Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json)
Hash identifier: ilNViDPBOVsi1GLC0/0KDiImhQ5WVQq3k4/pgGbLp+M=
Subject key identifier: CE:C1:9F:21:59:5D:11:D2:11:2F:4B:21:13:98:40:7A:2C:6A:6E:96
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial: 019747E7E01DF62E7212E4000D9DD46FE8F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
Manifest number: 08D9
Signing time: Sat 07 Jun 2025 01:01:07 +0000
Manifest this update: Sat 07 Jun 2025 01:01:07 +0000
Manifest next update: Sun 08 Jun 2025 01:01:07 +0000
Files and hashes: 1: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: QwaBRL04bBRvdCqiII2O/jW+T+WsuAkNsqtovEc+nzE=)
2: hajbKl16Cy4Tdq_wgIk77VxT_6Q.roa (hash: +x4Da87nsosWbKf7z+mFyLUyvFKLPH55B5hxOSqBXYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:e0:1d:f6:2e:72:12:e4:00:0d:9d:d4:6f:e8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
Validity
Not Before: Jun 7 01:01:07 2025 GMT
Not After : Jun 8 01:01:07 2025 GMT
Subject: CN=cec19f21595d11d2112f4b211398407a2c6a6e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:07:5c:ec:e2:ca:fc:6b:9f:f5:21:08:a1:
a7:70:c3:dd:32:9d:41:ce:2f:31:52:85:8b:58:78:
e0:ec:38:8f:b3:cb:fe:7d:b7:49:c9:5c:e2:73:f9:
c9:33:f8:6d:2a:57:a7:ce:fd:e1:e6:36:5e:b6:45:
ad:bf:b3:a5:28:71:58:29:eb:5c:f6:1e:d6:69:92:
c6:75:15:d3:40:85:91:97:37:13:6f:95:2b:20:9e:
43:c1:7f:a6:aa:a7:c2:3e:f7:4b:fa:16:3e:22:f5:
5f:27:de:01:98:df:69:c0:3b:c5:7d:5f:81:59:51:
23:10:63:78:86:b2:f1:ea:0f:47:2d:34:96:1c:78:
61:f7:df:3d:ed:2c:84:c7:f1:41:18:ef:b0:f0:50:
be:98:fd:2e:43:35:bf:06:6b:9f:52:41:e8:34:6a:
06:d7:4b:0a:31:83:9d:ec:44:77:0d:91:83:f9:f7:
c1:15:77:b6:97:2c:80:12:8e:84:44:3b:2d:71:6b:
45:e9:4d:a1:b9:bf:96:6d:de:9d:20:c4:a0:aa:6d:
88:55:27:6d:f3:7f:45:02:64:02:00:c3:78:89:fe:
df:6a:d5:85:c1:e5:21:68:d5:b8:46:56:b4:d6:e5:
ae:8b:b0:bb:bf:36:0c:ae:29:78:f4:39:4e:14:3d:
80:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C1:9F:21:59:5D:11:D2:11:2F:4B:21:13:98:40:7A:2C:6A:6E:96
X509v3 Authority Key Identifier:
keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1c:a4:5f:4c:8a:1c:dc:53:fc:f7:5a:e7:cf:52:98:c5:e2:
00:8f:39:0a:f5:7d:c5:41:f2:12:b6:d2:b3:c8:b8:e4:f5:5b:
3a:a6:f8:62:6b:4e:a2:f8:ab:fa:47:77:ba:be:43:25:18:85:
d4:73:be:ea:17:58:62:51:41:d2:d0:2d:3d:eb:27:69:d4:e4:
73:ef:cf:0d:b0:cf:26:b5:82:8f:8f:cd:fb:29:c7:94:ab:42:
48:f0:6b:d7:9a:87:a5:36:57:66:5b:f7:6b:cc:87:85:f1:fc:
f4:cb:37:7b:e5:6d:61:ea:c9:08:09:ee:02:92:2d:fa:1c:17:
22:43:07:c5:bc:80:e3:b2:a1:9f:d5:e5:d1:1d:f7:b1:08:1c:
2a:a1:ab:a4:50:ed:3a:d1:a7:bc:90:0e:40:fa:93:1a:34:38:
a6:14:48:f3:04:41:23:c8:cf:ca:84:c3:25:db:32:37:f2:21:
12:52:7b:e0:0c:0e:d2:f6:47:64:3d:5b:c4:15:d0:c6:b0:f2:
62:42:ee:49:3b:78:bb:d6:e4:59:e8:bd:14:c0:e8:d5:67:1b:
38:00:0d:56:1e:07:e9:26:ee:eb:b0:15:ef:34:4e:6e:8c:03:
96:e3:32:22:ca:b0:72:68:1b:a7:48:da:66:fe:4c:f9:52:d6:
0c:4d:56:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:33:17 2025 by rpki-client