Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
File: SFk-QNpaUvMi21oEwg-0htThVQI.mft (raw, json)
Hash identifier: VYK3GlDg5rUKDvb94Ys/qyfSs8+QOT9ZMXPqEXO2sBw=
Subject key identifier: B8:95:B2:04:E2:1A:28:24:75:25:4C:C9:F6:86:93:F5:03:48:E3:36
Authority key identifier: 48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
Certificate issuer: /CN=48593e40da5a52f322db5a04c20fb486d4e15502
Certificate serial: 01984778735326E536AD7322CBDB6DFE667F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
Manifest number: 12BB
Signing time: Sat 26 Jul 2025 16:02:12 +0000
Manifest this update: Sat 26 Jul 2025 16:02:12 +0000
Manifest next update: Sun 27 Jul 2025 16:02:12 +0000
Files and hashes: 1: SFk-QNpaUvMi21oEwg-0htThVQI.crl (hash: /Qm1kmv2S7u4yjYn8s3egodMS+LMiHviuCSUlgo43TA=)
2: Xe1gxuRIIOL95lwNFDlJJ4LeD98.roa (hash: E3ThdKoNF/zSVQO/0Rh8O4e1tJqwTsPdKIVV0WmD0l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:73:53:26:e5:36:ad:73:22:cb:db:6d:fe:66:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48593e40da5a52f322db5a04c20fb486d4e15502
Validity
Not Before: Jul 26 16:02:12 2025 GMT
Not After : Jul 27 16:02:12 2025 GMT
Subject: CN=b895b204e21a282475254cc9f68693f50348e336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:39:99:b9:89:ba:4e:f3:7c:9c:2b:b3:aa:36:
7a:78:b8:5a:06:e5:62:23:ee:3a:71:2a:70:44:72:
fe:d3:90:19:cd:d6:30:b0:1f:73:e4:cc:f4:b8:3b:
96:10:c5:87:a6:f0:50:c4:a2:2b:3e:28:b9:88:d4:
28:32:61:e5:11:a5:b0:a0:da:fe:bd:42:1d:36:0a:
cb:c1:e8:46:c0:d7:e5:24:67:44:b3:ac:0e:c0:55:
4a:b4:07:78:1c:cd:f3:12:fd:40:a8:3a:e2:72:a4:
40:54:76:62:97:bc:26:8a:94:14:2b:ec:e5:1c:30:
56:cc:4a:e2:ad:a9:d5:d8:f6:1f:8c:63:37:8c:8e:
47:16:53:54:85:ca:2e:44:92:17:1b:c6:11:15:74:
a7:06:2d:58:64:c3:40:68:42:c7:3c:7b:bb:05:74:
b9:45:8e:60:61:9f:aa:90:c4:bc:fd:40:ad:8e:6a:
a9:ba:4c:62:1a:ba:db:8b:fc:2d:2e:14:94:2f:19:
c0:26:04:ac:3e:d2:d7:cc:09:f5:fa:8b:d3:e2:3b:
b7:d8:7b:82:14:92:9d:66:c9:8f:84:9f:96:90:e8:
eb:91:6d:77:7f:92:70:63:e4:fc:44:b3:c1:b8:49:
3d:f1:2e:ee:dc:95:ff:8f:f1:4b:e5:d4:7e:d3:c9:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:95:B2:04:E2:1A:28:24:75:25:4C:C9:F6:86:93:F5:03:48:E3:36
X509v3 Authority Key Identifier:
keyid:48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:54:36:19:6d:47:71:7e:fc:39:0e:c5:48:4b:8f:7b:fb:c2:
b3:f9:ce:e9:1e:17:71:64:69:c2:a6:d7:62:28:4d:03:f3:cc:
b3:ba:6b:ef:52:0e:02:61:67:ff:07:6b:d4:09:80:dc:78:3c:
fa:5e:d5:33:17:c5:44:ba:59:3c:20:4b:eb:8c:9f:22:b6:07:
47:fd:e3:95:11:11:ae:8c:f8:82:1f:9a:29:1b:2d:31:d4:10:
d3:9e:73:bf:01:98:ed:c2:0e:32:51:61:b0:48:6a:eb:14:91:
0c:d0:ee:45:f8:42:e0:af:bf:73:86:30:60:83:a9:54:a7:40:
6e:e8:51:32:82:a1:3f:fc:3e:0e:7d:cf:c4:66:e4:48:b0:29:
9e:8b:cf:bb:5c:55:ed:c0:ed:c7:8f:65:9c:14:aa:04:9f:b2:
75:c9:ea:ba:58:56:77:c2:0c:da:a8:a6:42:10:ff:b0:89:e8:
0c:98:80:ba:82:97:fb:9d:bc:75:d1:b5:b4:d6:71:cf:2e:0a:
4f:53:99:3d:49:4a:e8:a5:e0:6e:f4:d5:39:4a:40:0b:71:92:
86:17:92:11:a6:6e:4e:02:c1:e1:18:78:93:69:87:61:77:53:
b2:39:48:9c:c0:14:80:7b:d4:31:8a:75:72:ab:de:cc:e9:5f:
16:4d:b6:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHeHNTJuU2rXMiy9tt/mZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTkzZTQwZGE1YTUyZjMyMmRiNWEwNGMyMGZiNDg2ZDRl
MTU1MDIwHhcNMjUwNzI2MTYwMjEyWhcNMjUwNzI3MTYwMjEyWjAzMTEwLwYDVQQD
EyhiODk1YjIwNGUyMWEyODI0NzUyNTRjYzlmNjg2OTNmNTAzNDhlMzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjmZuYm6TvN8nCuzqjZ6eLhaBuVi
I+46cSpwRHL+05AZzdYwsB9z5Mz0uDuWEMWHpvBQxKIrPii5iNQoMmHlEaWwoNr+
vUIdNgrLwehGwNflJGdEs6wOwFVKtAd4HM3zEv1AqDricqRAVHZil7wmipQUK+zl
HDBWzEriranV2PYfjGM3jI5HFlNUhcouRJIXG8YRFXSnBi1YZMNAaELHPHu7BXS5
RY5gYZ+qkMS8/UCtjmqpukxiGrrbi/wtLhSULxnAJgSsPtLXzAn1+ovT4ju32HuC
FJKdZsmPhJ+WkOjrkW13f5JwY+T8RLPBuEk98S7u3JX/j/FL5dR+08ns6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiVsgTiGigkdSVMyfaGk/UDSOM2MB8GA1UdIwQY
MBaAFEhZPkDaWlLzIttaBMIPtIbU4VUCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZrLVFOcGFVdk1pMjFvRXdnLTBodFRoVlFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NzAwYzgtZjlhYi00MmE3LWIxZmEt
ZTY4YTA4ZDllNTRmLzEvU0ZrLVFOcGFVdk1pMjFvRXdnLTBodFRoVlFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NzAwYzgtZjlhYi00MmE3LWIxZmEtZTY4YTA4ZDllNTRm
LzEvU0ZrLVFOcGFVdk1pMjFvRXdnLTBodFRoVlFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblQ2GW1H
cX78OQ7FSEuPe/vCs/nO6R4XcWRpwqbXYihNA/PMs7pr71IOAmFn/wdr1AmA3Hg8
+l7VMxfFRLpZPCBL64yfIrYHR/3jlRERroz4gh+aKRstMdQQ055zvwGY7cIOMlFh
sEhq6xSRDNDuRfhC4K+/c4YwYIOpVKdAbuhRMoKhP/w+Dn3PxGbkSLApnovPu1xV
7cDtx49lnBSqBJ+ydcnqulhWd8IM2qimQhD/sInoDJiAuoKX+528ddG1tNZxzy4K
T1OZPUlK6KXgbvTVOUpAC3GShheSEaZuTgLB4Rh4k2mHYXdTsjlInMAUgHvUMYp1
cqvezOlfFk22kA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:11:31 2025 by rpki-client