Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File: SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier: 3YJv2ldyYAIUpHYIBlqcjRxOXS5kAnGnkC1Dzz8CI7I=
Subject key identifier: F9:BC:2B:92:05:68:E3:E2:1F:A6:AA:3B:BA:70:AD:54:D7:DC:18:DB
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial: 0197B6A22474092F2F5F4A205263E3140A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number: 129B
Signing time: Sat 28 Jun 2025 13:02:48 +0000
Manifest this update: Sat 28 Jun 2025 13:02:48 +0000
Manifest next update: Sun 29 Jun 2025 13:02:48 +0000
Files and hashes: 1: 1PfCogsrcmO4yMFx3i7dWcicxiM.roa (hash: QSA42PQDSQu+Rjvywm1NdoufERvHtIOdqRGsBA5DYb0=)
2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: 2gm9OW9H+AONIKbjNfsis7W+S8/ST2V6EToLDFmYOck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:24:74:09:2f:2f:5f:4a:20:52:63:e3:14:0a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Validity
Not Before: Jun 28 13:02:48 2025 GMT
Not After : Jun 29 13:02:48 2025 GMT
Subject: CN=f9bc2b920568e3e21fa6aa3bba70ad54d7dc18db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:de:bc:c7:5b:e6:f6:da:df:49:61:ab:d8:
e9:9b:30:a8:56:1e:84:7a:0a:04:28:e1:39:7b:c7:
58:50:5a:a2:52:fd:95:28:2b:76:ff:66:94:70:2a:
9e:2d:41:1c:cf:d2:d1:ec:ea:f2:80:8d:d0:3b:bd:
f4:54:8a:c9:8e:40:e2:ef:f0:de:54:58:41:10:2d:
e0:7b:c1:41:7f:d0:ca:c7:d8:f8:73:66:42:61:11:
a4:47:67:48:14:aa:6f:e6:fd:d5:41:e8:08:a8:81:
a5:bd:ad:40:5a:cb:ec:81:1d:09:ea:99:93:b1:81:
9b:50:40:1e:d4:8c:3b:93:a5:5f:7f:25:11:62:c2:
0e:37:ed:75:97:43:8b:45:e1:92:8e:8c:ff:59:7f:
b6:00:e5:71:ae:ca:29:71:48:6b:3a:dd:91:13:4f:
ec:60:c6:2c:65:1c:ee:69:7d:29:f6:70:9e:c8:76:
a8:8c:25:1b:81:3d:30:89:ed:ba:c0:fb:05:78:88:
e1:ee:f1:9c:ef:14:99:70:97:65:8d:24:ed:4b:1b:
c3:e2:fa:5e:20:74:a3:80:a9:dc:66:4e:5a:ea:5d:
61:2c:8e:50:75:8c:5d:bc:d9:72:11:6d:c1:9b:3f:
f8:8b:de:4b:f0:39:15:3e:0d:a4:23:dc:c5:c7:7a:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BC:2B:92:05:68:E3:E2:1F:A6:AA:3B:BA:70:AD:54:D7:DC:18:DB
X509v3 Authority Key Identifier:
keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:9d:2f:61:fb:05:6e:23:bf:36:ae:5f:2e:75:34:eb:46:8a:
ea:64:96:65:87:ed:3d:d0:49:a3:dd:25:1b:fc:cb:a0:d2:3b:
be:5c:ec:2a:4d:fb:3a:b5:6f:85:20:0e:ed:3c:f4:4e:bf:0b:
c8:88:7d:ad:f2:be:f1:22:9b:ef:5a:16:24:33:f0:8a:1e:ab:
d8:47:0d:a4:2b:0a:a1:56:1a:38:51:01:89:4f:a9:00:22:aa:
49:bf:1d:a1:c0:9c:dc:f1:6e:44:d8:d7:9a:cb:1f:83:92:c9:
17:65:ad:60:3b:47:02:db:35:d6:69:a1:92:c2:74:12:8d:66:
14:b1:cd:dc:75:a8:71:a4:a2:c5:00:3b:29:b4:cb:ec:8d:70:
87:53:01:b7:b8:bc:46:9a:9f:93:b4:e6:3b:d9:ef:56:57:ed:
72:7b:8c:c7:d8:c2:67:03:bf:a9:4a:8f:f1:03:7b:34:ca:76:
e1:72:72:d7:cb:a5:62:b9:72:04:0f:2a:ef:f1:7e:77:3e:dc:
00:2b:26:85:1d:1c:a7:ff:4c:7d:d8:5b:f4:62:09:e4:69:e0:
62:7e:47:98:98:6e:3d:68:ba:0d:5b:23:f6:12:2c:ea:7e:0d:
42:80:17:65:53:9e:2d:94:3b:5d:18:b9:e8:83:e4:a5:ff:ab:
3b:eb:51:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:39 2025 by rpki-client