
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File: SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier: 2nbF9y0M9g2FmBGQaS5g6KQk0LH8pzzM6AYY2jX/2II=
Subject key identifier: 9B:98:FA:5D:97:F0:11:40:34:D6:06:EE:A1:AA:27:B1:AA:0E:B4:3B
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial: 0199FBEB156FA956597A8C77B5D8423BA046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number: 13C8
Signing time: Sun 19 Oct 2025 10:01:51 +0000
Manifest this update: Sun 19 Oct 2025 10:01:51 +0000
Manifest next update: Mon 20 Oct 2025 10:01:51 +0000
Files and hashes: 1: 1PfCogsrcmO4yMFx3i7dWcicxiM.roa (hash: QSA42PQDSQu+Rjvywm1NdoufERvHtIOdqRGsBA5DYb0=)
2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: RAyfBihDP0CJE+MRq0+rbD76y9RkbMrRCmPEcjy1Jzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:15:6f:a9:56:59:7a:8c:77:b5:d8:42:3b:a0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Validity
Not Before: Oct 19 10:01:51 2025 GMT
Not After : Oct 20 10:01:51 2025 GMT
Subject: CN=9b98fa5d97f0114034d606eea1aa27b1aa0eb43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:75:98:21:c0:58:e5:64:bb:c0:56:d9:d3:82:
2f:48:e3:f6:af:aa:26:a6:5d:ae:20:1a:97:e0:4f:
59:34:a6:c0:d1:8d:55:e6:6f:6e:30:8a:b6:32:eb:
87:5f:08:f5:08:14:7d:2d:25:69:17:80:44:34:99:
b1:10:ec:41:aa:72:23:01:f6:0d:e4:dc:7a:77:83:
e9:50:55:2b:8a:85:80:92:6a:de:3b:7f:32:21:b1:
6c:75:83:14:76:96:88:b0:15:d3:4a:ff:7d:54:c5:
f6:a2:1d:5c:3b:91:7f:ca:86:71:d0:61:d4:f9:85:
72:ac:d3:9c:92:7f:da:fb:5a:d7:db:19:1e:28:a1:
78:c1:1d:14:bd:86:fe:73:07:45:f1:e7:e6:fb:f3:
d4:4f:1a:17:b3:fe:67:18:40:01:22:49:99:15:81:
77:f4:37:f1:98:17:db:a9:e5:75:0d:35:a1:74:61:
b3:7d:d8:5a:65:a9:f2:b8:d1:f8:eb:4e:1a:9b:f9:
8c:83:c2:97:a4:9e:9b:86:7f:35:b3:b2:5f:6d:4d:
cc:c6:9b:89:49:fe:76:a4:ce:b2:e9:21:91:b3:01:
5a:11:a2:f7:e3:01:03:6f:fe:9b:ad:77:49:54:19:
8e:35:81:af:08:27:8f:23:6a:39:40:7a:91:c8:ae:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:98:FA:5D:97:F0:11:40:34:D6:06:EE:A1:AA:27:B1:AA:0E:B4:3B
X509v3 Authority Key Identifier:
keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7a:52:10:5e:40:d9:48:0f:d9:1a:3c:05:a7:d3:fe:65:58:
2f:39:e3:92:5b:87:a6:5e:c6:4a:a0:60:af:6d:39:ef:88:69:
50:f0:c9:8f:db:58:78:cf:c3:ed:22:12:06:9b:2a:0e:7b:af:
96:60:59:fa:84:12:fa:34:f7:b6:82:46:16:92:86:06:2c:cd:
21:9e:d3:a4:89:73:98:3c:e7:21:81:d7:7d:4f:2b:91:b6:8d:
e6:b4:fb:84:b1:95:06:48:67:b9:c8:0e:2a:15:65:8c:52:eb:
27:86:1c:49:ef:df:ea:3d:7f:9b:5b:0d:87:d7:b6:af:65:2c:
e4:84:db:11:e9:ed:8d:c0:56:db:13:26:18:98:b9:2f:38:e4:
f8:18:5d:f7:b6:92:92:22:c8:c8:e5:d6:e1:b5:c8:19:62:ae:
19:66:56:98:58:15:55:88:0d:04:68:ae:23:3c:c4:7b:17:96:
79:6d:5f:9d:cd:50:9d:0b:e7:26:b1:bc:b7:4e:1f:01:78:22:
db:d2:80:60:89:55:cf:af:45:a9:cf:5b:88:0a:bc:1d:9f:db:
e0:31:b8:41:9a:00:2e:d1:7c:21:1f:4e:b2:91:f3:66:86:6c:
c4:0d:8c:6a:3f:64:11:55:a9:c5:12:06:62:5b:94:1a:0e:59:
98:f9:fd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:54 2025 by rpki-client