Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json)
Hash identifier: 1cpyuUHSS+xMn8ml8/u4YHoNfBuv9uFjsR/9y8pJlvU=
Subject key identifier: D4:C2:26:8F:C9:AD:F3:00:54:1B:A2:D2:65:D8:48:06:2E:3D:47:77
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial: 0197B70E519EEA16060B9A1E9A258FF433EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
Manifest number: 0F81
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: JUMv7Yi2cpE5n4jH_daU8-Wkj_s.roa (hash: 8Ur2YBrwEIHwiqas+AFAXGNfkZXPANsLJAnLoARlVGk=)
2: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: Zf05hO6v6BEQYiParBn+mWWNY9uXPEbvKECvYZ6wbDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:51:9e:ea:16:06:0b:9a:1e:9a:25:8f:f4:33:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=d4c2268fc9adf300541ba2d265d848062e3d4777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:ee:79:b2:79:97:3c:ac:5a:33:84:3e:06:
65:15:e9:bd:45:a0:f2:59:55:eb:30:f0:13:f8:ad:
b9:86:5c:30:61:da:52:ee:9b:3f:ac:bc:9f:42:ff:
4d:c6:76:45:6c:f2:54:a8:94:86:e5:3f:36:40:f6:
0b:d2:5f:96:e3:27:b0:ef:f1:11:a4:9d:a8:03:e7:
c3:61:af:85:1d:c9:d0:2f:9b:9c:f3:2e:82:c4:cf:
a0:75:8f:b7:37:aa:c5:fd:cf:2d:fa:d6:49:f7:a4:
1c:96:f4:df:1d:69:6f:85:3f:4f:a1:75:a9:b1:17:
76:3d:d9:a0:54:12:92:99:ce:62:06:20:ab:44:09:
23:a5:e3:42:4d:73:da:f9:7e:34:bb:ae:fb:55:c9:
ea:0a:fb:86:27:7f:7b:49:e9:a1:5d:c0:18:af:90:
89:a8:98:ae:28:05:27:8f:8d:7b:5a:09:5a:3b:f0:
5e:1d:54:86:03:fe:92:a4:21:5d:dd:60:93:d0:cb:
bd:6a:7a:e2:b8:ac:e0:9b:df:9e:ce:f6:0b:0e:40:
09:5f:48:9f:cd:a1:ff:9e:6e:dd:b1:05:ed:b8:64:
e5:3a:73:42:c0:c3:ab:6a:cb:7c:97:49:f1:ef:f7:
9a:7c:b8:37:9b:e3:37:38:39:48:6b:b0:9c:1b:a9:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C2:26:8F:C9:AD:F3:00:54:1B:A2:D2:65:D8:48:06:2E:3D:47:77
X509v3 Authority Key Identifier:
keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b0:69:71:6e:ec:cb:e0:e8:56:62:2c:75:fd:80:b6:82:33:
48:d4:37:96:71:95:de:a7:b3:85:fa:7c:5c:cd:cc:b1:3b:25:
e5:21:68:48:1a:8b:39:5a:88:9f:ee:b2:b9:1a:37:ff:01:bb:
ca:2c:f3:3d:2f:69:93:8d:a9:03:b4:5c:f9:e2:bf:29:69:91:
62:41:4c:b2:c9:d4:b7:62:86:e1:9a:15:66:16:7f:e5:35:67:
bc:5e:53:a1:45:34:68:8c:e0:6b:fe:7b:15:1a:62:03:93:37:
60:5d:d3:db:37:de:90:da:64:39:e0:0e:35:c6:eb:60:56:37:
24:c8:22:5f:a0:31:dd:ee:f3:37:ff:d5:0f:1a:cf:15:d3:7d:
a2:95:e1:fb:e9:96:be:ea:4c:56:71:f7:48:11:a4:b0:ec:11:
34:74:3c:c5:5b:bb:ec:68:22:17:40:ff:39:57:32:e4:0b:30:
0d:d3:c0:11:2b:40:e3:f6:40:0a:f0:a0:05:73:f6:f1:99:ca:
54:01:18:b4:84:96:33:33:12:9f:52:b7:c7:89:90:36:1f:0d:
30:70:a5:4f:c5:1a:ac:d4:ac:55:44:c8:aa:20:29:07:f9:b8:
b7:55:c5:e9:00:19:b1:47:05:ee:f1:ce:f7:ba:64:2d:70:04:
f9:be:4c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:12 2025 by rpki-client