Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
File: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft (raw, json)
Hash identifier: UTJf38dHJEmaB30W1hBba3h4F5hbka8/L3A67ZQhswY=
Subject key identifier: 89:27:8C:9A:AE:2B:ED:D9:99:75:37:9E:41:1F:DF:7E:D5:19:66:66
Authority key identifier: 48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA
Certificate issuer: /CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca
Certificate serial: 01992367BC979A757FDE23EEBD8684C0154A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
Manifest number: 57
Signing time: Sun 07 Sep 2025 09:00:24 +0000
Manifest this update: Sun 07 Sep 2025 09:00:24 +0000
Manifest next update: Mon 08 Sep 2025 09:00:24 +0000
Files and hashes: 1: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl (hash: GY0LBfoGs4NqZ4zWllY59nZbdT5HCOpOgIR+YCki+VM=)
2: zSp8Tcrfxe5_p3n3onsW-Ve9HcQ.roa (hash: hWOLO9tqL0286CUEjHeu7GROlem9sTgukzg2u3fOev0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:bc:97:9a:75:7f:de:23:ee:bd:86:84:c0:15:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca
Validity
Not Before: Sep 7 09:00:24 2025 GMT
Not After : Sep 8 09:00:24 2025 GMT
Subject: CN=89278c9aae2bedd99975379e411fdf7ed5196666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:30:ae:54:bb:f9:db:79:8d:0d:8d:20:eb:
b5:91:f9:79:45:2e:cd:62:27:1e:6b:80:fc:c8:d5:
cd:f3:5d:85:d5:fb:c6:2d:39:92:83:a2:cc:cd:30:
07:df:cf:c1:35:39:50:e9:a8:83:a9:ed:3f:4d:5e:
3e:6f:ab:18:6c:1d:2c:2d:45:cb:f4:00:24:81:b5:
b3:18:bf:1e:94:ea:5a:81:1b:5b:cf:ac:cb:2d:0e:
80:29:60:bc:18:75:46:c3:d1:30:d0:fe:f4:e5:7a:
68:06:35:34:8f:0c:32:5d:18:91:39:44:6a:62:5b:
39:91:db:dc:47:54:6b:e7:8e:68:b9:5c:17:7b:5e:
09:0a:49:02:a4:7c:4f:96:83:12:7c:e8:10:08:f7:
af:0a:d6:00:25:f6:48:3a:16:40:de:7b:bc:25:45:
44:7e:cd:73:47:f9:c7:07:8f:e0:ce:0f:f1:f7:7c:
c4:72:1c:f3:27:a1:f7:de:f6:f1:5c:08:88:a8:bd:
00:fd:72:ed:69:1f:75:e8:74:92:5d:b1:9d:a9:bb:
34:ce:42:32:5a:85:74:ae:17:79:7a:34:60:9b:e2:
b8:a2:25:b3:24:9c:ad:a8:69:5d:22:e2:97:ca:00:
13:fc:53:7b:56:98:79:35:61:dd:b7:41:00:74:07:
c4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:27:8C:9A:AE:2B:ED:D9:99:75:37:9E:41:1F:DF:7E:D5:19:66:66
X509v3 Authority Key Identifier:
keyid:48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:89:15:9c:a4:01:be:f4:5c:06:19:a1:99:68:33:02:be:df:
48:4a:56:94:61:16:75:05:b1:1f:93:9a:cc:ce:34:47:fc:21:
e1:6f:53:84:10:65:b6:6e:15:5b:1b:ca:b9:24:eb:0c:a6:75:
82:cc:6f:fa:66:71:93:99:89:bb:20:56:86:e0:a3:c2:13:32:
a3:b2:72:07:43:89:74:cd:ce:bd:ef:d4:d4:ab:1a:a4:45:7f:
ef:3d:f2:61:19:7e:40:61:17:64:1b:93:35:d2:ba:a3:db:51:
80:24:4c:d3:88:db:29:3f:a9:df:14:c8:4b:30:ee:3c:21:00:
2f:1a:c9:02:ee:53:fd:7e:e4:8f:ed:90:c2:88:88:3f:55:5b:
a7:1b:ae:ac:58:1c:4a:d9:7c:1f:5a:26:c2:e5:a0:42:8d:6e:
91:24:6f:e1:e5:90:ec:e4:45:da:df:9a:2e:f7:30:33:24:65:
84:9e:d2:8d:bc:2e:ee:57:4e:08:ca:43:07:62:d1:f2:a7:f5:
43:96:22:d8:1e:f6:ba:a8:31:1a:96:2c:62:5f:04:b0:83:a0:
c9:f7:9a:5d:5f:bd:06:21:db:4b:f0:2d:79:ba:a9:f1:6a:16:
06:70:37:39:6c:bd:ba:e3:eb:b5:80:a8:1c:c7:23:74:d6:50:
50:1e:6c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:58 2025 by rpki-client