Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
File: SFNVcGg2xtB8f9JdW1nbC22JT7U.mft (raw, json)
Hash identifier: zelYvjG5Gts4dLQH8gfsQdF9BskGYLkeo4bArEPJn94=
Subject key identifier: 77:3A:9D:33:80:EE:04:A1:40:2F:79:C6:47:1E:47:DC:DA:03:BB:61
Authority key identifier: 48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
Certificate issuer: /CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
Certificate serial: 0198CA258D4038870CD603622BB688AB11B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
Manifest number: 09DE
Signing time: Thu 21 Aug 2025 01:01:55 +0000
Manifest this update: Thu 21 Aug 2025 01:01:55 +0000
Manifest next update: Fri 22 Aug 2025 01:01:55 +0000
Files and hashes: 1: SFNVcGg2xtB8f9JdW1nbC22JT7U.crl (hash: /zNbPKCMR0HCmftQZJh3nK4lnJonFze4vxBnjRy6ONA=)
2: xMvpgjkxKbx_nJXqKUz8HP8cBlY.roa (hash: xpvtl/jAMstPAGZTh7RwpFcbxDqkgPOXgahD3aZqXp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:25:8d:40:38:87:0c:d6:03:62:2b:b6:88:ab:11:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
Validity
Not Before: Aug 21 01:01:55 2025 GMT
Not After : Aug 22 01:01:55 2025 GMT
Subject: CN=773a9d3380ee04a1402f79c6471e47dcda03bb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:df:93:22:15:f8:d2:5d:1e:d0:76:ee:3d:
c2:47:17:30:fe:4d:cf:84:1c:dd:ab:0f:65:0a:93:
d2:f9:7f:22:b4:b3:1d:ff:9c:51:1b:c7:17:73:15:
bd:52:9f:7a:84:90:5e:8e:75:9a:39:67:a1:f1:4b:
d1:dd:6d:a9:02:2a:50:70:0f:d8:20:d3:ff:2e:68:
b4:2d:cc:95:c7:b7:e6:09:4c:15:99:90:2d:b7:a0:
54:75:c7:5a:27:dc:d5:58:03:2f:de:89:07:c6:86:
2d:12:e9:25:d1:7c:5c:a6:7f:9f:df:ab:b8:a7:88:
47:65:e4:fd:9d:79:03:f2:75:34:39:23:e2:8e:cd:
0b:72:cc:28:db:f7:59:70:2d:5b:c8:53:60:fc:9b:
b1:31:3d:cc:51:d5:95:72:27:b5:dc:47:58:a0:72:
d0:7c:16:b0:a3:31:2d:e7:cb:1a:93:dc:62:46:ce:
45:d9:18:c2:5b:6e:ac:ba:07:0d:25:ec:f5:80:89:
ad:10:fc:11:5c:b4:ff:c8:18:51:05:4f:0b:1e:32:
10:34:4a:2c:0c:4c:b3:dd:e1:0f:3a:e9:4b:72:dd:
53:cc:5a:f4:d1:00:57:fa:7d:f1:cf:0c:f0:58:0e:
cf:19:0c:0b:24:fc:81:04:65:bf:70:0d:ea:60:da:
a0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3A:9D:33:80:EE:04:A1:40:2F:79:C6:47:1E:47:DC:DA:03:BB:61
X509v3 Authority Key Identifier:
keyid:48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:97:10:51:13:73:52:67:bc:60:d6:04:a4:30:50:82:23:f5:
84:c2:9b:1f:00:61:2c:19:f3:fa:8e:3b:2d:82:f1:3b:ad:10:
59:b1:88:ff:db:c8:8a:34:91:2d:59:65:13:5a:d0:cc:c8:ab:
21:5c:ef:71:ab:77:b9:82:42:ad:5f:2a:80:be:7d:1d:dc:f2:
22:6c:ce:20:2b:23:1e:80:2d:22:53:35:45:0d:d0:70:6a:43:
42:bf:dd:1c:be:ea:3e:7f:9f:de:7f:89:e3:ad:13:12:54:e0:
6b:55:a9:cc:28:98:13:7f:d6:a4:b1:fb:8c:e3:55:a8:71:f5:
e6:4e:70:ce:d6:f1:4b:01:9d:82:9d:78:c4:2f:0d:56:fb:47:
52:fc:85:d8:80:f7:d1:45:da:a4:25:68:86:bf:18:7a:39:d2:
8a:d7:3f:bc:7c:20:f3:a1:90:97:62:ec:db:4d:30:1c:7b:aa:
70:2e:01:47:b8:3c:40:67:fe:6c:25:a9:52:eb:f0:9c:fb:7c:
c8:3e:ec:60:02:f9:16:b9:6d:fa:61:28:24:cc:f0:7f:85:07:
54:6d:3d:73:c4:b6:d8:63:f7:e5:20:e9:00:6c:c9:23:91:78:
8a:5e:2b:52:8e:ad:ce:d8:7b:03:e4:bc:be:7c:14:27:b1:5f:
1f:74:ee:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjKJY1AOIcM1gNiK7aIqxG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTM1NTcwNjgzNmM2ZDA3YzdmZDI1ZDViNTlkYjBiNmQ4
OTRmYjUwHhcNMjUwODIxMDEwMTU1WhcNMjUwODIyMDEwMTU1WjAzMTEwLwYDVQQD
Eyg3NzNhOWQzMzgwZWUwNGExNDAyZjc5YzY0NzFlNDdkY2RhMDNiYjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9jfkyIV+NJdHtB27j3CRxcw/k3P
hBzdqw9lCpPS+X8itLMd/5xRG8cXcxW9Up96hJBejnWaOWeh8UvR3W2pAipQcA/Y
INP/Lmi0LcyVx7fmCUwVmZAtt6BUdcdaJ9zVWAMv3okHxoYtEukl0Xxcpn+f36u4
p4hHZeT9nXkD8nU0OSPijs0Lcswo2/dZcC1byFNg/JuxMT3MUdWVcie13EdYoHLQ
fBawozEt58sak9xiRs5F2RjCW26sugcNJez1gImtEPwRXLT/yBhRBU8LHjIQNEos
DEyz3eEPOulLct1TzFr00QBX+n3xzwzwWA7PGQwLJPyBBGW/cA3qYNqgkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHc6nTOA7gShQC95xkceR9zaA7thMB8GA1UdIwQY
MBaAFEhTVXBoNsbQfH/SXVtZ2wttiU+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZOVmNHZzJ4dEI4ZjlKZFcxbmJDMjJKVDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wMGVjMzctMzg0MS00ZjY0LWExYmQt
ZGQ5ZGQ3NjMzMzlkLzEvU0ZOVmNHZzJ4dEI4ZjlKZFcxbmJDMjJKVDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wMGVjMzctMzg0MS00ZjY0LWExYmQtZGQ5ZGQ3NjMzMzlk
LzEvU0ZOVmNHZzJ4dEI4ZjlKZFcxbmJDMjJKVDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJcQURNz
Ume8YNYEpDBQgiP1hMKbHwBhLBnz+o47LYLxO60QWbGI/9vIijSRLVllE1rQzMir
IVzvcat3uYJCrV8qgL59HdzyImzOICsjHoAtIlM1RQ3QcGpDQr/dHL7qPn+f3n+J
460TElTga1WpzCiYE3/WpLH7jONVqHH15k5wztbxSwGdgp14xC8NVvtHUvyF2ID3
0UXapCVohr8YejnSitc/vHwg86GQl2Ls200wHHuqcC4BR7g8QGf+bCWpUuvwnPt8
yD7sYAL5Frlt+mEoJMzwf4UHVG09c8S22GP35SDpAGzJI5F4il4rUo6tzth7A+S8
vnwUJ7FfH3Tuog==
-----END CERTIFICATE-----
Generated at Thu Aug 21 05:02:13 2025 by rpki-client