Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
File: SfJiM_W7QibCp6e5ADAI0Z40eFs.mft (raw, json)
Hash identifier: 5o4LsUMa2lNLtuyuksNmopp6E0XVspC6fah0lmfCjLY=
Subject key identifier: 8B:A8:AF:A2:99:0B:89:9A:17:AA:82:62:26:04:4D:33:4F:CE:C0:FA
Authority key identifier: 49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
Certificate issuer: /CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Certificate serial: 01984C2FF768EDF4C3DE7C7CBEE7275A8B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
Manifest number: 1191
Signing time: Sun 27 Jul 2025 14:01:08 +0000
Manifest this update: Sun 27 Jul 2025 14:01:08 +0000
Manifest next update: Mon 28 Jul 2025 14:01:08 +0000
Files and hashes: 1: SfJiM_W7QibCp6e5ADAI0Z40eFs.crl (hash: bhKYHipz+mj1bdQ855zoIohcjX6D3bP0japYl7az/wU=)
2: TmwIzb5OMEe4RHPaC68IjB6na0k.roa (hash: dW1pEtOcDuseosGnHRvKaebls+Ju6AZ6FoBVPM8QbJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:f7:68:ed:f4:c3:de:7c:7c:be:e7:27:5a:8b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Validity
Not Before: Jul 27 14:01:08 2025 GMT
Not After : Jul 28 14:01:08 2025 GMT
Subject: CN=8ba8afa2990b899a17aa826226044d334fcec0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:78:60:f2:ba:26:a8:f5:90:d2:1d:ef:9f:
a6:92:4b:76:47:6b:bc:49:42:f4:e3:9c:40:b0:5d:
f7:3b:3b:a7:60:9a:75:f0:21:26:c4:f8:51:bf:9c:
cc:bb:b5:da:0b:4f:b5:b8:cb:d8:0e:e4:fa:b7:9d:
be:00:36:58:9d:fd:b3:f4:2a:34:ff:fc:4c:70:ce:
84:d9:5d:9a:e2:ad:a9:30:e2:1e:97:ee:22:b7:d1:
76:56:dd:1f:60:59:0e:34:42:1e:10:55:9d:80:70:
70:4c:cb:b1:70:ce:df:c6:10:ac:06:7b:03:2c:aa:
e1:fc:af:64:f2:e5:b6:4b:0c:a1:83:58:1c:77:84:
09:a8:fb:45:f9:0e:2f:d4:46:30:5f:58:7a:4f:7f:
2a:ba:33:38:2d:12:80:8a:87:38:8d:5e:20:ab:7f:
02:9b:9e:9a:1e:fe:20:0d:5c:a4:b9:06:4f:59:7b:
96:12:26:14:de:0e:c6:bd:a9:b5:89:e4:6a:10:54:
cc:e7:d8:92:f8:bc:4a:8a:ef:7f:e4:d2:ef:60:a7:
df:93:7a:c2:cd:9e:d4:63:e8:f0:4e:b0:97:be:8c:
cf:c3:8a:c3:f8:3e:c5:e9:25:e5:4d:a2:08:c9:60:
ae:73:49:a9:07:1e:2e:fc:0f:3e:58:36:96:9c:e4:
39:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A8:AF:A2:99:0B:89:9A:17:AA:82:62:26:04:4D:33:4F:CE:C0:FA
X509v3 Authority Key Identifier:
keyid:49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:59:4b:0e:2f:91:86:dd:64:ef:fc:04:91:bf:5e:9c:71:73:
fb:22:60:7b:34:98:d1:41:6f:87:64:3e:bd:8a:84:47:6a:cb:
e2:22:83:7c:20:03:71:31:e2:69:a0:66:55:1c:12:95:bc:11:
85:8c:03:4d:bb:42:dd:6e:f2:c6:05:22:73:06:a5:fd:cc:36:
d3:d5:5f:95:9c:76:3e:a7:31:b1:fe:41:4e:cc:70:a7:dc:94:
52:95:48:e0:90:2e:22:2b:2b:de:ad:8d:25:c9:9d:cb:6c:1e:
13:43:fc:46:0f:db:f7:a6:b2:cb:fe:e2:17:14:55:ff:27:05:
17:b9:59:fb:33:81:cb:46:3e:20:d6:ab:30:10:08:88:05:62:
07:97:7d:08:87:5d:c4:6e:48:f7:65:e3:86:2d:c8:75:78:a2:
0c:9e:8d:77:91:5c:dd:43:ba:63:2d:a4:9c:2b:35:ba:5a:9b:
54:4e:dc:e4:97:82:51:08:9a:a5:f6:42:cb:38:7d:d6:95:7d:
1d:69:9b:02:67:15:e3:5a:58:91:d1:56:6c:18:73:b1:9b:21:
26:f0:0f:b1:91:94:e0:74:f5:1b:80:d7:a5:2c:c8:f2:41:56:
03:46:e8:45:77:ca:c6:b3:b3:72:37:af:81:84:28:a2:2c:35:
3c:21:3f:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhML/do7fTD3nx8vucnWosOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjI2MjMzZjViYjQyMjZjMmE3YTdiOTAwMzAwOGQxOWUz
NDc4NWIwHhcNMjUwNzI3MTQwMTA4WhcNMjUwNzI4MTQwMTA4WjAzMTEwLwYDVQQD
Eyg4YmE4YWZhMjk5MGI4OTlhMTdhYTgyNjIyNjA0NGQzMzRmY2VjMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd14YPK6Jqj1kNId75+mkkt2R2u8
SUL045xAsF33OzunYJp18CEmxPhRv5zMu7XaC0+1uMvYDuT6t52+ADZYnf2z9Co0
//xMcM6E2V2a4q2pMOIel+4it9F2Vt0fYFkONEIeEFWdgHBwTMuxcM7fxhCsBnsD
LKrh/K9k8uW2Swyhg1gcd4QJqPtF+Q4v1EYwX1h6T38qujM4LRKAioc4jV4gq38C
m56aHv4gDVykuQZPWXuWEiYU3g7Gvam1ieRqEFTM59iS+LxKiu9/5NLvYKffk3rC
zZ7UY+jwTrCXvozPw4rD+D7F6SXlTaIIyWCuc0mpBx4u/A8+WDaWnOQ5iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuor6KZC4maF6qCYiYETTNPzsD6MB8GA1UdIwQY
MBaAFEnyYjP1u0ImwqenuQAwCNGeNHhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZKaU1fVzdRaWJDcDZlNUFEQUkwWjQwZUZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmRmNmQtY2JhNi00NDk0LTkwMjgt
NTc3ZTk5MzViZDc1LzEvU2ZKaU1fVzdRaWJDcDZlNUFEQUkwWjQwZUZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZmRmNmQtY2JhNi00NDk0LTkwMjgtNTc3ZTk5MzViZDc1
LzEvU2ZKaU1fVzdRaWJDcDZlNUFEQUkwWjQwZUZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVlLDi+R
ht1k7/wEkb9enHFz+yJgezSY0UFvh2Q+vYqER2rL4iKDfCADcTHiaaBmVRwSlbwR
hYwDTbtC3W7yxgUicwal/cw209VflZx2Pqcxsf5BTsxwp9yUUpVI4JAuIisr3q2N
Jcmdy2weE0P8Rg/b96ayy/7iFxRV/ycFF7lZ+zOBy0Y+INarMBAIiAViB5d9CIdd
xG5I92Xjhi3IdXiiDJ6Nd5Fc3UO6Yy2knCs1ulqbVE7c5JeCUQiapfZCyzh91pV9
HWmbAmcV41pYkdFWbBhzsZshJvAPsZGU4HT1G4DXpSzI8kFWA0boRXfKxrOzcjev
gYQooiw1PCE/MQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:48:54 2025 by rpki-client