Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
File: SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft (raw, json)
Hash identifier: zZXwRb0cgYA5du36sM51qTzKOn9FKP14wf64T9fyc+8=
Subject key identifier: 0B:18:91:45:C8:5B:4D:63:E7:90:35:9F:C7:B5:66:C4:D8:B9:03:C0
Authority key identifier: 48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
Certificate issuer: /CN=48559018adff16eadf5551b2cb74d8f6860cd044
Certificate serial: 0199FAD7A16DAFA0725C673ED275A78E5B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
Manifest number: 0B0E
Signing time: Sun 19 Oct 2025 05:00:59 +0000
Manifest this update: Sun 19 Oct 2025 05:00:59 +0000
Manifest next update: Mon 20 Oct 2025 05:00:59 +0000
Files and hashes: 1: DlNfl6KgR_MUNI_dJxw9ErXDeIE.roa (hash: eSCVIU9rH872alqy7/aU0fAeLMAeeiberdc7Lc5APRo=)
2: SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl (hash: KVOAukfaMMRF8ucuBhexwYuiegiQL5pH1+HpC2AXzTs=)
3: kNzmfkRSfsPZfyUkp0lW7AHAG-c.roa (hash: P6poTIVQZa8F+UuuStCgTYtjT3XTXjtd8ThSIr53awM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:a1:6d:af:a0:72:5c:67:3e:d2:75:a7:8e:5b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48559018adff16eadf5551b2cb74d8f6860cd044
Validity
Not Before: Oct 19 05:00:59 2025 GMT
Not After : Oct 20 05:00:59 2025 GMT
Subject: CN=0b189145c85b4d63e790359fc7b566c4d8b903c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:80:fb:ce:25:70:46:b2:3d:eb:69:19:1c:
c8:e2:a9:83:2d:96:f2:a5:91:cf:6e:89:8b:ca:ee:
0c:f4:b9:a8:46:21:c3:d1:d4:35:9d:97:f1:68:19:
9d:9d:78:2b:b2:82:54:2f:2f:9a:d9:cf:37:02:60:
68:56:96:09:b5:5c:6c:2e:bf:fd:dc:a4:8a:88:9d:
7c:4d:e2:68:74:a4:7e:df:ac:50:08:cf:8c:5d:a2:
ea:ab:39:90:29:92:2c:77:d7:b3:99:4e:24:7a:4d:
e0:21:f2:b4:77:04:72:a1:87:db:eb:51:a7:79:5d:
e5:af:8a:ce:1c:b7:2d:15:a5:3f:8d:0a:5c:9a:3c:
1c:84:94:1c:9a:40:b6:c3:b0:4e:f6:fd:ad:55:6f:
0a:73:21:85:92:5a:cb:60:9a:7f:99:1a:08:ae:ee:
ea:2a:d0:f6:52:0c:3f:98:26:d8:f8:ac:01:32:11:
02:bb:b6:59:23:29:b3:50:89:31:a5:97:a6:2b:5a:
8f:72:e6:90:48:a4:ca:ed:27:ee:ac:89:2f:72:25:
62:40:84:94:b6:26:99:50:a8:30:a1:b9:7a:ce:68:
22:c0:fe:6e:04:ac:4f:ee:b4:2a:b7:c9:c1:51:1b:
11:7f:e1:13:65:95:b4:6d:ed:59:f6:4e:40:e6:c4:
37:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:18:91:45:C8:5B:4D:63:E7:90:35:9F:C7:B5:66:C4:D8:B9:03:C0
X509v3 Authority Key Identifier:
keyid:48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:90:ea:0e:77:0d:1d:5d:9a:ab:81:b6:a4:e8:20:b5:f4:50:
02:8d:04:b4:ee:1c:5a:ec:23:30:14:60:75:9f:de:31:4d:e3:
01:c5:71:46:ee:85:f0:cb:03:89:a4:06:75:a0:8d:7f:e0:df:
62:ff:7c:7f:53:a7:29:c2:e3:86:5a:24:97:f6:be:12:70:77:
9a:9c:90:e2:3c:65:1c:30:57:ac:e3:68:7a:22:c2:77:6a:a7:
41:4f:c1:57:4e:73:ec:43:cf:9d:c2:8e:70:49:3a:98:46:3b:
e3:a3:c4:72:c3:1e:ed:69:4d:dd:3c:5c:b7:95:6a:f4:5f:01:
49:e1:93:3c:bd:69:cc:3e:30:fa:05:60:28:c6:46:d2:4e:24:
a3:8c:78:4b:e6:54:d5:c2:42:7b:ac:17:17:2b:48:d0:2d:d4:
0f:04:48:0c:36:f7:67:e9:03:c4:d5:92:01:16:83:69:a8:e0:
57:c3:c4:f7:7a:5f:0a:3e:4f:cd:80:c3:7b:e7:b3:ee:e0:03:
f5:9c:6f:cc:11:ef:72:e8:9b:05:a1:d1:99:cb:f8:67:ad:06:
50:71:5d:30:c2:3f:2f:5a:ac:e0:05:ac:29:a7:b9:92:36:1c:
17:07:37:07:94:5a:9a:93:a5:b9:73:40:4f:73:e3:37:e9:f4:
0d:bc:55:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:35 2025 by rpki-client