Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
File: SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json)
Hash identifier: YUipdiYpBxkuNTQCHbOyBnI1bwaNpvDF5TGG0ph5tL8=
Subject key identifier: EF:50:9A:7D:19:12:9E:83:5F:DC:BF:9B:CE:89:97:AC:B4:76:0E:16
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial: 01992255C74CD36F7CFFA262D65CC52B2C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
Manifest number: 02F6
Signing time: Sun 07 Sep 2025 04:01:10 +0000
Manifest this update: Sun 07 Sep 2025 04:01:10 +0000
Manifest next update: Mon 08 Sep 2025 04:01:10 +0000
Files and hashes: 1: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: lPUN0wysgHbCbQJuJT/J3cdMvG51TKxTgEg+ZbSoafU=)
2: sh9Rh_XHxgs73xUgLaXpfEWoL2M.roa (hash: u3ZNcYvwXVoq0LzAan53+HMQH1md2pw7AMcoma6/Peg=)
3: uFwm3LO6GthW3CaP1u11g2Pmnbs.roa (hash: P/XCOSSZFXhzFRU3N+DJNZYyvprMkXA10JImXpYTCCI=)
4: xJcR0deGB_PhVW4Ub0AqpBDixL0.roa (hash: SawuCs7fQfxnKHxl7dEG/czDPI5njJw6MgIPphiYv6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:c7:4c:d3:6f:7c:ff:a2:62:d6:5c:c5:2b:2c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
Validity
Not Before: Sep 7 04:01:10 2025 GMT
Not After : Sep 8 04:01:10 2025 GMT
Subject: CN=ef509a7d19129e835fdcbf9bce8997acb4760e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e2:32:1a:75:48:8d:b7:04:13:43:58:76:5a:
11:f1:95:bf:80:5c:80:df:d0:37:f8:5d:6b:dc:ee:
91:fc:f4:be:77:58:d3:86:ad:5b:59:df:09:80:ef:
72:7c:88:ec:aa:4d:0b:8b:8b:ad:f5:ae:6f:0e:23:
cf:69:33:d7:f4:6a:38:a4:04:00:31:80:c0:00:24:
7f:d0:15:65:6f:5c:f9:7a:de:58:5f:41:6b:b2:15:
29:27:60:b3:9c:6a:c3:94:fc:8c:55:49:eb:68:61:
35:23:ec:90:8a:2b:22:70:95:e0:5c:ad:f8:94:b4:
c2:4d:91:f1:ac:85:24:06:40:17:19:df:b7:97:21:
c2:e3:d8:34:33:4f:ab:21:5e:1b:1d:80:e6:d4:f6:
79:17:08:e7:04:a0:cf:bc:2d:b5:f6:87:d9:87:35:
42:ed:36:31:bb:4a:5a:5f:72:b2:7e:07:75:7b:a3:
c9:c0:3f:ea:6c:c5:c4:98:90:ff:3f:d9:46:f5:6a:
b5:04:96:ee:11:bc:0a:f4:3a:02:01:ac:8d:89:75:
bd:6f:87:ba:26:47:21:14:6c:a6:eb:29:84:33:6f:
90:4b:87:f0:5c:2c:df:fb:b1:fa:72:10:25:5b:88:
30:8c:d5:22:da:2a:5b:16:4e:6e:da:b4:d0:dd:7a:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:50:9A:7D:19:12:9E:83:5F:DC:BF:9B:CE:89:97:AC:B4:76:0E:16
X509v3 Authority Key Identifier:
keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:df:dc:1c:c7:3a:99:07:3f:8d:29:55:4b:16:bf:f1:4b:e7:
e0:f4:5c:6e:28:4b:54:14:b5:84:21:22:1f:bc:59:79:37:99:
5f:63:ce:21:18:0e:69:3a:20:d8:c2:f3:d9:ec:cb:a1:ed:f8:
e2:14:5c:58:d6:83:c0:45:4e:bc:ca:4d:e2:2f:d2:5d:3f:28:
84:1a:fb:a1:58:5f:ee:12:32:e5:05:05:59:42:8b:f7:a0:54:
1e:d7:62:7e:2c:9a:63:4a:04:22:4a:b9:15:44:e8:b9:fe:8f:
1a:f1:6b:ff:aa:b4:e7:ae:fa:c5:25:64:56:c0:78:71:03:23:
81:48:27:bf:0f:48:fa:15:96:d6:98:92:93:54:f4:19:13:3b:
77:5f:e9:50:0f:b3:76:4d:fb:07:75:13:ac:50:ad:49:96:b2:
08:25:09:66:aa:61:94:38:39:39:b2:15:cf:11:7f:dc:00:63:
c7:e5:31:53:e2:4e:86:56:36:1a:db:19:a5:c4:98:29:30:17:
88:6e:1d:a4:46:f0:eb:0a:c9:5f:97:50:33:66:eb:9b:28:87:
4a:01:f6:70:c0:74:44:c4:49:9c:76:89:41:96:29:0c:aa:83:
f1:d7:44:9a:6d:99:28:a2:f5:76:16:d2:aa:b8:06:e2:c4:b3:
57:b4:3a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:10 2025 by rpki-client