Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier: VjXIDnxAROTN/ziBxBW9UBthZVgp8PA2D66jChzPcqs=
Subject key identifier: 65:09:73:A4:29:58:66:53:83:7D:E9:E1:62:33:A9:F3:19:20:98:70
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial: 019748FAA5486D5D3D5B90022252B696FBDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number: 05AE
Signing time: Sat 07 Jun 2025 06:01:15 +0000
Manifest this update: Sat 07 Jun 2025 06:01:15 +0000
Manifest next update: Sun 08 Jun 2025 06:01:15 +0000
Files and hashes: 1: Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa (hash: uO7pu6+EQ/hXwHNJ2EqENUuB+uo9LMGBRXK6r0igHMI=)
2: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: p7f1Q4NYBdLnT3ndfDEcBuEp7WMU72oFvsuyeSZhv8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:a5:48:6d:5d:3d:5b:90:02:22:52:b6:96:fb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
Validity
Not Before: Jun 7 06:01:15 2025 GMT
Not After : Jun 8 06:01:15 2025 GMT
Subject: CN=650973a429586653837de9e16233a9f319209870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2b:fd:33:40:69:65:af:f7:e2:b7:f1:6d:4f:
f8:e4:cf:40:01:f7:fd:f6:29:45:1b:3c:09:df:5b:
cb:08:e9:c7:81:c3:fd:04:eb:98:d2:96:9c:d1:51:
ac:8c:4c:e5:c3:89:cc:d6:8a:74:00:ef:ae:7a:04:
25:3d:11:be:bf:3c:fe:eb:76:19:2b:d8:01:ac:e9:
da:a6:c8:9b:cf:8d:92:73:2f:10:fa:6f:1d:1d:42:
9b:df:d7:2a:3a:76:d4:7a:ce:03:8d:9f:4e:32:1b:
9a:c1:d5:85:e7:28:fd:2d:06:6a:79:c2:85:38:ea:
e4:be:87:1c:4b:dc:54:97:ab:c9:ec:13:02:32:92:
aa:8a:4f:26:18:e7:23:7e:de:d0:0e:ef:43:46:8b:
f1:d7:53:54:09:c1:58:ad:e5:90:7a:dd:4d:eb:62:
7f:99:fe:37:bb:ab:bc:9b:77:86:40:c5:f7:92:38:
43:36:af:89:18:cd:ef:17:61:12:87:db:4a:c8:e5:
3c:67:36:11:e7:cf:48:62:27:1a:6d:c4:78:aa:21:
59:c3:10:f6:9a:84:c9:31:52:64:95:51:fc:e0:cd:
1d:d3:ee:fe:12:23:d5:2a:00:b6:14:2f:1b:83:c6:
d0:a1:fe:7c:4a:86:e9:e2:88:eb:5d:1e:cb:fa:c0:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:09:73:A4:29:58:66:53:83:7D:E9:E1:62:33:A9:F3:19:20:98:70
X509v3 Authority Key Identifier:
keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2f:14:79:70:ed:28:e0:27:f0:b8:d0:b4:a4:01:71:18:be:
2b:ff:27:24:76:b8:df:38:9d:08:13:1e:d2:31:48:2c:f5:9a:
d0:f2:d3:34:17:a8:80:26:68:7c:84:e1:13:21:4a:31:84:1f:
ce:08:0b:87:98:e1:4c:76:fa:54:dd:01:9f:5b:ca:8d:80:4e:
eb:7a:42:72:25:cb:13:10:ac:df:ae:b4:dd:9a:8d:58:ff:a8:
15:e0:6f:c6:60:55:00:58:f5:3e:cd:a4:3c:79:d6:d5:95:b7:
5e:0c:d4:7a:49:70:25:98:5e:5d:67:40:32:c2:8d:0b:f9:e6:
39:6a:22:9a:19:a4:48:2a:61:34:7d:b8:73:1b:84:d8:14:64:
e7:77:fc:2f:7c:46:7a:50:49:66:f8:59:d8:14:17:ab:7d:61:
53:32:7d:2e:c7:2c:21:a2:81:a5:db:64:3e:38:52:cc:0e:ce:
49:61:df:4f:77:2b:5f:88:99:cf:0a:8b:3a:0b:b2:4c:8d:87:
3d:5e:8a:80:d5:00:4d:a3:3d:5f:eb:d4:22:bd:a3:fb:a4:e5:
76:9d:90:d2:98:3d:88:35:d8:d0:22:47:59:94:52:f1:f5:55:
b3:cb:f7:fb:73:96:89:da:80:5a:c2:c0:82:1d:32:a6:6a:a2:
87:75:13:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:41 2025 by rpki-client