Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File: SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier: bhqMfV0KNrxYazjOTqG0zp7ii2pLgsVasBGZS/PbsFM=
Subject key identifier: D1:FE:52:E0:BF:A9:C6:5F:56:A6:4A:E9:F7:05:D9:54:BC:68:3D:0E
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial: 019836163148DC50626B8DD81F83BC041165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number: 12DD
Signing time: Wed 23 Jul 2025 07:01:20 +0000
Manifest this update: Wed 23 Jul 2025 07:01:20 +0000
Manifest next update: Thu 24 Jul 2025 07:01:20 +0000
Files and hashes: 1: 1PfCogsrcmO4yMFx3i7dWcicxiM.roa (hash: QSA42PQDSQu+Rjvywm1NdoufERvHtIOdqRGsBA5DYb0=)
2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: ANxmHnwk1fO5BrShz0zEzXl13+Io7v0qCDAtvdScRZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:16:31:48:dc:50:62:6b:8d:d8:1f:83:bc:04:11:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Validity
Not Before: Jul 23 07:01:20 2025 GMT
Not After : Jul 24 07:01:20 2025 GMT
Subject: CN=d1fe52e0bfa9c65f56a64ae9f705d954bc683d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:20:2a:ab:4c:ad:c8:bb:8f:01:7d:09:5a:
db:6b:87:a3:05:32:83:44:62:99:fd:37:d5:6d:48:
6d:a6:67:0e:c5:41:6f:e0:94:99:c9:57:da:8d:67:
2f:39:c6:e9:fc:8b:1c:a8:5a:1e:e1:94:16:1f:28:
e0:d3:09:12:36:dd:e7:53:e6:49:37:cd:b4:88:ab:
fe:68:36:2e:a4:38:04:45:98:e9:00:23:46:6f:c2:
1e:55:e2:8a:49:b0:30:69:53:27:16:5b:0c:69:5d:
64:3b:1c:36:f5:11:84:93:e4:5c:d7:19:e3:48:a9:
07:f6:e1:03:16:e4:cd:ba:e5:a6:61:c4:24:aa:b6:
b8:10:1c:34:2e:cb:a7:d7:95:b1:a9:c7:be:71:0b:
ad:d1:51:14:38:22:59:9c:08:eb:9d:3a:3c:0b:ef:
65:88:d6:94:3a:eb:8a:64:cb:36:db:9c:22:66:24:
fe:bd:c4:4f:3e:d3:55:d9:3d:99:bb:87:3d:9d:28:
0d:c6:33:9a:08:ec:10:be:fa:db:1c:dc:be:73:c2:
dc:c5:94:0d:a6:c5:b4:97:0d:ff:82:77:c1:b3:09:
5c:a2:6a:3a:55:ef:b4:11:ce:2b:28:45:36:20:7d:
2f:63:f9:2c:20:a9:71:c4:a4:01:54:7c:e8:41:28:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FE:52:E0:BF:A9:C6:5F:56:A6:4A:E9:F7:05:D9:54:BC:68:3D:0E
X509v3 Authority Key Identifier:
keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:32:af:f0:65:59:c8:46:73:57:c0:ff:b0:5d:7f:c7:ea:bb:
c5:04:7e:45:35:c6:34:3e:6d:23:d8:13:5e:d0:c9:67:05:4f:
26:a6:2c:02:3f:7d:cc:cc:4e:44:ee:13:bc:e7:26:fd:b0:2d:
15:ab:b0:24:65:d2:34:c5:ab:47:bc:a6:74:4f:00:56:96:20:
f7:55:00:08:ef:03:dd:1d:3a:1e:e8:85:d5:2e:c4:2f:2a:3d:
8d:f5:1b:ff:4c:be:51:ce:12:7e:34:b3:98:2a:6b:d6:d7:90:
59:84:8b:ca:de:f5:f7:e1:e8:a4:f2:33:a5:7a:93:84:41:99:
2f:be:16:f2:bb:03:12:d5:06:ae:16:f5:d5:78:4e:48:68:97:
03:51:43:fd:77:a8:26:c6:2c:01:c0:1a:a5:8b:a6:06:68:3d:
55:a1:7d:63:7b:a0:ae:79:fe:a8:63:a9:4a:e7:43:ff:f4:56:
e6:2c:20:e0:eb:1f:8b:ea:eb:c2:0a:f6:cd:50:dd:ed:31:a1:
6e:c4:c7:33:d8:be:08:c6:c0:57:b3:02:99:93:bb:6c:74:8e:
0c:cc:17:c5:5b:d7:c1:be:02:11:8f:e8:de:c7:a8:f3:a5:fa:
e4:5e:54:f6:5a:85:ce:62:9f:b6:75:aa:b8:fd:d1:e4:20:47:
6c:8e:6b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:27:24 2025 by rpki-client