Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
File: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft (raw, json)
Hash identifier: oozdR2aPa5ZmRipvVHclpPtuTgRqSb59uLvNRMssmC4=
Subject key identifier: 18:B8:E7:4B:D3:06:6A:21:E8:1E:BB:45:66:68:63:90:2E:67:E7:72
Authority key identifier: 49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
Certificate issuer: /CN=49f9b880f259b88190702c22bf832171b7597434
Certificate serial: 019A4EF540A95D60C7276742B89DABB1AF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
Manifest number: 1360
Signing time: Tue 04 Nov 2025 13:01:26 +0000
Manifest this update: Tue 04 Nov 2025 13:01:26 +0000
Manifest next update: Wed 05 Nov 2025 13:01:26 +0000
Files and hashes: 1: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl (hash: d7dce1tUqQoHGBqS3SaiPQvVeMO1WsDDsF1eB1ncS+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:40:a9:5d:60:c7:27:67:42:b8:9d:ab:b1:af:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f9b880f259b88190702c22bf832171b7597434
Validity
Not Before: Nov 4 13:01:26 2025 GMT
Not After : Nov 5 13:01:26 2025 GMT
Subject: CN=18b8e74bd3066a21e81ebb45666863902e67e772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:38:64:69:e2:4c:cd:c4:72:92:22:54:da:
bd:6f:d5:f4:3d:ee:dc:fa:5d:06:65:2e:09:ce:7a:
88:66:9f:9d:03:b0:9a:5e:ec:3e:b4:ad:81:57:a5:
31:f1:42:e9:c1:99:13:02:47:e4:46:cb:7f:53:50:
a9:03:74:e3:b8:e2:7c:29:e1:f7:ee:13:30:cd:e7:
e6:54:47:5d:7c:9f:58:f6:bc:64:2e:c8:d9:a2:cc:
9c:01:b9:f7:73:62:53:a1:a6:e5:fe:3b:e9:56:92:
51:e4:cb:08:3c:1d:e4:fd:a5:c5:2e:58:8c:1f:aa:
95:5d:ab:e9:3a:86:02:cc:f6:78:b6:40:39:fc:ce:
61:26:a0:73:11:1b:66:68:e5:21:28:5d:57:f6:8d:
6c:c8:dd:86:45:d5:3f:d9:19:ad:b1:6d:87:03:c4:
26:71:c5:0a:1b:17:ac:b7:b1:12:58:5f:7a:6e:45:
d0:c9:8c:4a:41:7f:9e:2c:f5:89:54:9c:37:83:66:
b3:0a:c0:b6:d0:3d:31:e2:bd:61:85:14:d2:62:36:
d3:55:1b:a4:41:34:5f:3a:bc:6b:b5:b4:25:cb:8a:
f4:bd:49:97:5e:31:9b:ef:ee:75:50:b2:3c:da:07:
9f:7b:99:9f:c6:b2:c6:5c:04:cf:51:1b:52:39:f6:
d1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B8:E7:4B:D3:06:6A:21:E8:1E:BB:45:66:68:63:90:2E:67:E7:72
X509v3 Authority Key Identifier:
keyid:49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5c:e5:3c:ec:96:43:7b:ae:8c:21:90:dc:a1:6f:11:a7:56:
24:6c:29:95:21:4c:c8:01:ae:9a:dd:53:fa:e2:b7:7c:8d:2f:
db:4d:a0:ed:17:33:74:a2:7f:33:81:cf:5c:34:b5:11:70:b7:
24:69:bb:e8:3f:84:90:62:99:e1:57:20:87:cb:10:7c:e1:21:
05:74:82:c6:e6:a7:95:20:7d:4f:2e:f4:82:dd:8e:7e:d1:22:
e6:48:b9:4b:8d:0e:7f:6f:49:80:9a:ad:61:8e:9b:8e:b3:24:
d1:38:7e:e9:47:1f:f7:65:f6:c3:ec:ed:56:8f:dc:43:b0:00:
03:06:db:26:9b:ca:c9:45:0a:e5:42:c0:e0:4f:5d:9b:48:a8:
cc:42:f5:78:40:af:c4:69:eb:0e:56:44:9d:78:0b:31:1e:86:
7e:90:22:2f:6a:8f:0e:bb:9a:a2:4c:4b:b5:18:08:50:6e:3e:
ed:f9:c1:e3:16:4d:b6:cf:65:0c:3e:47:be:55:c6:97:23:01:
b2:b7:a7:16:3b:2d:d4:3e:0b:fe:ac:b8:1c:f1:54:92:5f:54:
d8:f2:e2:b0:2d:da:87:c9:c6:14:49:6a:75:81:17:f4:a7:08:
22:50:92:89:1e:09:bc:bf:39:16:52:44:03:59:9c:04:4a:6f:
4c:5e:e7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:24:55 2025 by rpki-client