Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
File: SFF8v1-HKM7CSvPC6G7PuANT5g0.mft (raw, json)
Hash identifier: LGazHs4Xs+GxiOdiGtSMRf7rIhqwy+dslJT6eE1z2Ts=
Subject key identifier: A6:23:61:75:7B:09:A7:5B:86:7A:73:D0:97:8C:78:38:B5:A2:26:B1
Authority key identifier: 48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
Certificate issuer: /CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Certificate serial: 0196748C3CF64D35689B4C26FA5F148B0DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
Manifest number: 0BEE
Signing time: Sun 27 Apr 2025 00:01:09 +0000
Manifest this update: Sun 27 Apr 2025 00:01:09 +0000
Manifest next update: Mon 28 Apr 2025 00:01:09 +0000
Files and hashes: 1: SFF8v1-HKM7CSvPC6G7PuANT5g0.crl (hash: 9ZpkNQ58LeMgIiYk8TMFtvMrwhvdimZnfzaQKVLHsUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:3c:f6:4d:35:68:9b:4c:26:fa:5f:14:8b:0d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Validity
Not Before: Apr 27 00:01:09 2025 GMT
Not After : Apr 28 00:01:09 2025 GMT
Subject: CN=a62361757b09a75b867a73d0978c7838b5a226b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:fb:f7:75:c2:d6:1a:05:a3:81:65:a8:60:
43:c2:b4:7e:95:17:8a:e6:52:7f:a8:81:8b:5f:2a:
52:e3:c6:f2:ec:d2:79:09:c3:d2:13:8f:b6:14:ce:
fb:3b:cc:04:7c:e4:d6:d8:ed:b3:91:26:e8:e1:3f:
ca:95:88:43:74:77:5e:25:e0:a1:86:a0:aa:15:85:
74:27:38:83:f8:aa:9b:d9:cf:1d:c1:4f:11:e6:d8:
8b:92:5a:32:71:a2:d8:1d:77:66:41:fe:b5:4f:5c:
19:b7:61:4d:57:3f:66:75:74:2a:d5:a4:c3:59:bc:
1b:1f:b1:73:26:e4:41:24:f3:97:f4:25:75:40:a9:
1b:a0:01:3a:85:c1:20:9a:64:d6:b8:54:5c:8c:17:
2c:93:26:5e:23:03:65:20:69:ee:94:44:b6:fe:4b:
5e:0f:4a:4a:48:18:8c:c3:b3:44:00:20:3a:8e:d1:
73:64:ee:c8:91:d3:c6:f1:72:6d:16:dc:5a:fa:78:
5b:af:05:3c:88:47:29:a8:44:3d:e7:74:cd:8b:c1:
03:40:5d:74:00:9b:de:79:3f:8e:0d:86:8d:d1:0a:
a9:1b:e8:e1:81:a2:e3:ab:71:51:37:55:05:99:4e:
e1:64:5a:a9:5f:01:12:02:5c:5e:a3:84:06:3c:b9:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:23:61:75:7B:09:A7:5B:86:7A:73:D0:97:8C:78:38:B5:A2:26:B1
X509v3 Authority Key Identifier:
keyid:48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:05:4c:4b:cf:8e:cd:38:b6:70:b8:6b:4a:52:a9:cc:73:ab:
a9:54:5a:ce:f3:bd:48:25:0f:46:0d:c2:e0:0d:9a:e8:4e:0d:
51:2f:4a:58:32:62:e2:68:60:0e:ab:60:8f:44:25:91:99:ec:
45:c7:80:8d:ef:ab:ec:74:e7:fb:2d:2c:4b:04:0c:b3:fd:ae:
6e:a5:b7:b7:bd:ed:77:14:63:ae:47:20:9c:a3:5e:e3:63:b5:
fb:ca:89:80:c0:eb:5f:78:9c:e3:52:f1:f5:70:d5:8b:70:d6:
be:23:5d:e8:3b:8e:3c:94:4b:bf:a9:e9:57:e2:80:4d:dd:61:
36:11:59:42:9d:8d:6f:3d:21:b2:3f:4c:6a:75:f8:44:2b:da:
e8:94:ad:2c:38:7e:c8:0e:26:f1:a2:c5:31:71:2a:de:a3:a9:
2a:86:0b:51:ee:5f:4a:43:a6:33:ec:e6:fa:c1:4f:cb:fa:e2:
e5:79:e4:89:17:34:23:5c:9a:86:8d:36:6c:bb:ec:4e:9b:36:
e5:dc:7a:34:48:0c:d4:de:f8:30:aa:89:61:cc:ea:38:ea:f8:
aa:14:0f:6f:37:09:cf:5d:9d:4c:6e:e2:af:2c:db:bb:b6:d5:
ab:b5:29:bf:d7:be:ca:bf:eb:fa:6c:45:2a:f5:b6:cb:7f:ee:
01:9d:ae:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:18 2025 by rpki-client