Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File: SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier: vp6tZbKi89nCnn/zbO1KdiVAmiMtRrq8QARi9PKoyRk=
Subject key identifier: 83:7E:99:75:1E:11:20:84:8E:3A:AD:AB:0B:60:9E:16:DE:EA:15:98
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial: 0198D65F7128436170AF3C53BD1BAA34AA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number: 1330
Signing time: Sat 23 Aug 2025 10:00:35 +0000
Manifest this update: Sat 23 Aug 2025 10:00:35 +0000
Manifest next update: Sun 24 Aug 2025 10:00:35 +0000
Files and hashes: 1: 1PfCogsrcmO4yMFx3i7dWcicxiM.roa (hash: QSA42PQDSQu+Rjvywm1NdoufERvHtIOdqRGsBA5DYb0=)
2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: JxWN+esoZTubCjljzhRfnjjdKhKl8QcI7VjuYCZhkMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:71:28:43:61:70:af:3c:53:bd:1b:aa:34:aa:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Validity
Not Before: Aug 23 10:00:35 2025 GMT
Not After : Aug 24 10:00:35 2025 GMT
Subject: CN=837e99751e1120848e3aadab0b609e16deea1598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ee:45:fb:2b:bb:b7:f9:ed:ff:eb:95:34:a6:
c3:96:98:b1:ae:1e:a6:e7:7b:05:4c:0a:c4:62:0c:
e3:29:db:7b:5c:f3:5d:80:88:6a:7e:a7:ad:ac:c9:
5d:ed:8a:71:d4:18:9d:0f:9d:95:50:c0:86:73:27:
2e:a7:31:7b:6e:5a:db:e2:1e:f6:43:58:92:21:92:
f8:21:fb:42:3d:0d:99:11:54:e2:27:47:2e:8d:62:
38:44:cc:a4:4f:5b:f1:ff:50:aa:47:08:f2:c6:45:
d3:fb:4b:a1:a1:6f:b4:02:dc:63:b8:f5:71:da:92:
8f:ac:80:7f:e0:08:2e:4f:f4:94:a3:65:3d:85:c4:
5f:ff:0b:ae:99:2d:d3:f8:d5:27:83:21:e1:78:4e:
e3:22:b2:5f:41:c0:fb:eb:38:26:92:1c:8a:8e:d1:
44:e5:c4:90:cb:91:d9:21:b9:d1:3a:61:cf:74:68:
1b:cb:c5:b7:77:5a:e7:eb:fb:da:37:eb:1f:d9:09:
2d:34:6a:cf:3f:a0:5f:d2:6f:b0:52:13:0f:e4:83:
fe:58:f4:6f:1f:43:a2:45:f9:50:a9:a7:ec:4d:97:
11:7d:ae:df:73:14:92:16:c3:a8:32:a5:02:e0:6f:
3d:b9:d5:e6:cf:12:2d:af:c3:ae:d9:a7:bf:b8:02:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7E:99:75:1E:11:20:84:8E:3A:AD:AB:0B:60:9E:16:DE:EA:15:98
X509v3 Authority Key Identifier:
keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:10:b0:8c:77:c6:eb:95:99:eb:e1:cf:a6:18:10:33:6f:73:
91:91:50:a4:a3:6c:46:f0:92:49:5c:f3:31:d1:5d:be:36:ff:
0d:9f:f4:8a:8e:5b:06:1d:80:cb:d1:2e:cd:ce:64:75:0d:76:
86:91:ac:f8:b8:42:12:0b:f6:d3:7a:25:9e:cd:be:fa:57:23:
b0:a0:8f:00:ad:8b:46:09:c0:3b:16:ae:a7:78:62:24:32:9d:
d1:67:c0:36:9c:2a:da:6c:aa:90:0d:ed:44:49:a4:6c:a8:01:
e0:74:2a:ce:50:b3:63:37:e8:be:ad:32:03:6f:f3:c1:10:2d:
85:49:c1:9b:fe:72:76:94:ac:81:1a:8d:c7:79:51:29:e4:dc:
38:6a:e3:fc:5a:9e:21:11:d1:5a:82:e5:d7:70:0a:08:39:8a:
a2:d6:59:5e:bb:04:9e:01:96:2a:d6:16:15:77:1b:85:81:c0:
b2:e3:c9:ee:c0:8b:a2:83:2c:12:7c:d0:26:91:b3:4b:63:09:
fd:ca:a7:d5:5c:5f:6d:98:c2:b8:1f:b5:3a:6e:72:26:40:9b:
df:2d:f2:2c:01:38:77:3f:eb:ca:78:1c:60:b0:f0:b9:ce:40:
d6:cc:8d:44:bb:08:00:e7:19:d8:6f:ba:51:54:5c:60:ce:45:
e4:72:c9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:38 2025 by rpki-client