Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json)
Hash identifier: ZADfKTdBq0NGa/PCKnKKYFr7cz184b00yj5RjVbkNTY=
Subject key identifier: BC:60:8D:2D:F9:79:C3:7D:DC:EE:9E:59:BF:CD:BA:33:91:63:4F:B2
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial: 0198537AE89721C927E3AD6CA79B209CD67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
Manifest number: 0FD2
Signing time: Tue 29 Jul 2025 00:00:20 +0000
Manifest this update: Tue 29 Jul 2025 00:00:20 +0000
Manifest next update: Wed 30 Jul 2025 00:00:20 +0000
Files and hashes: 1: JUMv7Yi2cpE5n4jH_daU8-Wkj_s.roa (hash: 8Ur2YBrwEIHwiqas+AFAXGNfkZXPANsLJAnLoARlVGk=)
2: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: RAa1miG+zTioskImdCKKjFInpqmuLLLH1ilSmDJm37c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:e8:97:21:c9:27:e3:ad:6c:a7:9b:20:9c:d6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Validity
Not Before: Jul 29 00:00:20 2025 GMT
Not After : Jul 30 00:00:20 2025 GMT
Subject: CN=bc608d2df979c37ddcee9e59bfcdba3391634fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2b:6b:ac:65:50:38:58:ec:91:fe:2d:77:78:
0e:a2:d4:be:2d:35:c2:51:4a:7c:16:10:b8:e7:9e:
93:62:63:cb:5b:dd:38:c5:0e:0d:9a:56:11:d3:4b:
44:c8:6d:3f:1f:ea:c7:80:6f:09:4f:de:8d:2e:fd:
8f:89:3d:31:47:f2:ae:d8:c1:49:0c:51:75:4b:05:
f5:d2:04:d0:10:5a:c6:bd:ad:01:5c:e2:94:07:89:
ab:4d:69:f5:d6:f6:3c:e6:0f:0b:a7:b4:38:3c:63:
81:82:97:dd:fa:98:d7:9e:5b:39:97:d2:c5:62:53:
3b:58:0e:2b:79:72:60:25:f1:33:cb:dc:cd:b9:06:
35:dc:a0:95:c5:7a:9f:af:7b:13:bc:2f:3e:56:6e:
b5:27:2e:52:4f:f7:b0:7d:0d:ae:75:41:27:20:a8:
57:94:6f:d4:ba:66:67:9c:4f:14:72:31:b6:77:cb:
74:70:9b:00:91:2b:2a:ae:8f:c1:9d:1d:72:4b:5d:
c0:6e:71:f9:f7:90:5e:db:b3:b3:ee:2b:0e:e2:d7:
5b:77:62:49:71:47:fb:7e:b4:2e:b5:17:41:ff:24:
e7:27:99:cb:6d:ce:4b:56:b6:17:26:56:67:15:11:
fb:b4:0b:f1:53:68:11:f7:29:3e:ce:98:78:ff:b8:
65:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:60:8D:2D:F9:79:C3:7D:DC:EE:9E:59:BF:CD:BA:33:91:63:4F:B2
X509v3 Authority Key Identifier:
keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a5:65:26:38:51:7d:cc:ff:0c:fc:9e:40:3d:97:fd:35:3c:
80:10:30:19:4d:bf:30:6e:4f:53:8a:b2:6d:2a:4c:44:b6:8d:
53:81:bf:55:bc:26:45:0e:34:85:f6:b0:03:42:a6:5d:0b:01:
04:a0:d3:20:b2:e0:96:f5:d5:15:69:1c:fd:5b:d0:f4:9b:a7:
ba:26:d8:32:b5:89:28:0a:63:bf:d5:4d:46:35:82:59:23:49:
e2:b8:1e:89:46:f9:ac:56:03:da:79:46:51:bd:9c:50:74:17:
f8:c3:0d:b0:fe:ac:fa:f4:7b:18:ac:01:10:fb:c7:9a:0d:58:
b6:aa:5c:bc:f7:41:4e:3c:1e:b5:16:31:80:ae:fa:b2:19:fd:
cf:df:04:2a:f4:75:12:6a:63:a1:e2:2f:be:72:70:c4:4e:1d:
a0:80:b5:b5:75:42:f8:e6:18:73:94:e1:6f:dc:80:97:30:7c:
9c:a8:8b:ac:bd:2d:98:0b:e9:4d:5b:10:0b:d4:06:b9:9b:1d:
7d:5b:c6:87:38:3a:2c:ad:8e:36:41:dc:89:6c:a6:35:17:1c:
18:38:8d:b4:f1:8b:68:87:11:1b:eb:50:08:9e:16:a4:ce:16:
e4:bd:30:a7:e0:5c:b8:d2:b5:3a:d4:4d:30:d4:4e:96:87:94:
13:21:06:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:39:19 2025 by rpki-client