Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
File: SfJiM_W7QibCp6e5ADAI0Z40eFs.mft (raw, json)
Hash identifier: am9oPzQWDREFyqwj+QmzFo8UnrNEwX9Jl0mUF/8oUPQ=
Subject key identifier: C7:7D:9E:D6:BA:51:36:DA:D8:DE:5A:27:6D:42:36:19:15:BD:A1:48
Authority key identifier: 49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
Certificate issuer: /CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Certificate serial: 019872CFA5B1217709CE5BD450554851D827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
Manifest number: 11A5
Signing time: Mon 04 Aug 2025 02:01:07 +0000
Manifest this update: Mon 04 Aug 2025 02:01:07 +0000
Manifest next update: Tue 05 Aug 2025 02:01:07 +0000
Files and hashes: 1: SfJiM_W7QibCp6e5ADAI0Z40eFs.crl (hash: P95l4aKzmS59D//AowRcRIMZcHeHKIcMHtiE965LprM=)
2: TmwIzb5OMEe4RHPaC68IjB6na0k.roa (hash: dW1pEtOcDuseosGnHRvKaebls+Ju6AZ6FoBVPM8QbJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:a5:b1:21:77:09:ce:5b:d4:50:55:48:51:d8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Validity
Not Before: Aug 4 02:01:07 2025 GMT
Not After : Aug 5 02:01:07 2025 GMT
Subject: CN=c77d9ed6ba5136dad8de5a276d42361915bda148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:e0:10:03:54:54:69:68:94:1f:b7:bb:09:
de:aa:9f:08:ee:23:93:34:1c:80:ec:83:e1:74:c8:
21:eb:f7:d3:38:cc:bf:19:51:4c:94:d7:c0:32:cf:
01:40:4a:2d:51:70:be:04:3c:b6:9a:5c:4d:0b:a7:
d1:20:13:2f:93:06:e3:94:be:97:dd:f7:07:32:ee:
8e:b7:86:5b:82:a7:81:1d:13:8b:1e:6a:d0:b2:6c:
9b:bc:54:e4:7d:7d:42:bf:3f:21:14:a1:a2:62:30:
75:86:fb:37:10:6a:40:32:71:c3:95:d0:91:97:81:
73:49:2f:24:56:12:22:42:ae:25:73:af:d4:1a:21:
7b:d6:a1:ac:d7:a2:cb:09:71:ba:1c:3f:0a:2b:22:
34:cd:4b:eb:a0:ab:07:17:be:ee:1d:b0:b3:5d:06:
de:86:c8:9e:f3:18:04:07:f3:75:6c:14:4c:5c:b1:
6b:52:5a:f4:62:7e:73:fb:67:e8:e6:29:5c:82:51:
11:f0:05:90:1b:7b:dd:c0:d9:71:dc:0c:e6:ba:ee:
21:b8:65:2c:75:62:55:6f:75:0e:5c:8d:5b:4b:d7:
5d:87:87:59:44:f0:7d:0b:4c:62:5f:cd:45:85:ce:
ea:69:79:08:b9:8c:40:cf:3a:68:51:d3:5f:1a:00:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7D:9E:D6:BA:51:36:DA:D8:DE:5A:27:6D:42:36:19:15:BD:A1:48
X509v3 Authority Key Identifier:
keyid:49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ea:7e:9a:0c:91:d5:be:5b:77:83:8f:fc:3a:9c:65:8f:9d:
c5:25:75:61:fc:4b:f6:6a:50:fd:6d:e8:4b:b4:4b:dc:3b:6a:
94:f6:98:c2:fc:35:05:01:b8:af:82:c5:4f:32:53:62:f3:ee:
03:29:58:39:47:32:f6:2d:e6:9d:37:58:86:71:10:fa:e0:a3:
35:19:8b:56:44:07:9f:f4:84:22:1f:36:e4:89:70:be:d3:03:
b0:a5:54:04:a4:ec:63:d9:3f:04:78:58:b8:ad:9c:c3:d2:d5:
7d:85:9f:7b:53:e0:34:7f:9c:c4:ef:89:d6:07:1b:cb:e3:5e:
e1:7c:7e:ad:d5:48:23:ff:b6:99:4d:1d:d7:3d:24:a7:63:78:
2d:ed:77:4d:72:f0:ca:27:50:d2:a4:50:f3:8d:75:5b:ad:42:
1e:04:a0:ea:30:e5:5c:2d:50:8b:b5:62:9e:4b:21:a2:7a:84:
7d:70:0a:d6:53:3e:59:9e:dd:73:28:54:20:7d:8c:8d:42:2e:
58:6f:cc:e1:d2:35:99:2e:ec:4e:c3:cf:34:20:08:4a:ee:c4:
e2:f6:ee:c5:01:e2:95:37:db:fb:ac:e1:80:87:99:04:1b:0e:
76:36:0e:26:49:aa:7b:c7:ad:5b:b8:56:71:8c:9b:2a:91:b7:
33:0f:3a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:42 2025 by rpki-client