Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
File: SFNVcGg2xtB8f9JdW1nbC22JT7U.mft (raw, json)
Hash identifier: Ewr+ZZu93rublKIthQE1fwtTZlfEiF8waZxBAL1HdnY=
Subject key identifier: 39:42:A0:2C:B1:6A:0E:C6:19:7B:01:C3:55:BD:6D:BF:2A:35:9A:FE
Authority key identifier: 48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
Certificate issuer: /CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
Certificate serial: 01987ED3B3E6072CBBE23ABCA0FCC4F0C62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
Manifest number: 09B7
Signing time: Wed 06 Aug 2025 10:00:59 +0000
Manifest this update: Wed 06 Aug 2025 10:00:59 +0000
Manifest next update: Thu 07 Aug 2025 10:00:59 +0000
Files and hashes: 1: SFNVcGg2xtB8f9JdW1nbC22JT7U.crl (hash: /3KRZZDQJS9IhsD5rz0TQoj1Q4matIhGO+HyKOm8+Os=)
2: xMvpgjkxKbx_nJXqKUz8HP8cBlY.roa (hash: xpvtl/jAMstPAGZTh7RwpFcbxDqkgPOXgahD3aZqXp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:b3:e6:07:2c:bb:e2:3a:bc:a0:fc:c4:f0:c6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
Validity
Not Before: Aug 6 10:00:59 2025 GMT
Not After : Aug 7 10:00:59 2025 GMT
Subject: CN=3942a02cb16a0ec6197b01c355bd6dbf2a359afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:56:06:e1:72:e9:fd:7d:77:28:73:39:3b:06:
31:cc:73:a2:4c:be:b9:19:af:5a:f7:a3:dc:0f:3a:
64:0c:9d:d7:d2:ca:9b:f7:5b:88:b8:76:86:5b:d9:
05:d9:ad:98:19:5d:36:19:15:31:04:29:26:73:b1:
fc:bb:fe:d5:15:e0:dc:05:b1:56:bb:c1:73:eb:d0:
e2:18:b7:23:3b:1e:a8:82:a8:aa:f4:e9:ec:5c:d8:
53:3d:3c:a1:98:2a:5a:a8:d9:11:0e:60:43:21:4c:
58:b6:48:07:28:77:08:20:09:b4:4e:4c:4d:06:af:
cb:77:86:bd:e3:84:48:8c:ec:91:70:49:04:d1:3e:
74:ac:24:92:c3:ac:a5:a2:66:e1:57:d6:ba:6a:5e:
d3:f3:3d:b0:a4:b5:95:97:f3:6a:79:8d:1c:25:f9:
7e:fd:cb:08:12:11:a6:d9:a0:68:5f:2a:62:1a:ac:
16:4e:83:ff:2a:65:eb:2f:02:4a:a6:43:de:ab:7e:
67:e2:76:a6:e7:3c:d5:4f:ce:72:22:de:dd:69:82:
ac:ec:0a:44:02:1b:51:98:c4:34:e8:78:12:f5:74:
d5:82:9c:85:a4:67:f9:28:3b:66:94:67:ba:4f:74:
13:0b:c5:e3:a9:ae:bb:bb:90:2a:9b:d6:2c:de:db:
07:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:42:A0:2C:B1:6A:0E:C6:19:7B:01:C3:55:BD:6D:BF:2A:35:9A:FE
X509v3 Authority Key Identifier:
keyid:48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ba:fd:72:22:59:16:75:cb:dd:3f:f0:27:6b:35:d6:43:88:
69:74:43:13:25:74:43:1b:f5:67:66:02:ca:ca:a6:7d:ea:c9:
28:dc:4c:74:90:06:db:7c:ef:dc:c7:54:0a:32:d3:95:a5:ce:
3b:cc:7f:15:d9:4e:8e:83:a0:ad:a3:8e:89:e8:67:2a:4b:be:
c4:f6:d1:eb:67:bb:a2:39:26:7a:c1:ab:b1:0b:6e:6b:fd:31:
58:bb:1e:5c:3f:53:b7:ff:f3:b6:a5:7e:d2:69:9c:b5:b6:42:
ca:9a:bd:13:26:52:14:0c:90:1e:6f:92:fc:1a:64:44:f1:8c:
df:9f:39:08:bc:69:e2:32:a0:8c:84:00:1c:8f:34:72:ef:92:
b1:a4:15:71:17:fa:20:0a:6f:95:94:51:cf:51:05:78:7a:cc:
7f:7d:76:8b:7c:7c:c2:69:20:2b:41:1f:7b:11:67:96:36:72:
6a:d7:36:59:97:94:c6:2d:ad:e3:b0:44:87:56:a5:08:aa:6b:
79:bc:8e:36:26:ff:30:d6:89:0d:b1:e9:d9:6d:84:31:d3:a1:
17:ee:1d:2a:19:62:3f:64:85:1e:47:11:31:e5:21:ca:2a:e0:
ec:a6:4a:ab:06:64:84:5a:f8:9b:9c:1f:b9:ba:e8:f3:5d:eb:
ba:43:8b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:03:33 2025 by rpki-client