Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
File: sffQCUrcmNmwMnIOgePbWqdYHHQ.mft (raw, json)
Hash identifier: YrJBOe9m6ajKi3YNUoBFyKE1Y+5hE0D0sKuPDnHNliw=
Subject key identifier: 74:71:FB:10:DD:15:BD:26:08:9B:74:05:EE:55:14:26:F9:9B:62:2E
Authority key identifier: B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
Certificate issuer: /CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Certificate serial: 019922FA3AC4E3054892F07ED53596CBD799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
Manifest number: 0BF9
Signing time: Sun 07 Sep 2025 07:00:48 +0000
Manifest this update: Sun 07 Sep 2025 07:00:48 +0000
Manifest next update: Mon 08 Sep 2025 07:00:48 +0000
Files and hashes: 1: sffQCUrcmNmwMnIOgePbWqdYHHQ.crl (hash: AOwq3cnqv+645VnhsmBr4p+2qCW6L/3CEZn2ylrw4pE=)
2: tkngR5wwQ6qh3iGid8LqkeZO0Sg.roa (hash: XAoboSbFoG6N+OZ4mfDqaXa/N9sFsWbZUGbRzqL5oH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:3a:c4:e3:05:48:92:f0:7e:d5:35:96:cb:d7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Validity
Not Before: Sep 7 07:00:48 2025 GMT
Not After : Sep 8 07:00:48 2025 GMT
Subject: CN=7471fb10dd15bd26089b7405ee551426f99b622e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:42:2d:fe:05:3d:17:6b:cd:6e:ab:9b:99:
72:66:88:b9:af:37:6a:31:94:31:64:09:94:bf:3e:
1d:be:f9:92:53:10:49:83:93:e9:f5:79:63:c4:04:
bb:86:3f:c6:d0:0e:b3:de:b3:e4:2e:20:0d:87:d9:
e7:ad:48:15:2d:83:70:db:86:ee:aa:50:c2:b5:25:
19:07:6a:ad:99:01:94:78:55:4d:bc:33:8a:89:75:
3d:51:15:f6:5e:76:cb:ae:58:f3:c8:6b:43:30:f7:
b2:72:83:f3:9b:d9:e6:f2:9e:cd:ca:69:90:2f:42:
d9:45:b9:67:4c:74:83:08:fc:23:46:fc:a2:39:0a:
6d:7d:02:e5:4a:7c:4b:07:ca:8e:11:86:6f:3e:37:
03:a4:8b:8a:0f:da:50:ee:f9:a7:f0:de:d5:aa:09:
21:85:0d:45:99:87:f5:b5:26:58:7f:48:8d:a7:94:
e4:fc:26:75:15:b0:3e:13:59:3c:e3:4c:25:d3:12:
51:d8:9f:78:26:44:33:3c:64:94:95:e8:78:57:f7:
be:92:96:d5:57:ee:c9:14:74:b0:15:23:20:64:1b:
30:57:9d:12:15:ab:a1:1b:ff:47:88:59:77:79:e6:
c3:83:0b:0d:07:d1:aa:99:7f:a4:0f:16:fa:c9:df:
52:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:71:FB:10:DD:15:BD:26:08:9B:74:05:EE:55:14:26:F9:9B:62:2E
X509v3 Authority Key Identifier:
keyid:B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d1:a2:04:b7:93:6d:30:37:a9:cf:d0:8e:f6:27:f7:a4:43:
7c:f7:16:71:84:58:bb:aa:83:43:09:60:49:ef:26:63:9b:90:
ef:20:79:a0:37:c3:79:a8:88:73:33:f8:6f:70:31:0a:93:a3:
85:39:d6:46:c4:ed:7c:85:f0:46:a4:3d:ee:4c:19:58:0e:49:
d1:46:bb:26:40:16:23:34:b6:10:ab:bf:3e:42:50:4d:fd:4a:
e8:cc:90:8f:1f:02:17:31:d3:61:d8:3d:bb:67:71:33:64:a5:
39:27:13:c3:c1:cf:2a:cd:f3:86:3c:f1:3e:58:9b:95:1b:bc:
cb:1e:87:18:73:21:6f:0e:cf:41:97:af:c6:1d:7d:23:42:28:
da:de:18:fc:37:65:cc:71:c6:b0:85:cb:3a:7e:aa:57:4a:02:
a3:a8:86:35:07:48:25:a9:c0:ab:b9:d6:71:31:cb:64:2b:34:
f1:0f:0f:97:48:cc:8e:87:d4:65:b1:26:50:bf:03:8d:b7:0f:
19:10:16:12:4a:57:f9:fa:72:18:09:77:9b:c7:fd:bf:4e:3b:
bb:53:5f:6f:e6:bd:1c:42:cd:18:a7:00:52:84:64:66:80:c5:
3d:2e:2a:88:22:6b:35:e3:74:9b:13:47:bb:c4:dd:56:06:5e:
d6:08:d9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:16 2025 by rpki-client