Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: 3z/PwGEC5YujTLdX57QFugfe955VVA+5A8cJW72DZTk=
Subject key identifier: 33:CF:15:DA:5D:E7:5B:05:1E:39:D2:7D:03:44:62:07:A8:C3:57:6C
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 019933B77639F520298061084550FC39F548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 0373
Signing time: Wed 10 Sep 2025 13:01:25 +0000
Manifest this update: Wed 10 Sep 2025 13:01:25 +0000
Manifest next update: Thu 11 Sep 2025 13:01:25 +0000
Files and hashes: 1: cutf0Yk4GqOLANVUSKcxrSdUxug.roa (hash: Q8Q4U3gD48zecWRmDv6Pw0MZwpRvb60BHrR0/Xs/Hmo=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: 7iQvaehSFsZ2uZgPb71n4goQe/Y3+y0WLnI12eZ0sf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:76:39:f5:20:29:80:61:08:45:50:fc:39:f5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: Sep 10 13:01:25 2025 GMT
Not After : Sep 11 13:01:25 2025 GMT
Subject: CN=33cf15da5de75b051e39d27d03446207a8c3576c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:36:72:f2:42:d2:ff:48:c1:bf:dc:fa:c4:41:
e2:9d:27:96:82:cf:f5:54:8e:d6:b3:65:60:90:cc:
73:d7:0a:81:00:b2:62:5f:2c:ee:03:00:a8:56:7d:
19:b1:97:80:6e:15:2a:ab:aa:36:b4:69:36:28:94:
80:da:51:57:6f:b1:03:c4:66:d9:39:9e:6b:3d:02:
5f:99:43:78:26:4b:ae:26:e5:bf:3c:c3:33:ef:5d:
03:03:2d:98:34:c3:db:c1:c9:f4:98:7f:d5:96:39:
f1:55:10:37:47:39:5b:62:a4:98:34:46:12:0b:39:
81:80:be:05:8a:df:92:b8:9c:19:d3:23:e3:bf:6c:
d3:51:74:53:12:65:cd:3b:2f:90:7e:0e:10:52:6e:
a7:c8:a1:6c:f7:73:e0:b3:82:51:4e:20:96:b5:c9:
8e:af:c0:b5:1d:2f:ea:09:cb:80:c6:c4:74:45:51:
05:ce:d9:b0:3c:46:64:88:cd:6d:0c:6c:4b:39:32:
85:88:1f:42:14:f2:72:8f:8b:d5:cf:56:cd:cd:59:
8d:45:c5:c9:aa:67:05:4b:df:83:6a:86:0d:0e:8c:
10:01:c2:35:fd:5c:bc:ca:db:0a:df:61:65:de:d6:
79:fc:6c:68:6a:7d:f6:ff:b1:69:17:b7:03:81:ac:
46:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CF:15:DA:5D:E7:5B:05:1E:39:D2:7D:03:44:62:07:A8:C3:57:6C
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:00:b9:c0:27:24:26:e5:3b:c3:54:de:10:99:60:4f:49:e1:
21:54:fe:6f:e7:52:fd:92:93:c0:f8:2b:6f:18:43:10:95:42:
96:a6:0f:24:d0:e3:44:11:42:20:d3:59:4f:43:ce:c2:6b:62:
8e:99:d9:4a:9b:8b:40:9e:c5:7f:09:f3:b8:56:f6:0a:c4:bf:
a2:76:f2:ef:5e:a6:e5:ac:ea:df:ac:4a:77:9c:51:72:e3:a2:
cf:fb:9e:a4:ad:61:9c:04:ae:64:af:5c:95:b0:91:1e:49:b9:
ce:1b:c1:af:24:69:1a:97:4c:67:a8:bf:9d:20:57:f2:06:23:
ec:5d:13:a6:f3:87:a1:3a:b1:ea:a1:2d:ff:3d:82:59:c4:e3:
7f:f4:26:fb:d2:08:8f:02:fb:2a:ef:93:89:46:7f:44:d3:a0:
73:f0:de:9b:98:a9:cb:2d:cd:02:aa:14:2e:a1:d5:9c:4a:5e:
9e:50:28:31:11:53:66:59:42:74:da:2c:a0:33:50:30:5e:c0:
b9:fc:65:61:03:53:7a:40:eb:8b:8e:97:82:b8:03:bb:ab:e0:
4d:dd:2f:5d:82:3c:2d:60:e4:b7:4b:a1:84:c3:99:25:80:ca:
c8:25:5e:82:d8:de:a1:6d:eb:5e:1c:94:ee:b5:6c:e7:c7:80:
81:7d:be:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:02:50 2025 by rpki-client