Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File: SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier: MBSxHcEnrpUPToqdr6Axa47+vsscYq0r7el/Rq2FAmo=
Subject key identifier: 9C:1A:23:FE:7F:58:6D:27:34:D9:A0:9F:42:4B:27:CF:79:C8:B6:D5
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial: 0199277BA0A87692C1907D4863F3488EF781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number: 135A
Signing time: Mon 08 Sep 2025 04:00:37 +0000
Manifest this update: Mon 08 Sep 2025 04:00:37 +0000
Manifest next update: Tue 09 Sep 2025 04:00:37 +0000
Files and hashes: 1: 1PfCogsrcmO4yMFx3i7dWcicxiM.roa (hash: QSA42PQDSQu+Rjvywm1NdoufERvHtIOdqRGsBA5DYb0=)
2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: Pz+yuTLckK9/L/GzVEVlIEl/RFCaohs+awbB7XBOcl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7b:a0:a8:76:92:c1:90:7d:48:63:f3:48:8e:f7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Validity
Not Before: Sep 8 04:00:37 2025 GMT
Not After : Sep 9 04:00:37 2025 GMT
Subject: CN=9c1a23fe7f586d2734d9a09f424b27cf79c8b6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:db:69:18:6e:9a:a8:46:a3:01:e3:8a:2a:
53:d5:0d:03:78:b1:9b:24:c7:62:a2:01:12:f1:22:
4b:3d:09:00:b9:0b:07:73:45:6e:ce:0c:a6:fb:e4:
5e:61:c7:50:7e:d1:e0:ad:d0:3e:c1:e5:bd:b1:82:
13:2d:e2:2a:b2:cc:aa:ed:04:03:47:86:06:2b:53:
c6:7f:48:82:a4:24:80:63:fa:df:dd:0b:64:e3:82:
90:b7:1b:94:4d:00:de:36:7e:f2:f6:95:f8:91:cd:
30:6d:64:e4:42:ba:be:4b:ec:1b:65:63:7e:c0:2b:
2c:01:ef:29:01:1d:d0:e2:96:e4:72:94:e8:0d:92:
82:41:56:f3:8d:e7:ad:28:53:d8:94:bc:53:d7:d8:
96:f8:82:cf:0b:b8:f1:d4:40:2b:6a:cb:aa:2d:dd:
bc:aa:55:e6:aa:95:22:c2:eb:83:dc:ff:1d:6c:02:
3c:8c:fe:ac:99:c5:3a:53:84:38:77:b8:62:2a:21:
5f:9b:ff:1c:4c:22:7b:7a:d1:69:ec:39:78:ce:c5:
2b:7f:ab:eb:57:3f:50:e2:56:f8:45:4c:ab:72:51:
80:9c:a0:94:2e:cd:b1:9d:a0:03:51:d3:4f:d4:6f:
9b:de:ea:87:b9:ca:f6:0d:c7:ec:9c:3a:ca:4e:94:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1A:23:FE:7F:58:6D:27:34:D9:A0:9F:42:4B:27:CF:79:C8:B6:D5
X509v3 Authority Key Identifier:
keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:51:ec:cc:d0:d3:07:10:0c:e7:5c:77:84:05:18:40:e9:9b:
5f:7a:fb:67:fc:c0:fc:c1:71:1b:ab:b2:ef:62:67:88:71:32:
91:f9:84:5b:25:e4:2e:25:dd:10:82:7c:f7:1e:c6:b2:32:db:
26:47:60:a6:ec:5d:83:c5:f6:d2:e5:63:f0:12:19:6a:a8:2a:
bf:d9:3b:e1:be:49:b7:ce:9f:95:50:ac:93:60:73:fd:f7:78:
d4:30:fd:15:ae:56:04:ea:96:69:e9:a3:9d:12:f2:e2:41:58:
65:bb:dc:8f:d5:ee:38:d9:8b:6b:2c:e1:94:53:65:6e:2b:0c:
42:28:5f:d5:b1:76:a7:b1:e7:f3:6e:f7:c4:b2:d8:ab:19:b9:
15:e3:41:cc:69:78:05:af:b1:5a:bf:82:f6:8b:95:c2:a3:bd:
7e:14:d5:ea:ec:f4:f0:e4:63:ca:25:56:66:83:1a:6b:df:01:
8e:66:52:a6:6e:11:b6:bd:21:f5:5d:3c:ca:19:fd:b3:60:6f:
12:b7:72:c9:16:4a:81:10:ed:f7:e1:00:2e:de:14:2c:86:56:
4b:59:af:2f:c2:9f:ac:31:98:58:8f:1c:06:b8:14:6d:05:d9:
d6:16:7f:77:41:42:0d:3f:3b:e4:09:f2:a0:fe:42:4d:e4:3d:
d1:04:c7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:06:23 2025 by rpki-client