Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json)
Hash identifier: ZW2zUpMwMv8HF3HeiEFCjco0SYqC9Uj0gq80HVfzChU=
Subject key identifier: A1:65:F0:FB:EB:66:47:5F:2E:F9:7E:E4:21:30:59:B6:A2:66:53:39
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial: 019A503DD84629423D80854733DB45707B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
Manifest number: 0A6B
Signing time: Tue 04 Nov 2025 19:00:21 +0000
Manifest this update: Tue 04 Nov 2025 19:00:21 +0000
Manifest next update: Wed 05 Nov 2025 19:00:21 +0000
Files and hashes: 1: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: 4uEKI44csDLXJ0ilalXKouJ31o2IgxEEHPvWycT92fo=)
2: hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa (hash: +x4Da87nsosWbKf7z+mFyLUyvFKLPH55B5hxOSqBXYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:d8:46:29:42:3d:80:85:47:33:db:45:70:7b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
Validity
Not Before: Nov 4 19:00:21 2025 GMT
Not After : Nov 5 19:00:21 2025 GMT
Subject: CN=a165f0fbeb66475f2ef97ee4213059b6a2665339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:dd:eb:1e:7d:b8:55:6d:54:c6:14:ef:c2:
0c:00:0c:cd:bd:54:e6:dc:a2:d4:c7:4e:24:9d:b8:
7e:62:5c:fa:b0:cd:08:b8:4f:be:53:ee:01:f5:3c:
3e:92:87:b6:c2:71:76:5c:0a:e8:7b:8a:73:8e:71:
f4:26:7c:7a:fd:6f:b3:be:6b:07:6d:54:37:44:78:
f2:7e:94:2a:0c:4d:29:76:b5:8f:d4:17:4b:4b:a1:
28:90:63:ab:bc:ee:6a:f7:9a:00:2a:ab:14:33:5a:
70:3c:e9:8f:de:68:fa:e8:d5:f4:69:c6:d3:35:4f:
92:bb:f6:f5:08:54:c3:c5:87:25:cb:af:d6:b2:bb:
a7:7c:df:e5:8c:d3:c9:b6:61:42:42:6d:fe:98:05:
d9:89:d4:a0:45:5e:a5:dc:5d:76:c9:2c:aa:1f:4a:
40:19:c6:a3:f0:fb:08:85:e2:c6:0c:4e:91:18:f9:
30:92:7f:9d:15:0c:99:4e:2b:ff:c2:29:2e:76:89:
2b:0f:fd:14:14:59:e9:45:cb:dc:c0:a2:f2:5f:2b:
24:05:8a:0f:44:3f:94:3d:b1:19:ba:94:4e:54:6b:
19:b1:4e:15:09:1b:cd:41:db:58:3c:95:b4:91:1c:
49:68:29:59:ec:3c:df:00:eb:a0:4a:56:17:42:44:
d0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:65:F0:FB:EB:66:47:5F:2E:F9:7E:E4:21:30:59:B6:A2:66:53:39
X509v3 Authority Key Identifier:
keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7f:8e:66:48:ce:98:90:8d:d7:18:29:3e:b2:d7:60:1f:e1:
25:b7:6a:ba:ef:f5:53:db:2f:05:67:5e:a8:41:39:67:ef:03:
8a:79:06:43:22:ea:c5:87:49:26:85:93:91:cb:83:eb:08:66:
77:0d:8e:55:a4:73:a0:d7:90:c7:f7:0b:d5:50:af:26:14:bd:
dc:09:d9:42:1f:6a:71:42:34:3e:69:6b:9b:e5:60:11:17:02:
31:fb:9a:5f:52:8e:04:4c:2d:d4:52:30:cf:2b:eb:fd:13:69:
16:53:1f:53:e6:9d:a3:e7:86:e7:4b:16:2a:74:53:25:d7:b8:
47:8b:c2:d2:3c:11:8b:ff:4b:09:a4:60:ff:e6:3d:1c:64:5d:
f2:4d:f2:f7:c1:ca:fc:f2:dd:15:32:fd:bf:58:88:d3:7f:ba:
48:04:ab:62:04:e0:6c:09:06:32:6c:98:46:43:f3:12:b0:f3:
25:0b:4c:e6:d3:65:eb:a0:b9:48:c0:3f:f8:38:df:d3:a1:4d:
89:f9:cb:43:c8:b2:30:51:9f:ae:20:44:7a:73:75:34:24:dc:
79:3d:98:5e:76:d8:c9:08:64:16:7b:d8:38:4c:c0:e2:3f:ab:
7b:d6:b9:ba:5e:4b:17:48:69:04:ba:c1:0c:d3:3e:7d:81:a9:
86:d9:d7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:39 2025 by rpki-client