Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json)
Hash identifier: etmqC8k9FFy1tH6grj1Lvo0FXsKdMhrGZ9ciTxy5wYE=
Subject key identifier: 71:37:07:AF:A6:5D:1A:00:62:BC:6D:61:C2:1C:81:1A:54:AC:9F:EA
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial: 01987ED41F5CC339ABF8D11DE3CC2A10ECFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
Manifest number: 097A
Signing time: Wed 06 Aug 2025 10:01:27 +0000
Manifest this update: Wed 06 Aug 2025 10:01:27 +0000
Manifest next update: Thu 07 Aug 2025 10:01:27 +0000
Files and hashes: 1: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: jZgcpNT/CrnazIF86DOCPB9DlvrdM+PMiHerO08MfzQ=)
2: hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa (hash: +x4Da87nsosWbKf7z+mFyLUyvFKLPH55B5hxOSqBXYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d4:1f:5c:c3:39:ab:f8:d1:1d:e3:cc:2a:10:ec:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
Validity
Not Before: Aug 6 10:01:27 2025 GMT
Not After : Aug 7 10:01:27 2025 GMT
Subject: CN=713707afa65d1a0062bc6d61c21c811a54ac9fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:d5:54:9d:be:f5:b5:b1:6a:b5:10:0e:97:
bd:6e:03:a8:9d:b8:fb:f5:3e:a9:9e:ad:83:20:c8:
72:26:42:c2:50:e3:e1:25:40:47:8b:c4:10:a3:60:
4e:d4:55:d1:15:0c:0c:df:33:a7:f8:f4:43:d9:b8:
a5:9b:05:a2:41:81:03:85:49:55:ac:e5:0a:78:7f:
4c:c7:b5:df:4f:97:10:be:49:9c:57:db:cf:e0:0b:
e2:4e:fb:c2:a5:69:58:a0:78:6c:bf:9d:c3:94:f7:
08:ee:c2:a2:a4:08:4e:69:40:84:96:93:34:f4:f2:
21:13:a5:bd:1e:ca:20:15:63:e5:4d:3c:36:80:e8:
a6:f5:0e:9b:c0:53:21:04:66:c9:f0:78:75:ad:9f:
9a:1e:ab:fc:49:ce:2b:86:09:90:d9:58:a2:74:e4:
61:df:90:31:2e:34:d5:3e:aa:ab:e6:b2:9d:53:c5:
0d:a0:82:bc:7a:c7:1f:fc:2a:e9:c3:3e:d1:05:e6:
d7:79:8b:ef:3f:55:6f:b9:68:41:f5:ea:15:23:f8:
5a:58:b6:08:b4:0a:12:3c:dd:99:91:c3:fa:2a:ed:
74:78:10:04:ff:0d:ed:6e:f9:5b:f8:b2:03:3f:2b:
ff:d0:0d:cf:6b:49:29:33:07:2e:cb:a2:2e:bd:b9:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:37:07:AF:A6:5D:1A:00:62:BC:6D:61:C2:1C:81:1A:54:AC:9F:EA
X509v3 Authority Key Identifier:
keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2f:3f:21:42:2f:80:75:79:d8:31:d6:40:01:72:a1:25:dd:
73:4c:8e:d4:fa:93:a8:f5:3e:65:f7:9d:f3:a9:80:87:be:d8:
77:78:bf:f1:86:a9:c8:97:2b:15:de:ae:e5:16:9c:db:00:0f:
10:d5:6c:40:0a:35:ce:b5:55:4e:b3:ae:bb:e0:df:08:96:98:
d5:e5:f7:30:32:85:45:d8:64:f0:23:5f:56:00:29:45:f9:ce:
3e:9e:a4:56:c6:a6:c8:f1:1d:06:87:e6:2a:d1:7a:d4:c2:c8:
33:79:1f:8f:c7:38:03:9d:c1:76:2a:8c:1a:00:6a:a3:7f:ec:
2a:46:db:59:2a:e0:ac:3e:a3:8e:34:0d:cb:90:45:a8:f6:e1:
19:ef:ee:3a:e8:b5:dc:97:01:80:2a:cf:24:5a:b0:b2:94:e5:
b6:46:96:f6:4b:28:10:3d:45:75:76:02:f3:f8:38:f9:6c:0d:
f0:ec:2a:c2:76:2c:89:66:1c:b4:a0:17:f3:07:ed:62:98:db:
5f:a0:c0:2a:db:54:44:b8:9f:26:7d:1b:d3:d4:48:2a:b3:2d:
3d:d9:31:53:9c:df:98:eb:83:e7:39:9f:fd:7b:8a:3a:5c:b0:
c7:13:56:6b:61:a8:7f:67:c7:16:7d:56:2d:10:27:19:98:13:
9f:69:39:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:18:08 2025 by rpki-client