Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json)
Hash identifier: +6Arpp1KQ5LleOQJ+ae7LZKv/g0M2Xp9TVP2PfWn2pI=
Subject key identifier: 00:32:F9:D2:3D:FE:A3:60:9C:F4:2F:1B:0E:9F:15:AD:1A:40:1B:A0
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial: 01976C99027D70B22EE4FEE5A60571AC43D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
Manifest number: 08EC
Signing time: Sat 14 Jun 2025 04:00:56 +0000
Manifest this update: Sat 14 Jun 2025 04:00:56 +0000
Manifest next update: Sun 15 Jun 2025 04:00:56 +0000
Files and hashes: 1: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: /wJgn+8ZIeKjY8l3MAJdww7/NhuoQIBLYY/zVsPAnww=)
2: hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa (hash: +x4Da87nsosWbKf7z+mFyLUyvFKLPH55B5hxOSqBXYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:02:7d:70:b2:2e:e4:fe:e5:a6:05:71:ac:43:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
Validity
Not Before: Jun 14 04:00:56 2025 GMT
Not After : Jun 15 04:00:56 2025 GMT
Subject: CN=0032f9d23dfea3609cf42f1b0e9f15ad1a401ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f9:5e:2a:03:72:18:66:d2:0a:1b:90:b8:ba:
01:49:f5:5d:ac:e4:3b:d7:f8:8a:f2:d3:34:48:82:
3d:6c:4d:94:23:de:23:96:05:52:ac:80:c0:8e:6f:
65:48:af:29:51:88:42:09:d3:47:87:fa:00:73:da:
b2:c0:31:6d:16:ad:f2:68:a3:19:72:6c:e9:03:21:
45:51:0e:db:ba:30:0f:36:a1:3e:5f:a2:59:bb:9f:
3d:d1:ff:84:08:b9:0b:1f:d7:2a:e5:84:d0:05:a7:
70:35:f8:3d:3a:b3:06:82:a1:45:6b:17:2c:b0:c6:
b9:89:f6:4d:a8:a0:ef:ee:3a:a7:6b:5a:88:f1:09:
7c:61:41:f2:cb:4e:9b:7e:30:65:57:49:c8:93:80:
2a:cf:e0:13:0f:16:bb:ca:c3:a9:dd:43:09:67:22:
ea:e9:ac:ec:84:9d:b6:2e:44:47:a5:96:fb:2d:c1:
5c:0e:e5:db:23:63:b8:21:b5:6e:cb:8a:fb:f2:e2:
54:12:ab:b4:cf:15:23:c6:aa:32:20:0a:fb:38:fb:
52:a2:f0:a5:18:3c:ac:f3:be:fe:78:44:fe:74:7a:
05:27:3e:e9:c5:95:21:6b:6f:1f:0f:42:25:4e:a6:
e4:22:f0:8f:c7:a7:63:4f:bc:7d:77:2c:66:0d:dd:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:32:F9:D2:3D:FE:A3:60:9C:F4:2F:1B:0E:9F:15:AD:1A:40:1B:A0
X509v3 Authority Key Identifier:
keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:7b:59:01:e9:e2:7d:46:4d:1f:9c:5c:b2:32:92:75:6e:b6:
a9:12:5c:45:ff:c4:14:9f:37:e2:65:1e:f1:1a:7e:ba:80:8f:
ba:f6:70:f4:3b:c8:40:a2:16:58:b7:13:61:0e:0f:b5:f6:a4:
22:99:75:99:23:d8:92:fd:d2:6e:cf:29:00:5c:f2:7d:df:12:
be:e7:03:87:86:81:b5:29:c3:78:c8:1f:a2:a5:2c:4a:7f:e5:
e9:fe:f4:a7:8d:78:fd:02:c6:39:32:eb:62:99:0b:42:0a:c2:
0d:99:c5:4a:25:e2:94:c1:2b:b1:aa:25:a4:ff:51:6c:ce:a6:
2e:0a:e8:a2:7f:2c:cb:68:b9:30:7b:e6:6b:a8:6f:ba:29:24:
e1:db:20:24:e3:d3:2b:cb:c4:df:31:3e:9b:ef:ec:d6:9e:90:
28:b2:f2:03:24:d7:be:02:2f:9c:d9:b8:39:6a:22:a6:84:8d:
3a:c5:f7:f2:22:76:17:75:74:bb:dc:97:3c:28:ed:72:01:5e:
d4:85:06:8f:2a:a9:9b:d6:f1:fc:b1:7e:e9:b8:97:27:d6:72:
4d:23:14:ef:f4:e8:dc:f6:22:3b:07:f4:24:42:61:68:e0:93:
99:cf:3f:e3:97:3d:5d:31:e5:6b:f5:c4:cf:e6:31:da:92:46:
42:e7:80:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:46 2025 by rpki-client