Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
File: SfJiM_W7QibCp6e5ADAI0Z40eFs.mft (raw, json)
Hash identifier: YshAfT2JMovBPmrr8Icl5snPArqI2UjdpLvkr05Dsy8=
Subject key identifier: 8F:37:76:B7:37:87:F3:D2:7C:08:F9:F8:61:CF:5B:65:39:5C:6D:17
Authority key identifier: 49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
Certificate issuer: /CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Certificate serial: 0199FEB4F70AE349A42392C5CE59F06A4C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
Manifest number: 1272
Signing time: Sun 19 Oct 2025 23:01:36 +0000
Manifest this update: Sun 19 Oct 2025 23:01:36 +0000
Manifest next update: Mon 20 Oct 2025 23:01:36 +0000
Files and hashes: 1: SfJiM_W7QibCp6e5ADAI0Z40eFs.crl (hash: aN+tBs+acNhP+VWEJ02EBo2hg56o8BV/35RUuwSvGWI=)
2: TmwIzb5OMEe4RHPaC68IjB6na0k.roa (hash: dW1pEtOcDuseosGnHRvKaebls+Ju6AZ6FoBVPM8QbJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:f7:0a:e3:49:a4:23:92:c5:ce:59:f0:6a:4c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Validity
Not Before: Oct 19 23:01:36 2025 GMT
Not After : Oct 20 23:01:36 2025 GMT
Subject: CN=8f3776b73787f3d27c08f9f861cf5b65395c6d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:01:dd:8d:ed:18:e7:f9:0f:6b:95:1d:3e:
d4:eb:85:27:3b:9d:a5:7f:40:9e:ab:a1:8f:d4:a7:
6d:66:28:8d:21:05:f6:11:9d:f8:66:f8:80:13:73:
c9:64:b3:59:84:31:2f:d2:07:27:01:0e:af:4d:b3:
87:79:2e:5f:2d:02:a8:30:9f:7b:f4:b6:da:26:49:
89:ae:6b:08:b0:1b:87:f5:19:44:77:f0:2f:ae:34:
8d:87:25:04:2a:0c:9f:70:09:c0:e3:6d:65:a2:0b:
dc:35:a4:05:cc:83:62:4e:cb:23:71:f8:be:d5:0c:
28:6f:e1:7e:02:4a:d9:5b:aa:ff:cd:2c:50:60:79:
c0:25:72:c0:d8:6f:e2:0e:39:36:5a:12:74:7f:8a:
39:bf:f1:1d:af:b7:a2:79:9b:62:a7:e3:42:bb:8d:
ee:80:c9:e3:ae:cd:eb:2e:8b:bc:9d:35:cf:48:65:
38:b9:9d:f2:c9:90:c2:ff:e9:0b:03:1a:0a:8b:b6:
05:b5:ea:3c:e6:b6:cc:90:f4:ab:15:28:24:6d:37:
30:51:5f:37:56:2f:ce:85:b3:be:8d:1b:94:77:e0:
34:fc:b2:5d:49:fb:b0:24:89:a3:40:d8:31:17:95:
70:0f:25:0b:3a:07:26:59:81:f1:52:dc:0f:7d:73:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:76:B7:37:87:F3:D2:7C:08:F9:F8:61:CF:5B:65:39:5C:6D:17
X509v3 Authority Key Identifier:
keyid:49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ae:dd:b6:50:7c:4f:c9:e3:1a:50:cf:ef:67:64:ef:ee:6d:
a5:bc:83:96:4b:18:e5:b8:96:6f:64:67:b8:0d:fe:16:a2:ae:
ed:f7:2a:35:f6:80:6c:75:23:5b:55:11:b1:96:a9:12:3b:3d:
43:8e:f3:97:a4:35:7f:81:3f:74:cd:43:2b:cd:83:9e:c7:e1:
df:86:04:e5:42:da:97:ac:dc:1f:42:9e:0e:15:1e:22:44:af:
27:98:f8:44:08:80:e3:5d:64:51:71:e1:7a:a6:9c:9c:68:f8:
46:dc:22:50:00:a1:62:09:d5:88:2f:a5:3c:b3:9c:07:bc:65:
e6:0a:46:9c:1d:67:2b:ac:7b:d7:5e:03:5c:f2:a2:a7:42:c3:
c7:c5:c2:1f:12:f6:09:21:7f:2f:bb:d6:7f:7c:67:a6:85:5f:
99:37:85:1f:97:cd:9b:61:6a:09:d3:a9:cb:f1:2a:a7:3b:5f:
28:be:ba:7b:da:13:54:f6:b7:df:bf:bc:0e:1f:55:f0:b7:c2:
29:e0:d7:11:5a:e1:e5:9c:31:8e:24:5d:55:ca:04:9b:f4:da:
26:75:e0:9a:2d:90:48:2a:eb:bb:af:57:02:4a:10:01:22:bd:
30:81:aa:b4:5c:c5:fe:45:f5:53:ce:26:f3:24:b3:23:df:76:
c1:7e:23:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:56 2025 by rpki-client