Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier: E9r1zSW7v81Yq/DUTRbiR0SurNt07UJwzuOE1uvLlwY=
Subject key identifier: 9C:C7:D5:DA:E2:84:C1:5A:19:DE:C1:E7:FB:75:27:92:27:99:2B:33
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial: 019849D2F5B8F05711CF7C0B53F46FC9A603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number: 0633
Signing time: Sun 27 Jul 2025 03:00:18 +0000
Manifest this update: Sun 27 Jul 2025 03:00:18 +0000
Manifest next update: Mon 28 Jul 2025 03:00:18 +0000
Files and hashes: 1: Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa (hash: uO7pu6+EQ/hXwHNJ2EqENUuB+uo9LMGBRXK6r0igHMI=)
2: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: PDuz+MzegEH/g9XkZjuNA+00PcvEEYKrg2YhaLB/Myk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:f5:b8:f0:57:11:cf:7c:0b:53:f4:6f:c9:a6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
Validity
Not Before: Jul 27 03:00:18 2025 GMT
Not After : Jul 28 03:00:18 2025 GMT
Subject: CN=9cc7d5dae284c15a19dec1e7fb75279227992b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:64:ee:26:66:d7:7b:a4:8d:64:45:e4:e7:9f:
b0:e7:a1:85:9a:64:d8:0b:7a:c8:b1:84:86:58:dc:
85:ec:a9:88:6c:74:dc:10:af:02:16:d8:16:b7:4d:
43:21:df:8b:ba:86:23:49:44:98:08:10:ab:4a:54:
ac:6d:ad:ef:15:dc:c3:44:b9:ec:1c:8b:6b:2a:0d:
e0:16:47:c3:9f:7a:2d:6c:de:f9:a9:3f:ef:81:11:
95:dc:3f:f3:00:84:9b:af:06:5a:05:d2:91:e2:52:
fb:75:e3:44:01:69:a5:9e:44:36:cb:10:00:62:11:
01:52:2e:bd:75:dc:b3:49:68:d5:fd:25:25:9a:eb:
de:d3:9c:21:b5:46:86:30:27:de:6e:18:ff:54:07:
7e:6b:e4:fd:95:bf:08:92:0f:db:61:c8:75:a6:ec:
1d:a8:46:00:6a:1a:7c:ee:a7:a7:0b:2f:73:4a:9f:
19:08:bd:b6:1e:85:b6:fa:e7:b0:dc:53:c1:51:60:
85:69:de:79:73:61:72:6f:3a:94:df:61:c0:48:48:
55:15:cd:02:c3:8c:f0:6f:31:b6:df:2b:fb:e0:b5:
d4:ea:02:65:9d:13:cd:15:e0:51:8a:c4:91:cb:e2:
6b:1a:80:75:5e:46:31:b5:8c:68:af:f9:2f:65:61:
d3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C7:D5:DA:E2:84:C1:5A:19:DE:C1:E7:FB:75:27:92:27:99:2B:33
X509v3 Authority Key Identifier:
keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:3a:4a:bc:fb:70:54:3d:69:4f:af:9c:cd:4a:e0:56:d0:ed:
62:4d:92:ce:cf:70:52:46:45:76:5b:1e:26:11:4b:60:b1:87:
7b:dc:76:8c:2f:fb:e3:94:95:0d:26:af:b8:46:d9:ba:4c:f8:
f7:28:f4:b4:b5:1c:39:c5:5d:ec:11:b7:f5:d0:4a:54:e8:c4:
d2:1e:de:98:08:6b:84:76:71:86:dc:c4:c5:77:32:77:d0:00:
92:ba:a4:6e:c6:cd:51:b7:fc:6f:db:a9:8b:ca:92:7b:d1:b4:
a2:b4:59:20:22:63:c2:02:31:36:5f:4d:61:e8:02:de:ec:27:
eb:1e:de:09:6c:ec:80:e7:cc:8f:37:1a:b0:76:a6:82:48:16:
25:f2:1a:40:24:10:71:84:8c:5b:d6:5a:1d:f8:c2:e8:ca:86:
5c:13:19:ee:9d:92:ae:94:32:27:6c:64:2a:44:e7:01:33:0c:
16:8f:20:fe:0c:ca:b1:cb:52:29:77:e2:06:5c:15:67:29:93:
7a:61:5e:28:9e:ae:5d:ef:af:80:8f:47:b2:4f:5e:d1:34:96:
05:cd:60:d5:9f:2e:a4:a2:51:f7:01:9a:5e:47:01:78:c0:86:
da:63:c2:65:09:55:50:69:50:a2:6c:27:cb:5d:f6:be:70:b4:
4c:11:de:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:24 2025 by rpki-client