Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
File: SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft (raw, json)
Hash identifier: MLyZKIBHapkhi0mkXqxGMQEuZkoSTrG/gt1jLi0Jl8k=
Subject key identifier: 18:2D:EF:92:AD:05:09:E1:3D:2E:DB:B4:FE:A5:3A:C6:7F:A5:72:31
Authority key identifier: 48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
Certificate issuer: /CN=48559018adff16eadf5551b2cb74d8f6860cd044
Certificate serial: 01974D44FC643867EFC38777774A7D6548A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
Manifest number: 09AB
Signing time: Sun 08 Jun 2025 02:00:56 +0000
Manifest this update: Sun 08 Jun 2025 02:00:56 +0000
Manifest next update: Mon 09 Jun 2025 02:00:56 +0000
Files and hashes: 1: DlNfl6KgR_MUNI_dJxw9ErXDeIE.roa (hash: eSCVIU9rH872alqy7/aU0fAeLMAeeiberdc7Lc5APRo=)
2: SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl (hash: +/aL4lUc3br/AawrsffeKM2b52hP/sb/85bXvqG4f2U=)
3: kNzmfkRSfsPZfyUkp0lW7AHAG-c.roa (hash: P6poTIVQZa8F+UuuStCgTYtjT3XTXjtd8ThSIr53awM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:fc:64:38:67:ef:c3:87:77:77:4a:7d:65:48:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48559018adff16eadf5551b2cb74d8f6860cd044
Validity
Not Before: Jun 8 02:00:56 2025 GMT
Not After : Jun 9 02:00:56 2025 GMT
Subject: CN=182def92ad0509e13d2edbb4fea53ac67fa57231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:5f:51:e6:66:18:c8:df:8b:f6:d5:9d:94:
9b:f3:13:1f:ba:1c:ff:cf:fa:82:e8:2c:0f:2f:45:
af:de:52:fa:8c:c8:22:d3:c7:90:c1:50:ab:b8:94:
dc:60:de:38:02:9f:0a:85:1c:17:76:2b:1d:49:af:
6f:ac:73:97:3b:76:3f:0f:00:59:0c:ff:30:18:df:
c7:35:7e:02:db:1f:e5:73:5a:fd:96:fe:dd:b7:38:
2c:f3:f0:38:2b:a8:bd:84:67:74:83:c4:cb:9c:70:
1f:3b:28:4a:02:41:82:ea:2c:2b:3a:85:43:57:1c:
41:92:bd:f6:ff:ff:15:2c:3c:01:d7:6a:ff:87:87:
ed:7b:73:69:c6:f1:7d:75:14:b7:b8:a5:b6:7a:89:
83:bf:04:d3:57:56:aa:4e:9c:62:14:1f:a1:a3:10:
b8:b5:f9:a1:b7:28:2c:ba:3c:e8:ee:1b:a7:e6:1f:
e8:52:8a:8c:e6:26:1f:0b:35:2a:1b:bf:2b:e9:27:
a9:93:56:30:aa:65:c9:d8:23:57:02:3e:5c:b3:50:
d4:a6:de:7c:4d:a5:54:63:8f:ac:33:e8:d0:29:ba:
48:07:58:4a:c6:93:74:ff:2b:0b:63:d8:08:e0:06:
c4:fc:e7:a4:ae:f5:0f:bd:29:7d:c5:7c:a8:70:22:
37:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2D:EF:92:AD:05:09:E1:3D:2E:DB:B4:FE:A5:3A:C6:7F:A5:72:31
X509v3 Authority Key Identifier:
keyid:48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:92:c8:1f:ac:78:dc:36:47:45:25:1c:b1:53:fc:cc:4e:8f:
eb:32:dd:e4:e9:c6:d6:d2:03:54:0d:46:4d:6a:36:91:f9:ef:
ec:3a:bd:8d:51:19:05:ac:f8:5b:de:ec:70:30:de:46:97:f4:
d2:09:e7:bc:97:43:c6:16:45:23:96:e3:68:80:48:4f:06:12:
93:0a:35:85:56:1b:75:61:6b:31:56:63:a5:10:e5:ab:39:9b:
66:61:e3:e6:67:19:cf:04:84:7c:b0:42:80:65:d5:9f:2c:fa:
ae:c7:b2:3b:49:1e:6d:40:d9:f8:c9:09:62:da:72:e0:3d:37:
47:29:2e:cb:0d:a3:a5:e2:d3:cc:e1:43:c9:25:a8:fe:be:7d:
56:a5:c5:ea:75:56:09:25:62:07:16:7b:87:ce:91:26:29:07:
53:f3:69:5f:63:09:03:dc:0f:63:af:f8:41:3c:5e:b1:39:5d:
30:e0:7a:a1:b2:06:e7:c1:2e:59:42:ff:3f:ab:a0:fe:ac:31:
b7:24:42:b3:62:b0:8a:d8:ae:cb:9e:7a:18:b8:6c:82:1b:18:
ba:48:4f:bf:a1:9a:03:cf:1e:a4:48:8a:bd:13:b8:84:66:17:
b1:f4:a9:9c:f6:48:5b:f2:01:38:c3:e0:29:19:ce:b5:54:f5:
c6:07:1d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:17:29 2025 by rpki-client