F6:DD:7C:C4:24:B0:4B:1F:84:D4:D0
Authority key identifier: 48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
Certificate issuer: /CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Certificate serial: 0196A0F69B2EB7467DE974C9BA8A92576AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
Manifest number: 0C05
Signing time: Mon 05 May 2025 15:00:38 +0000
Manifest this update: Mon 05 May 2025 15:00:38 +0000
Manifest next update: Tue 06 May 2025 15:00:38 +0000
Files and hashes: 1: SFF8v1-HKM7CSvPC6G7PuANT5g0.crl (hash: H/xsWvr1yq8qLTTF3RQFhA6UC9XZrbE7gN7zfXHT67Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:9b:2e:b7:46:7d:e9:74:c9:ba:8a:92:57:6a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Validity
Not Before: May 5 15:00:38 2025 GMT
Not After : May 6 15:00:38 2025 GMT
Subject: CN=11965ba394de2d959af6dd7cc424b04b1f84d4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:68:6f:3e:a8:d1:d0:48:8d:e7:37:98:9d:
c6:bd:0d:82:46:eb:ff:99:13:c7:0f:c9:80:99:7f:
84:05:b6:14:39:a9:5c:b9:5f:b9:0b:81:47:ac:02:
e4:ed:da:02:92:06:d6:39:92:bb:ac:b8:95:bb:ae:
f7:f6:2a:f8:b3:47:77:ab:0d:67:de:88:63:d7:a6:
0a:79:28:e6:4c:8c:0a:b5:d9:e4:4d:1b:63:19:0d:
4f:5c:0d:16:24:62:aa:47:4a:b9:c8:56:90:c1:e6:
3c:2a:57:89:c1:ed:c5:84:b3:45:79:0a:83:96:0e:
50:9a:69:4c:e5:7a:f8:06:e5:d8:02:9c:75:1c:9f:
a2:1f:c3:69:70:ba:f1:91:f5:36:e1:e3:a2:bb:c7:
fd:5d:0f:38:f4:8c:aa:7e:9e:7f:f9:3f:3e:89:b2:
8a:eb:38:dc:07:42:95:ec:2c:0d:20:a8:33:4e:d6:
cf:39:dd:6d:cb:e2:bb:4e:ad:72:94:72:cf:ba:2b:
ce:85:0b:60:3a:76:e9:02:6b:b4:6a:d4:3a:10:d7:
a3:d7:e9:60:02:06:ca:39:2c:44:ab:b2:e1:bc:92:
09:83:a0:2f:ec:99:c7:73:ff:11:49:64:27:d4:23:
20:64:cf:e7:15:66:46:fd:ce:8b:53:1e:c7:84:44:
ed:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:96:5B:A3:94:DE:2D:95:9A:F6:DD:7C:C4:24:B0:4B:1F:84:D4:D0
X509v3 Authority Key Identifier:
keyid:48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:72:4b:e0:3f:b6:42:70:e7:7d:e6:ad:51:b3:bc:01:b7:0a:
3d:a1:dd:57:1b:71:4c:c7:32:90:7a:b2:a1:fa:dd:0f:92:10:
61:78:56:1d:20:31:ab:bb:28:60:ee:a4:c1:a4:23:15:49:bc:
c5:34:99:5e:ce:aa:c9:9c:49:98:2f:f6:eb:ad:a9:b0:5d:0c:
48:cf:3f:d9:5f:f7:21:d5:39:39:ab:e6:2b:86:9b:47:46:05:
20:0d:6d:c0:a2:81:91:18:9c:ec:b1:3c:d8:e0:17:1a:44:f3:
84:ac:e3:39:5a:b5:96:3c:78:ac:1a:85:b4:96:b6:41:2f:62:
08:e4:d9:6e:fd:9f:0f:30:78:74:2c:d4:7e:4e:a9:97:8d:fd:
5b:19:e1:5b:9e:b7:f5:b4:47:6c:9a:24:9f:97:91:b1:af:5f:
0e:9f:a6:f8:af:90:0d:de:76:8a:2f:25:03:ad:89:db:05:40:
99:81:70:a3:6d:e5:1e:46:df:58:9a:df:89:ff:d0:ce:33:b1:
8a:7c:d3:c5:ed:73:a5:08:95:5a:59:f0:87:f1:91:bf:db:60:
bb:44:2c:e6:7e:bf:00:53:26:e1:07:68:d7:15:b1:84:76:6f:
1f:4a:37:48:df:94:b9:ad:73:13:84:b7:03:05:3f:14:1d:f4:
69:d4:b4:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZag9psut0Z96XTJuoqSV2rQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTE3Y2JmNWY4NzI4Y2VjMjRhZjNjMmU4NmVjZmI4MDM1
M2U2MGQwHhcNMjUwNTA1MTUwMDM4WhcNMjUwNTA2MTUwMDM4WjAzMTEwLwYDVQQD
EygxMTk2NWJhMzk0ZGUyZDk1OWFmNmRkN2NjNDI0YjA0YjFmODRkNGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R9obz6o0dBIjec3mJ3GvQ2CRuv/
mRPHD8mAmX+EBbYUOalcuV+5C4FHrALk7doCkgbWOZK7rLiVu6739ir4s0d3qw1n
3ohj16YKeSjmTIwKtdnkTRtjGQ1PXA0WJGKqR0q5yFaQweY8KleJwe3FhLNFeQqD
lg5QmmlM5Xr4BuXYApx1HJ+iH8NpcLrxkfU24eOiu8f9XQ849Iyqfp5/+T8+ibKK
6zjcB0KV7CwNIKgzTtbPOd1ty+K7Tq1ylHLPuivOhQtgOnbpAmu0atQ6ENej1+lg
AgbKOSxEq7LhvJIJg6Av7JnHc/8RSWQn1CMgZM/nFWZG/c6LUx7HhETt4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGWW6OU3i2VmvbdfMQksEsfhNTQMB8GA1UdIwQY
MBaAFEhRfL9fhyjOwkrzwuhuz7gDU+YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZGOHYxLUhLTTdDU3ZQQzZHN1B1QU5UNWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZDJmMmQtYTQyNS00NGFiLTliNWQt
OGMzYjQwMjg1NTY2LzEvU0ZGOHYxLUhLTTdDU3ZQQzZHN1B1QU5UNWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZDJmMmQtYTQyNS00NGFiLTliNWQtOGMzYjQwMjg1NTY2
LzEvU0ZGOHYxLUhLTTdDU3ZQQzZHN1B1QU5UNWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHJL4D+2
QnDnfeatUbO8AbcKPaHdVxtxTMcykHqyofrdD5IQYXhWHSAxq7soYO6kwaQjFUm8
xTSZXs6qyZxJmC/2662psF0MSM8/2V/3IdU5OavmK4abR0YFIA1twKKBkRic7LE8
2OAXGkTzhKzjOVq1ljx4rBqFtJa2QS9iCOTZbv2fDzB4dCzUfk6pl439WxnhW563
9bRHbJokn5eRsa9fDp+m+K+QDd52ii8lA62J2wVAmYFwo23lHkbfWJrfif/QzjOx
inzTxe1zpQiVWlnwh/GRv9tgu0Qs5n6/AFMm4Qdo1xWxhHZvH0o3SN+Uua1zE4S3
AwU/FB30adS0XQ==
-----END CERTIFICATE-----
Generated at Mon May 5 19:09:02 2025 by rpki-client