Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
File: SFF8v1-HKM7CSvPC6G7PuANT5g0.mft (raw, json)
Hash identifier: pv6ou1nfnsjNrJPAzNSa/fvkIPacIeo8aazVva6pOd4=
Subject key identifier: FE:DE:E2:20:9C:0F:D9:9A:2C:4E:BF:71:D7:52:88:5C:37:71:9D:5E
Authority key identifier: 48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
Certificate issuer: /CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Certificate serial: 0197B70EAC5E742626EADDC6163F174B5F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
Manifest number: 0C95
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: SFF8v1-HKM7CSvPC6G7PuANT5g0.crl (hash: m5wLtvWxoULDy+xhO7qaRBk7PJuDYVes3/GjDVeRAAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ac:5e:74:26:26:ea:dd:c6:16:3f:17:4b:5f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=fedee2209c0fd99a2c4ebf71d752885c37719d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:b9:ca:07:a8:cf:50:fc:ac:24:d7:4d:f8:
2f:11:78:58:48:db:f4:c5:69:7d:7b:5d:9c:1e:c7:
1f:e5:41:c4:9e:94:64:81:83:c1:ee:ab:54:2d:7b:
6f:85:d7:0c:f5:e0:cc:7b:6a:23:8e:aa:4d:94:95:
1a:49:57:c5:10:4b:47:ae:a2:6f:a4:c3:3f:33:4b:
53:f8:e4:44:8d:46:49:3b:8f:c8:2d:a0:57:d4:34:
89:dc:ca:06:f3:52:78:16:10:73:76:75:e8:96:ca:
02:97:d2:37:0f:8f:10:d9:7d:c8:20:9f:76:21:ba:
0e:ad:d3:5b:f4:27:ea:f5:48:d5:2f:61:52:2a:3d:
12:71:63:89:fc:17:93:9a:f6:19:63:b4:b8:cc:51:
38:e5:17:92:c1:a1:ad:c4:0b:ff:db:af:b7:b3:21:
05:70:8a:ed:2c:8f:03:01:7b:21:32:c7:46:df:d7:
c2:44:a9:60:e2:4a:19:a1:e6:33:71:18:df:8d:fe:
3f:31:36:db:a2:f5:58:6e:6f:18:af:dd:96:64:e2:
69:e3:91:11:50:a6:98:79:86:76:e9:eb:ca:2d:57:
4a:40:58:45:98:74:f7:7e:a5:ee:5b:a1:87:19:6f:
da:3b:28:94:95:9a:54:0b:31:da:88:50:33:2b:4f:
8d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DE:E2:20:9C:0F:D9:9A:2C:4E:BF:71:D7:52:88:5C:37:71:9D:5E
X509v3 Authority Key Identifier:
keyid:48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:60:40:50:d9:12:d3:fa:b2:27:4c:78:59:19:8d:26:9b:52:
46:73:58:bc:1f:3c:7f:d4:3a:b1:d9:ff:94:d8:92:69:85:80:
d3:74:27:71:f3:91:b3:ed:e9:30:a2:a4:73:64:1a:ec:2c:d3:
de:17:18:3c:0a:e5:91:45:3a:98:21:a2:df:a0:da:9e:28:ff:
88:3c:fd:66:88:35:bb:e1:a9:35:22:84:75:c4:5a:da:eb:11:
56:e9:70:50:4c:2e:a9:4f:bf:11:a0:b1:08:39:47:be:a2:dd:
af:c9:2d:8c:91:25:bc:ca:69:66:0a:f6:0c:d6:5c:dd:94:f5:
3a:67:42:a0:d0:c1:36:93:96:49:c0:08:65:c6:56:da:82:7d:
53:5a:90:3a:ea:77:79:1d:a2:a1:6d:de:23:4e:c4:d0:4b:9b:
88:51:3d:37:fe:93:30:c7:90:75:e3:74:dd:a1:42:bf:e2:5e:
da:e8:59:33:61:4d:17:9e:6e:62:06:11:f1:6b:13:d5:23:6d:
d7:9c:53:ba:9c:1d:02:f8:5f:6b:28:ce:18:a8:ff:eb:87:5d:
72:8b:8b:4d:8f:e8:e1:d2:f5:03:89:44:79:c3:e6:f5:98:85:
30:f1:5d:3c:f7:4e:90:90:d6:4e:ad:26:8d:e8:d1:b8:a6:e0:
39:7d:55:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:20 2025 by rpki-client