Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json)
Hash identifier: g6ghpWDml1O8JryLL3da5Shpwl9YRtN2hMvw24psvqo=
Subject key identifier: A9:C7:AD:80:AD:3E:F7:FE:01:08:39:66:89:BC:32:FA:BA:65:29:68
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 019853E9456A53D3E046550C5C3DF7C15745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
Manifest number: 1546
Signing time: Tue 29 Jul 2025 02:00:53 +0000
Manifest this update: Tue 29 Jul 2025 02:00:53 +0000
Manifest next update: Wed 30 Jul 2025 02:00:53 +0000
Files and hashes: 1: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: mGB77a67AE91YFBNbFiL7x9aceSThfbx6/kVcF8ccYQ=)
2: YrgeNV0Q3t4Xw5uBv1-S6YoZvb0.roa (hash: j80OYLZ1mn+7VVYJkW8xMNJr5ib6X+eHYr4UT4vddFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:45:6a:53:d3:e0:46:55:0c:5c:3d:f7:c1:57:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: Jul 29 02:00:53 2025 GMT
Not After : Jul 30 02:00:53 2025 GMT
Subject: CN=a9c7ad80ad3ef7fe0108396689bc32faba652968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1a:e2:16:f2:c4:7a:2e:c5:78:3c:f5:7e:2e:
fc:ec:90:f8:e3:42:a3:49:37:ad:23:c1:4b:6c:d1:
71:c6:ad:2d:28:a9:c7:4c:f4:c2:79:2a:51:6b:ac:
89:32:d4:8a:60:60:67:7e:b0:2c:dc:30:a0:a2:3b:
b4:f2:db:3e:f3:0f:43:04:82:52:9f:97:a3:e8:d1:
db:18:c8:e9:a1:86:ce:92:44:e1:8b:5c:da:4f:39:
8b:d2:3c:56:8a:c1:c7:4f:1d:8f:51:a3:53:c8:a3:
1b:2f:33:90:bf:34:52:e0:d8:00:49:a1:0d:4f:ee:
1e:93:59:31:d3:cb:5f:c8:66:fe:69:71:a1:7d:9c:
d3:83:a1:eb:64:c6:6f:4b:4e:69:3b:e1:7e:8b:86:
09:9d:7e:b5:29:54:b7:ba:62:6c:52:2e:1e:50:7e:
bd:4d:00:04:7b:d8:62:71:e5:bd:43:7c:13:85:51:
6e:ab:24:3b:3b:52:3b:18:97:e3:64:31:4e:8f:54:
01:ea:b1:ac:d0:55:d6:86:22:08:0c:a5:76:e2:81:
4f:ec:5b:5c:07:09:64:f7:3f:2b:45:2f:e8:78:9c:
cc:e9:be:81:94:7b:82:25:a0:e4:53:cd:73:88:ae:
7c:ad:82:ae:d1:48:4e:9d:16:b1:8d:ee:4c:d7:ce:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C7:AD:80:AD:3E:F7:FE:01:08:39:66:89:BC:32:FA:BA:65:29:68
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:cc:39:94:02:36:31:c1:53:03:a4:e0:b5:a6:17:d1:ea:95:
15:f0:86:a1:63:f4:51:71:c4:1b:ff:c2:b2:19:60:ed:0c:e8:
96:24:a1:f5:8d:28:96:64:30:0a:fe:9b:88:48:30:07:ee:df:
f8:5c:cf:45:c4:72:f7:87:2a:2e:8b:23:72:30:56:6b:e2:85:
c1:4f:99:08:fe:3d:e4:37:03:e4:85:f7:fd:58:ed:1e:e3:9b:
90:37:b7:50:bb:c6:e4:48:68:26:1c:c9:c9:f1:68:cb:de:43:
e7:d3:cb:12:1e:0e:e9:8e:3e:fd:18:eb:ac:ad:7c:e2:aa:ee:
9c:26:db:cd:dc:f2:42:ec:f9:82:7f:15:a0:e5:f6:91:27:77:
fa:84:c1:4c:d9:87:d1:31:59:e0:07:d8:02:db:57:0a:2d:28:
4e:eb:c0:95:4b:56:54:aa:d5:33:46:ea:8d:2d:c1:7d:26:64:
50:b2:8b:1b:d5:ea:bd:c3:9a:e1:8e:01:30:85:48:cd:b5:98:
39:7a:d3:3c:15:5c:81:df:34:f2:d9:49:7b:a3:e2:91:2a:d3:
05:9a:87:8e:73:1d:78:c8:b8:2d:81:38:ae:06:ef:e7:10:10:
73:cf:77:79:bc:ba:96:a8:e0:c2:1e:c8:04:ef:ed:54:92:a7:
34:d5:fa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:39:08 2025 by rpki-client