Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
File: SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft (raw, json)
Hash identifier: YgJSyM9lecJhfYJTrPB3wo5HLCiZI/ms3BqsNaZWEmw=
Subject key identifier: A8:00:3F:E2:E6:1E:E7:0C:77:32:F6:A4:2A:04:58:BE:EF:5D:77:2D
Authority key identifier: 48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
Certificate issuer: /CN=48559018adff16eadf5551b2cb74d8f6860cd044
Certificate serial: 01992C3419DAF1F4FA14F9FF04E0B40B02A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
Manifest number: 0AA3
Signing time: Tue 09 Sep 2025 02:00:35 +0000
Manifest this update: Tue 09 Sep 2025 02:00:35 +0000
Manifest next update: Wed 10 Sep 2025 02:00:35 +0000
Files and hashes: 1: DlNfl6KgR_MUNI_dJxw9ErXDeIE.roa (hash: eSCVIU9rH872alqy7/aU0fAeLMAeeiberdc7Lc5APRo=)
2: SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl (hash: Ct3hxpGNTDX8FgWsIQMU8bGO+c3p4XQ5FzIieaENCIU=)
3: kNzmfkRSfsPZfyUkp0lW7AHAG-c.roa (hash: P6poTIVQZa8F+UuuStCgTYtjT3XTXjtd8ThSIr53awM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:34:19:da:f1:f4:fa:14:f9:ff:04:e0:b4:0b:02:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48559018adff16eadf5551b2cb74d8f6860cd044
Validity
Not Before: Sep 9 02:00:35 2025 GMT
Not After : Sep 10 02:00:35 2025 GMT
Subject: CN=a8003fe2e61ee70c7732f6a42a0458beef5d772d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:c0:20:8b:62:6d:2a:bf:5b:7f:50:c9:b9:
cc:4a:2e:88:bc:d7:93:6a:40:65:58:43:48:ab:e5:
8f:96:bb:b3:2f:70:f1:0b:19:64:6c:60:02:08:a6:
87:e9:b3:4a:49:49:23:99:23:15:d9:d0:7b:ca:45:
91:5e:92:60:2a:e1:b0:22:b6:fb:cb:9d:fb:03:c5:
18:da:6e:ac:57:81:e4:db:d9:f0:63:d1:55:bd:be:
4e:03:19:f6:0b:c9:c9:c6:36:38:16:e3:ab:4c:d0:
8d:3f:04:a0:1f:b5:4c:af:4e:0c:2f:b2:6d:5e:7d:
55:2b:d7:e1:23:e8:5b:45:65:73:33:87:9b:f4:42:
72:5a:37:07:78:21:dd:8c:10:09:88:c3:11:75:36:
67:fe:84:d4:64:7d:1f:00:69:86:89:09:03:9a:a1:
fe:fd:dc:b5:6e:0a:92:e8:c2:e8:2b:d5:6f:63:1e:
a4:86:6f:93:70:25:b0:dd:cb:97:21:fc:20:5c:33:
07:18:50:1d:54:c7:4a:4f:c7:e6:b2:f8:7b:d7:1c:
42:d2:e1:40:c5:57:6a:07:af:f4:03:b0:37:43:d6:
82:3c:d8:8c:c4:c1:07:5f:d8:e6:dd:e7:62:de:86:
68:50:ba:aa:a7:8a:7b:37:63:72:6d:da:ea:03:79:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:00:3F:E2:E6:1E:E7:0C:77:32:F6:A4:2A:04:58:BE:EF:5D:77:2D
X509v3 Authority Key Identifier:
keyid:48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3f:d9:7f:db:54:7e:15:de:50:57:39:8b:b8:de:28:5a:ce:
57:07:a4:a8:95:74:85:61:fb:de:9d:09:ff:bb:dc:d7:e0:ca:
61:1f:e2:44:02:91:38:93:83:f2:d4:7f:53:b3:8c:90:63:63:
3c:14:52:b8:69:bd:16:af:b3:c5:b5:03:38:f9:5e:58:d3:a7:
35:e7:58:45:d4:e1:bf:55:50:8e:e1:24:0d:2b:94:18:f1:cc:
d4:80:cb:5e:2b:44:0a:1f:9f:8a:c3:b2:eb:04:72:ac:ae:d7:
73:3e:58:3e:aa:81:f0:58:38:9e:9a:ea:df:b2:8f:ce:19:74:
7a:40:cb:e9:e8:d8:89:ce:09:fe:4b:f6:6e:ce:d9:a8:9d:5c:
77:9c:4f:ae:c6:be:95:8c:1c:e8:e9:79:14:29:e4:5f:1c:05:
e0:8e:fc:a9:9e:30:ec:73:fe:cc:06:57:2a:ed:3c:02:43:bb:
94:5d:52:2d:53:4c:8a:ad:6a:1c:93:bd:0e:4d:9d:7e:05:79:
b8:02:f0:45:31:fb:20:d5:3a:c8:fb:8b:70:7b:13:7f:b8:2e:
22:b0:11:ff:31:50:f8:e8:94:78:b9:86:35:8a:f4:26:c1:00:
29:cb:dd:c9:90:5f:e7:4e:54:8c:94:6f:67:91:b0:55:45:9f:
ba:d2:70:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZksNBna8fT6FPn/BOC0CwKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTU5MDE4YWRmZjE2ZWFkZjU1NTFiMmNiNzRkOGY2ODYw
Y2QwNDQwHhcNMjUwOTA5MDIwMDM1WhcNMjUwOTEwMDIwMDM1WjAzMTEwLwYDVQQD
EyhhODAwM2ZlMmU2MWVlNzBjNzczMmY2YTQyYTA0NThiZWVmNWQ3NzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDDAIItibSq/W39QybnMSi6IvNeT
akBlWENIq+WPlruzL3DxCxlkbGACCKaH6bNKSUkjmSMV2dB7ykWRXpJgKuGwIrb7
y537A8UY2m6sV4Hk29nwY9FVvb5OAxn2C8nJxjY4FuOrTNCNPwSgH7VMr04ML7Jt
Xn1VK9fhI+hbRWVzM4eb9EJyWjcHeCHdjBAJiMMRdTZn/oTUZH0fAGmGiQkDmqH+
/dy1bgqS6MLoK9VvYx6khm+TcCWw3cuXIfwgXDMHGFAdVMdKT8fmsvh71xxC0uFA
xVdqB6/0A7A3Q9aCPNiMxMEHX9jm3edi3oZoULqqp4p7N2NybdrqA3lrlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgAP+LmHucMdzL2pCoEWL7vXXctMB8GA1UdIwQY
MBaAFEhVkBit/xbq31VRsst02PaGDNBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZXUUdLM19GdXJmVlZHeXkzVFk5b1lNMEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lZjU2ZDItNjMyZS00ODE2LWE5Y2Et
YWI0NWU2MDA3MWUyLzEvU0ZXUUdLM19GdXJmVlZHeXkzVFk5b1lNMEVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lZjU2ZDItNjMyZS00ODE2LWE5Y2EtYWI0NWU2MDA3MWUy
LzEvU0ZXUUdLM19GdXJmVlZHeXkzVFk5b1lNMEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQj/Zf9tU
fhXeUFc5i7jeKFrOVwekqJV0hWH73p0J/7vc1+DKYR/iRAKROJOD8tR/U7OMkGNj
PBRSuGm9Fq+zxbUDOPleWNOnNedYRdThv1VQjuEkDSuUGPHM1IDLXitECh+fisOy
6wRyrK7Xcz5YPqqB8Fg4nprq37KPzhl0ekDL6ejYic4J/kv2bs7ZqJ1cd5xPrsa+
lYwc6Ol5FCnkXxwF4I78qZ4w7HP+zAZXKu08AkO7lF1SLVNMiq1qHJO9Dk2dfgV5
uALwRTH7INU6yPuLcHsTf7guIrAR/zFQ+OiUeLmGNYr0JsEAKcvdyZBf505UjJRv
Z5GwVUWfutJwrA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 08:58:01 2025 by rpki-client