Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json)
Hash identifier: k3B4MuPaA6qk5oppMkg4yV5G1njBM9udh6+U+PY/O3Y=
Subject key identifier: 19:7A:D9:39:BB:62:C6:B8:BB:95:CF:D2:FD:4E:DA:63:AB:0C:62:5D
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial: 019769CEC53C465789BE368C0CFFABA90E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
Manifest number: 0F59
Signing time: Fri 13 Jun 2025 15:00:47 +0000
Manifest this update: Fri 13 Jun 2025 15:00:47 +0000
Manifest next update: Sat 14 Jun 2025 15:00:47 +0000
Files and hashes: 1: JUMv7Yi2cpE5n4jH_daU8-Wkj_s.roa (hash: 8Ur2YBrwEIHwiqas+AFAXGNfkZXPANsLJAnLoARlVGk=)
2: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: ibsrJfSQjiX0KdWQHWfss0nEwv2KoMTI17eQcyrSEtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:c5:3c:46:57:89:be:36:8c:0c:ff:ab:a9:0e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Validity
Not Before: Jun 13 15:00:47 2025 GMT
Not After : Jun 14 15:00:47 2025 GMT
Subject: CN=197ad939bb62c6b8bb95cfd2fd4eda63ab0c625d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7d:ea:a9:a8:64:71:5e:da:0f:e2:21:4e:b4:
58:9b:f6:26:76:7a:79:62:d8:d1:25:db:08:df:26:
38:b3:9b:ed:4d:f8:31:46:d6:79:7d:15:a1:a0:01:
b6:78:8b:a6:54:11:c6:5c:ba:30:68:ef:a0:6d:f1:
d2:0f:33:57:e8:51:23:15:b8:fd:ed:91:6e:e4:85:
7e:ba:4e:af:d4:5d:c5:19:00:2b:25:5a:0b:bd:0a:
a9:60:0d:a8:d1:34:a8:53:ba:c5:22:8d:0e:20:3c:
0f:8b:73:8a:c0:91:70:59:78:8e:24:58:50:d4:15:
00:4a:c2:fb:61:4a:de:0c:15:9d:e4:9e:41:4e:27:
c9:9c:3e:11:d1:e3:1b:1d:27:bc:87:cd:49:a8:ed:
ce:b5:58:b7:0f:c5:6e:5f:3c:88:99:67:4d:55:39:
89:df:fb:4d:97:70:d6:d7:f8:06:38:ba:05:66:dd:
b9:c1:8d:d0:4d:ba:ed:d6:07:d2:d0:58:a6:2a:93:
8b:96:96:70:d2:7e:fd:8a:c9:4e:e0:51:84:e8:e3:
cc:69:01:77:54:05:d9:90:05:19:c9:99:9b:5d:08:
a8:d8:f9:28:f9:dd:0d:b4:7b:90:1e:e7:8b:7f:17:
40:21:ca:fe:02:81:fe:85:17:67:7d:bb:92:81:04:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7A:D9:39:BB:62:C6:B8:BB:95:CF:D2:FD:4E:DA:63:AB:0C:62:5D
X509v3 Authority Key Identifier:
keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:92:b1:78:1e:dd:c9:d2:fa:72:ae:96:7a:06:12:4a:52:d7:
13:9e:da:a8:09:86:d3:05:9b:52:c2:3c:f1:08:23:5b:e6:41:
f4:15:10:96:37:c8:86:19:94:9f:df:0c:4c:52:e6:94:05:6f:
c7:12:95:a6:79:9f:0a:2b:74:d7:cf:04:96:00:d8:d5:2c:a1:
83:86:7b:c8:b7:24:25:7c:9b:73:fb:45:b6:76:2b:b0:82:4f:
fd:24:f3:5f:af:a8:65:13:66:ab:bb:cb:21:54:8b:03:0b:e9:
c4:5a:a4:67:46:45:43:51:e3:f0:07:7d:ba:c0:38:ea:e4:c6:
96:7a:fc:96:53:13:ae:ab:1b:61:7a:20:71:1d:dd:e9:43:fa:
db:33:5c:f3:87:3d:43:26:64:66:5a:e4:70:52:d3:41:95:9a:
22:11:bf:05:31:4f:6c:aa:92:1b:a7:e6:b2:37:38:83:37:b9:
be:a5:85:63:2a:1a:93:43:7a:71:02:db:1d:cd:3e:f2:16:66:
63:ab:2b:34:c6:32:9c:90:f4:1b:e7:77:88:b7:02:9b:86:3b:
33:17:7f:3d:80:06:28:fe:3a:f4:eb:c6:bd:8d:65:a7:06:d2:
2a:a5:24:af:f4:6f:c4:ed:c8:c0:af:c6:46:b6:a9:34:9f:91:
59:c5:62:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:22 2025 by rpki-client