Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File: SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier: OR2Z886MNGydo8onbCHx7O292InR6ZmNVecKjXpx/Io=
Subject key identifier: 90:52:F3:FF:F6:5D:33:4F:CE:D9:DF:F1:33:B1:F8:DA:BE:A3:6C:C2
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial: 019A52D1CD8A98ED815F777A6A6AEA714E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number: 13F5
Signing time: Wed 05 Nov 2025 07:01:12 +0000
Manifest this update: Wed 05 Nov 2025 07:01:12 +0000
Manifest next update: Thu 06 Nov 2025 07:01:12 +0000
Files and hashes: 1: 1PfCogsrcmO4yMFx3i7dWcicxiM.roa (hash: QSA42PQDSQu+Rjvywm1NdoufERvHtIOdqRGsBA5DYb0=)
2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: hXE5YpUZdcdALLhbEukXUn1e5IOzXdtTI2k2huwZsls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:cd:8a:98:ed:81:5f:77:7a:6a:6a:ea:71:4e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Validity
Not Before: Nov 5 07:01:12 2025 GMT
Not After : Nov 6 07:01:12 2025 GMT
Subject: CN=9052f3fff65d334fced9dff133b1f8dabea36cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:76:6a:09:b8:0d:55:68:52:93:40:4e:79:
7a:ca:67:7e:3c:b9:7f:2e:59:04:8f:60:5b:22:f3:
13:bc:57:21:6a:b7:a2:85:55:f0:33:86:2e:ee:22:
d1:9b:b6:d1:92:c3:8e:b0:a3:2f:c9:cd:0d:d7:9a:
f8:3b:a8:f4:c0:db:1f:07:3b:76:f0:8b:ba:1e:7c:
7c:5f:05:82:72:4b:53:b4:73:98:eb:5f:2b:00:80:
a7:58:90:0c:93:67:78:1d:93:7e:ec:6f:04:b0:46:
f1:39:2f:e2:66:25:9b:fa:0b:b8:4d:78:dc:e4:79:
ec:5a:d4:2d:9a:4b:67:d5:b9:0a:5f:6e:d1:6c:f2:
76:c5:6b:ae:af:ae:f2:3e:5f:b0:b7:b3:e3:0b:d8:
24:f6:fe:af:37:ba:ba:b3:d5:3b:ca:e1:f0:b1:69:
15:54:1a:37:ba:fc:c6:b5:e1:ff:d3:57:5e:78:91:
2e:fa:53:76:7d:78:32:30:6d:0e:37:73:62:c7:63:
3c:74:df:33:27:0d:57:93:0d:3b:8c:96:92:d8:9e:
37:ed:bd:22:9f:13:95:25:78:8c:f0:9b:af:cc:36:
b7:f5:a8:0c:86:d3:64:b7:c9:4a:18:11:91:bf:f9:
c1:30:94:ad:e0:e5:d9:5a:ca:92:68:a5:2c:30:36:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:52:F3:FF:F6:5D:33:4F:CE:D9:DF:F1:33:B1:F8:DA:BE:A3:6C:C2
X509v3 Authority Key Identifier:
keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d9:a4:a9:ce:4e:80:ad:70:e8:2c:46:c1:11:88:05:48:b9:
a5:21:ae:4f:e9:9d:f0:4b:1f:7d:2d:0a:d9:72:38:e1:3e:42:
27:e6:6e:21:02:6f:ea:83:07:4d:a8:b9:29:33:ed:50:3a:20:
9d:8d:44:93:70:50:ba:31:0c:b1:16:9f:05:93:e8:5c:1a:43:
41:5b:2d:ef:58:94:07:a8:25:d0:d5:fc:56:f4:22:71:38:09:
8b:74:74:48:33:74:16:f8:0a:a8:04:11:a8:14:f2:a4:0e:4c:
a3:15:06:8f:21:cb:05:85:8a:2a:42:74:fd:fb:89:eb:a2:9f:
6b:32:b4:ca:71:42:f7:34:b2:08:a6:46:79:dd:b3:96:d1:7b:
5e:8a:67:58:f5:1f:ff:f6:3f:08:92:f4:22:c7:b7:d3:1b:cb:
bd:26:fa:86:63:43:7a:04:71:f0:73:0f:be:c9:e9:e0:80:99:
c5:91:65:92:13:b9:fe:03:cb:17:1b:31:23:56:44:7e:43:00:
9a:7c:17:c2:9c:2e:ec:3f:3d:03:4b:df:13:0c:e4:dc:62:3a:
b0:6d:e0:e7:be:a1:5e:47:25:98:95:22:aa:87:76:6f:71:0f:
c3:71:e3:5e:f5:38:b9:ad:78:35:56:e2:59:24:df:2f:f5:b0:
1f:48:34:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:16:01 2025 by rpki-client