Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File: SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier: Y/t98UmO2RScdArwCnPTCJc0o77tEdCO+sDXIf0KUcM=
Subject key identifier: 65:77:DB:43:56:B1:E7:19:3B:67:68:27:77:51:CC:C0:91:63:73:C8
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial: 019A71B8892FE8B5125092F5B134BDCB4EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number: 1405
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: 1PfCogsrcmO4yMFx3i7dWcicxiM.roa (hash: QSA42PQDSQu+Rjvywm1NdoufERvHtIOdqRGsBA5DYb0=)
2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: P4P3uDDY6dX2m4LCjYsjLWr4JqFiVMws57fljpijpC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:89:2f:e8:b5:12:50:92:f5:b1:34:bd:cb:4e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=6577db4356b1e7193b6768277751ccc0916373c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:8a:ac:41:d8:93:40:b6:0b:5f:33:df:70:
5c:00:4b:7f:b7:a8:90:9e:15:b9:81:77:86:94:d4:
30:7c:78:bf:fe:91:05:8a:49:f0:ae:19:46:29:07:
34:98:e3:b5:c2:2a:2d:07:22:31:05:df:27:ea:e9:
ce:6f:d4:25:6b:35:70:f4:66:4d:aa:1f:1a:18:73:
9d:d7:a9:af:05:28:5b:6c:7d:3e:c1:85:71:7f:ec:
bd:59:c0:11:63:b0:8e:18:e3:d1:7f:32:3e:51:b9:
90:16:61:d4:4e:5e:ef:48:66:a0:0a:97:f0:e1:8e:
1a:65:72:29:bd:74:77:10:65:7b:28:58:52:3b:c3:
95:93:be:f8:38:9c:bf:5b:e7:c5:e1:72:12:9e:4f:
4e:7e:db:44:9d:01:d2:72:ed:8c:7d:8a:f1:35:45:
ab:38:03:a2:6f:dd:cd:07:59:f8:b9:6a:43:4e:a7:
33:05:be:58:66:2a:b5:82:cf:ee:a3:0a:25:04:22:
fa:59:94:02:7a:31:8b:ea:b2:47:f8:9c:0b:01:ed:
e1:14:28:33:eb:67:30:c7:91:f5:8b:ad:57:38:88:
31:75:9a:0c:a2:b2:35:c3:6c:39:c7:39:df:4f:30:
b3:e2:8c:b6:b0:4a:86:39:33:c4:2f:7e:72:7b:1b:
ea:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:77:DB:43:56:B1:E7:19:3B:67:68:27:77:51:CC:C0:91:63:73:C8
X509v3 Authority Key Identifier:
keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7a:59:18:8c:30:4b:71:22:31:29:21:72:27:80:b9:96:82:
b8:15:b2:37:97:cf:b3:06:db:9b:46:69:73:4e:0f:5a:53:38:
1c:c5:83:42:24:4f:e1:8f:02:aa:8b:ff:da:0e:61:18:75:4e:
ea:df:2a:ca:c5:ed:f4:2c:bd:92:bb:48:a0:9d:52:aa:6c:d0:
17:ab:27:22:ba:5d:d8:39:2f:7d:0c:0a:a1:aa:8d:d7:16:93:
56:82:2a:5c:ab:5f:f4:e1:bc:77:00:a1:4b:fd:e0:7a:0e:82:
84:03:70:29:0a:1b:1d:f3:34:f6:99:81:b2:7c:42:ed:d6:e7:
4f:60:e0:30:4d:6a:55:c1:dc:70:a3:a4:a6:59:71:85:da:0a:
1c:51:2e:7d:c6:76:ca:2b:b1:c2:a2:0a:01:1c:77:cf:61:0d:
98:44:63:eb:15:b5:c0:40:b7:a6:51:19:b2:68:89:a2:e4:9a:
08:69:81:5f:77:68:d4:d3:2a:59:6e:5d:a4:fc:14:a4:00:dc:
bd:3a:8d:a5:e3:e6:e1:a6:2b:bf:e4:c5:60:d0:12:6b:72:9e:
3c:25:16:06:07:e6:38:00:13:b8:96:b1:0a:24:fb:a7:b2:da:
fe:4f:a0:27:ab:22:5a:10:10:95:bd:e4:dc:7a:38:dc:e5:7b:
10:15:48:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:45 2025 by rpki-client