Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
File: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft (raw, json)
Hash identifier: 3qzzWyvhSIYMAakJpJwgwZdBF91NDv9SRd3zuYme8Hw=
Subject key identifier: AB:C8:C7:E5:66:D9:2C:90:D6:41:C4:37:1D:32:1F:CC:46:1F:FE:92
Authority key identifier: 49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
Certificate issuer: /CN=49f9b880f259b88190702c22bf832171b7597434
Certificate serial: 0198A04EBB68278FF1EA6F5B6DE29B097571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
Manifest number: 1281
Signing time: Tue 12 Aug 2025 22:02:50 +0000
Manifest this update: Tue 12 Aug 2025 22:02:50 +0000
Manifest next update: Wed 13 Aug 2025 22:02:50 +0000
Files and hashes: 1: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl (hash: vNs58gRRIHsreA0nzkhu9RE5f987DIGvxuLDx/GybAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:bb:68:27:8f:f1:ea:6f:5b:6d:e2:9b:09:75:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f9b880f259b88190702c22bf832171b7597434
Validity
Not Before: Aug 12 22:02:50 2025 GMT
Not After : Aug 13 22:02:50 2025 GMT
Subject: CN=abc8c7e566d92c90d641c4371d321fcc461ffe92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ab:34:c9:9a:4d:9d:43:fa:04:6f:cc:3e:ed:
bb:eb:0b:cf:42:77:11:4f:1a:cd:a2:fc:a9:f9:fb:
42:e7:b1:6a:8d:09:76:2a:be:85:3a:74:14:d2:a6:
2b:cc:cd:9f:46:74:b0:fd:81:eb:c4:0a:96:5c:99:
fd:d3:ce:b1:cd:b9:ba:b6:01:a7:c1:f7:5e:27:ee:
1d:45:94:db:6f:9a:07:8c:fa:ce:e7:a4:8f:5e:1a:
fc:3c:2e:3b:92:21:16:ea:cc:15:64:2b:ea:12:72:
65:7f:9b:ba:78:04:2d:e2:59:db:54:ba:b2:53:2b:
fe:a8:ea:2f:c4:70:3d:46:24:42:82:14:0f:ad:84:
60:9e:21:54:8c:8e:7e:ad:a2:d6:77:3e:62:61:bc:
81:91:6d:0b:2c:14:bb:f1:af:ba:7d:02:a0:6d:34:
45:de:84:49:5f:2b:ab:c2:e4:44:7c:c7:df:4b:f0:
fe:ad:71:98:dd:58:7d:46:7f:5c:7e:51:3a:8e:97:
dd:37:ee:c2:80:8b:27:72:10:b2:3a:5d:33:52:9b:
2f:cb:93:d3:ea:ca:9e:fa:a6:8f:aa:67:c5:32:0f:
c9:ff:4a:81:9d:73:ef:77:fb:37:40:7e:a3:f1:18:
a9:18:65:13:5f:21:f2:46:94:0e:ba:73:6a:1d:2c:
bd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C8:C7:E5:66:D9:2C:90:D6:41:C4:37:1D:32:1F:CC:46:1F:FE:92
X509v3 Authority Key Identifier:
keyid:49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9e:7a:02:59:fd:ca:38:16:55:f4:1c:88:4c:07:47:9b:10:
58:1a:62:b5:04:70:79:64:34:0a:34:3c:fb:0e:67:ee:fa:0a:
48:d8:95:34:b0:21:8a:83:46:99:21:b7:3c:94:3f:bc:d8:a3:
e1:e9:62:39:e6:ac:b8:d5:45:7d:b4:96:74:ee:c0:4c:d4:b0:
b9:82:cf:ae:56:63:71:23:cb:80:bc:d2:55:7c:9f:22:39:66:
a6:b9:40:22:9e:53:22:a7:4e:97:af:81:f3:60:58:c0:c8:6f:
4d:23:2f:9e:09:de:2e:c7:dc:ec:fb:fa:40:7d:1e:50:6c:9b:
24:96:d8:10:8a:58:98:b9:bb:d5:60:d4:b9:56:73:94:3b:22:
8b:24:c5:ab:10:dc:cd:93:2c:b2:27:a5:ed:ae:82:e5:0d:6d:
38:91:8f:06:07:cf:b4:37:2a:4d:3f:cc:39:23:e5:47:60:f3:
c3:b6:2b:db:34:c6:a8:6d:5a:2c:f8:ad:ff:f2:f6:71:88:42:
f9:59:14:e9:75:94:22:c3:d1:e3:9f:77:23:02:bf:15:55:70:
a4:c5:df:16:85:84:94:d8:9a:77:4d:03:09:15:d2:1c:5d:9a:
77:c3:9b:7e:39:46:d2:90:30:65:c7:6b:b5:97:ec:10:b6:51:
96:a6:0f:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTrtoJ4/x6m9bbeKbCXVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjliODgwZjI1OWI4ODE5MDcwMmMyMmJmODMyMTcxYjc1
OTc0MzQwHhcNMjUwODEyMjIwMjUwWhcNMjUwODEzMjIwMjUwWjAzMTEwLwYDVQQD
EyhhYmM4YzdlNTY2ZDkyYzkwZDY0MWM0MzcxZDMyMWZjYzQ2MWZmZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66s0yZpNnUP6BG/MPu276wvPQncR
TxrNovyp+ftC57FqjQl2Kr6FOnQU0qYrzM2fRnSw/YHrxAqWXJn9086xzbm6tgGn
wfdeJ+4dRZTbb5oHjPrO56SPXhr8PC47kiEW6swVZCvqEnJlf5u6eAQt4lnbVLqy
Uyv+qOovxHA9RiRCghQPrYRgniFUjI5+raLWdz5iYbyBkW0LLBS78a+6fQKgbTRF
3oRJXyurwuREfMffS/D+rXGY3Vh9Rn9cflE6jpfdN+7CgIsnchCyOl0zUpsvy5PT
6sqe+qaPqmfFMg/J/0qBnXPvd/s3QH6j8RipGGUTXyHyRpQOunNqHSy95wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvIx+Vm2SyQ1kHENx0yH8xGH/6SMB8GA1UdIwQY
MBaAFEn5uIDyWbiBkHAsIr+DIXG3WXQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZtNGdQSlp1SUdRY0N3aXY0TWhjYmRaZERRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hOTk4YmItM2JjMy00NTk3LThkY2Mt
YzRmMjI1MzZhYjA1LzEvU2ZtNGdQSlp1SUdRY0N3aXY0TWhjYmRaZERRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hOTk4YmItM2JjMy00NTk3LThkY2MtYzRmMjI1MzZhYjA1
LzEvU2ZtNGdQSlp1SUdRY0N3aXY0TWhjYmRaZERRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMp56Aln9
yjgWVfQciEwHR5sQWBpitQRweWQ0CjQ8+w5n7voKSNiVNLAhioNGmSG3PJQ/vNij
4eliOeasuNVFfbSWdO7ATNSwuYLPrlZjcSPLgLzSVXyfIjlmprlAIp5TIqdOl6+B
82BYwMhvTSMvngneLsfc7Pv6QH0eUGybJJbYEIpYmLm71WDUuVZzlDsiiyTFqxDc
zZMssiel7a6C5Q1tOJGPBgfPtDcqTT/MOSPlR2Dzw7Yr2zTGqG1aLPit//L2cYhC
+VkU6XWUIsPR4593IwK/FVVwpMXfFoWElNiad00DCRXSHF2ad8ObfjlG0pAwZcdr
tZfsELZRlqYPGg==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:11:06 2025 by rpki-client