Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
File: SGeaItDbyYDV1ZszNnn5ObmuPyU.mft (raw, json)
Hash identifier: lR3s1FskanQonD9X9EWXnHmV735HOeLv4i1niJ/AE24=
Subject key identifier: 37:07:4D:A1:CD:9A:79:14:91:6B:7D:B2:E6:19:C7:E2:20:7F:44:2C
Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
Certificate issuer: /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Certificate serial: 0199233131313AAA6BBF300E1BC97327938F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 08:00:50 +0000
Manifest this update: Sun 07 Sep 2025 08:00:50 +0000
Manifest next update: Mon 08 Sep 2025 08:00:50 +0000
Files and hashes: 1: SGeaItDbyYDV1ZszNnn5ObmuPyU.crl (hash: 6o4Y3HZ0YS3Y3FGFNJZHh8DkqbpdBuVmrE/5safAnPo=)
2: lSVuH4_qT7VO0FFfSg8D4f45UxY.roa (hash: 9ZtD0p1FuMWX60A/XbYYtr6hffE/KiTmy0aXZ7EMf+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:31:31:3a:aa:6b:bf:30:0e:1b:c9:73:27:93:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Validity
Not Before: Sep 7 08:00:50 2025 GMT
Not After : Sep 8 08:00:50 2025 GMT
Subject: CN=37074da1cd9a7914916b7db2e619c7e2207f442c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:02:31:e5:0f:c7:6d:30:a3:30:38:b1:48:
0b:ed:f4:5e:4d:c5:37:3a:8a:a1:c5:5e:17:9f:ba:
aa:6a:af:c2:8e:62:fc:e9:7a:85:64:c9:9a:00:d6:
65:cc:f7:4b:9b:97:b9:22:7c:ec:4a:dc:ac:de:d9:
c2:9d:64:2f:97:ed:bd:3f:ea:59:ac:f2:02:0d:8f:
cc:36:a0:2e:f4:8b:23:0b:d8:21:7e:10:ef:ac:3b:
a6:f4:99:8f:95:1d:20:72:b8:df:60:70:d2:bc:e4:
3e:17:b3:95:f1:5c:73:00:e1:3c:9b:1d:a1:d3:98:
1c:d7:0e:01:14:07:c6:4a:d1:1f:36:fd:bf:72:ea:
54:f0:04:a7:15:ee:3b:5c:9e:f1:be:69:97:35:d2:
dc:87:37:56:76:4e:30:c7:8a:fc:10:32:26:a7:ac:
b6:3e:d5:e6:ac:d4:db:0b:3a:3c:40:2c:17:4c:93:
8b:16:74:c3:20:82:a4:cb:de:c1:15:10:70:fb:0f:
c3:fd:ee:7f:0e:74:ad:35:c4:79:7e:7e:50:82:82:
b3:e6:35:75:60:07:ad:ef:d3:a9:51:e7:52:f5:d8:
5e:b7:0b:75:4e:65:e8:79:f9:0b:42:45:fa:53:d9:
3b:29:6f:8a:4c:1a:3f:89:b8:87:c9:6c:0f:a6:f0:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:07:4D:A1:CD:9A:79:14:91:6B:7D:B2:E6:19:C7:E2:20:7F:44:2C
X509v3 Authority Key Identifier:
keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d9:90:a5:37:4f:c8:a6:cd:14:93:02:96:2b:cf:a8:82:56:
48:db:28:75:df:0a:36:63:a9:6a:ad:b8:db:cf:37:df:90:18:
90:40:ab:76:75:19:0b:f6:36:c1:8a:37:3f:d8:19:ea:78:4f:
a4:d5:68:9a:86:e7:44:68:9f:b8:a4:d3:25:79:1d:23:8e:4f:
db:69:a4:83:4f:ad:8b:84:aa:f9:03:eb:a5:60:9d:6b:aa:40:
b8:90:f7:18:ad:cb:66:8e:0e:05:8b:dd:cb:cb:ff:f5:95:75:
9b:43:3c:55:58:6c:8e:0e:08:99:88:a0:67:d5:40:a8:49:62:
f6:17:ce:86:c3:26:f8:42:9d:42:e4:78:6d:f3:67:97:cb:6f:
30:08:12:b4:bd:46:f8:b9:d2:d3:13:f4:a7:9e:c5:11:12:24:
02:56:72:6a:ac:24:75:60:5f:e2:27:69:51:3f:7a:6a:ea:d3:
26:53:37:9d:4d:b4:b9:fd:60:d0:ff:46:47:0c:66:29:d9:91:
93:7e:f5:75:90:5f:af:d6:ce:1d:0e:b7:e0:4e:23:4a:73:30:
3f:4a:a1:89:f6:36:f5:f1:42:d1:df:61:c4:74:8d:6c:9d:60:
c8:31:37:d3:3b:17:97:4e:72:8b:d4:43:f9:4b:b2:1d:28:1b:
77:01:9d:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMTExOqprvzAOG8lzJ5OPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4Njc5YTIyZDBkYmM5ODBkNWQ1OWIzMzM2NzlmOTM5Yjlh
ZTNmMjUwHhcNMjUwOTA3MDgwMDUwWhcNMjUwOTA4MDgwMDUwWjAzMTEwLwYDVQQD
EygzNzA3NGRhMWNkOWE3OTE0OTE2YjdkYjJlNjE5YzdlMjIwN2Y0NDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr8CMeUPx20wozA4sUgL7fReTcU3
OoqhxV4Xn7qqaq/CjmL86XqFZMmaANZlzPdLm5e5InzsStys3tnCnWQvl+29P+pZ
rPICDY/MNqAu9IsjC9ghfhDvrDum9JmPlR0gcrjfYHDSvOQ+F7OV8VxzAOE8mx2h
05gc1w4BFAfGStEfNv2/cupU8ASnFe47XJ7xvmmXNdLchzdWdk4wx4r8EDImp6y2
PtXmrNTbCzo8QCwXTJOLFnTDIIKky97BFRBw+w/D/e5/DnStNcR5fn5QgoKz5jV1
YAet79OpUedS9dhetwt1TmXoefkLQkX6U9k7KW+KTBo/ibiHyWwPpvD6RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcHTaHNmnkUkWt9suYZx+Igf0QsMB8GA1UdIwQY
MBaAFEhnmiLQ28mA1dWbMzZ5+Tm5rj8lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0dlYUl0RGJ5WURWMVpzek5ubjVPYm11UHlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZGZhMDQtN2MyYy00YWMzLWE2NmIt
MGMxODBhMDg0MWFiLzEvU0dlYUl0RGJ5WURWMVpzek5ubjVPYm11UHlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83ZGZhMDQtN2MyYy00YWMzLWE2NmItMGMxODBhMDg0MWFi
LzEvU0dlYUl0RGJ5WURWMVpzek5ubjVPYm11UHlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9mQpTdP
yKbNFJMClivPqIJWSNsodd8KNmOpaq24288335AYkECrdnUZC/Y2wYo3P9gZ6nhP
pNVomobnRGifuKTTJXkdI45P22mkg0+ti4Sq+QPrpWCda6pAuJD3GK3LZo4OBYvd
y8v/9ZV1m0M8VVhsjg4ImYigZ9VAqEli9hfOhsMm+EKdQuR4bfNnl8tvMAgStL1G
+LnS0xP0p57FERIkAlZyaqwkdWBf4idpUT96aurTJlM3nU20uf1g0P9GRwxmKdmR
k371dZBfr9bOHQ634E4jSnMwP0qhifY29fFC0d9hxHSNbJ1gyDE30zsXl05yi9RD
+UuyHSgbdwGd6w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:41 2025 by rpki-client