Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
File: SFF8v1-HKM7CSvPC6G7PuANT5g0.mft (raw, json)
Hash identifier: 9cs+qYsYvukT4CbFFHaoZlmRk93Ipvt/FX/y+XNWEUQ=
Subject key identifier: 50:3E:3D:3F:FB:10:8B:6B:93:84:9F:6F:FE:73:B8:82:66:32:69:88
Authority key identifier: 48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
Certificate issuer: /CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Certificate serial: 0198D6CD3C294FF641262A7CC3F0DEB8CCAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
Manifest number: 0D2A
Signing time: Sat 23 Aug 2025 12:00:31 +0000
Manifest this update: Sat 23 Aug 2025 12:00:31 +0000
Manifest next update: Sun 24 Aug 2025 12:00:31 +0000
Files and hashes: 1: SFF8v1-HKM7CSvPC6G7PuANT5g0.crl (hash: N1kyWvplo61O5d37TKodjIgy1n4ShP8GU+h4b2Pxsyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:3c:29:4f:f6:41:26:2a:7c:c3:f0:de:b8:cc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Validity
Not Before: Aug 23 12:00:31 2025 GMT
Not After : Aug 24 12:00:31 2025 GMT
Subject: CN=503e3d3ffb108b6b93849f6ffe73b88266326988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:bb:02:69:00:d7:5a:8a:ad:5c:fa:69:0a:
8b:6d:58:df:62:f9:7e:3d:65:b0:da:da:13:16:e7:
3f:f6:3e:bc:36:d1:e8:4c:d2:a7:47:d2:9e:c3:9c:
6c:e7:95:a2:94:a0:54:cd:60:35:02:ad:fb:41:75:
be:df:db:92:69:4d:15:73:be:80:05:fc:7e:b6:87:
72:5f:34:9b:1f:de:54:12:c7:f3:d0:54:c4:94:e9:
cc:2d:6f:16:a4:c0:34:09:b7:86:e0:6f:a8:1a:e0:
27:fa:d0:bd:e7:59:ea:a2:67:8c:52:aa:77:86:a9:
77:38:57:1b:bf:33:cf:7a:3a:71:d8:73:74:2c:96:
84:db:db:a2:6c:e0:11:52:b3:e9:25:c9:b9:40:df:
df:f5:bd:c0:0e:15:27:e0:cb:37:72:0d:1e:bd:2a:
a1:80:9d:6b:b1:6d:6b:91:35:0d:ec:77:64:82:b4:
7a:ec:4c:2b:c9:42:c5:53:ef:6c:9f:bb:13:aa:86:
86:c8:5d:e1:44:4a:b4:0d:eb:9e:13:2c:dc:ec:c4:
74:fb:b8:67:ca:4c:64:29:a5:7d:d4:e7:09:68:4f:
e5:3d:15:2c:74:fe:03:85:f1:68:eb:18:9e:96:83:
80:d8:2a:c9:84:52:d5:2e:f3:49:16:44:cc:52:99:
fd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3E:3D:3F:FB:10:8B:6B:93:84:9F:6F:FE:73:B8:82:66:32:69:88
X509v3 Authority Key Identifier:
keyid:48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:66:de:fa:16:e5:cd:e9:98:d6:72:8d:f4:e0:2d:1a:2f:04:
92:ad:91:0d:32:9c:85:2b:de:e2:99:7d:f1:ee:eb:e2:14:2a:
3a:c6:88:48:45:f6:37:5b:20:cb:37:29:02:e3:08:6e:e9:68:
e0:76:02:fb:6a:02:8c:70:bd:ab:a4:64:87:fc:65:b6:1c:29:
9c:38:e7:3e:0b:6f:de:9e:11:d3:2f:c9:dc:2c:b2:28:5c:3d:
a7:41:28:3e:fe:af:63:47:23:47:8a:56:9e:d4:06:3d:7d:35:
f7:f5:bc:64:aa:e6:f4:a7:a4:8e:72:9f:43:e5:44:88:f1:5d:
03:b1:03:31:11:ff:1e:6b:51:15:48:77:fe:e5:73:eb:4b:42:
38:eb:55:24:86:da:45:0a:f8:ef:0e:78:ee:50:26:7b:f5:94:
37:06:a3:3f:cd:dd:3b:55:df:1f:6b:43:e5:63:16:8a:ef:1e:
e5:b0:5c:20:bd:c6:39:ca:a2:ad:11:fe:14:d0:a7:67:ed:ae:
b9:a5:a8:da:1c:4a:82:88:b7:01:74:e1:d9:5d:75:0a:02:bb:
1e:92:de:1f:39:e8:6a:8d:6f:30:b9:3d:fd:03:77:12:23:11:
ab:30:de:94:56:64:ef:5b:9c:52:95:b1:1f:61:a4:a6:0b:d3:
88:24:37:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:52 2025 by rpki-client