Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier: hlf/MJ9WUDR2nfXbWn1eBSCCnk5c+wB2SVr1w1g3o+s=
Subject key identifier: 85:07:DB:D2:41:4F:41:FE:F2:E9:19:A0:B3:7F:3B:28:94:72:4E:E9
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial: 0197B70EDFDD5367F1A74C250C030F995F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number: 05E7
Signing time: Sat 28 Jun 2025 15:01:34 +0000
Manifest this update: Sat 28 Jun 2025 15:01:34 +0000
Manifest next update: Sun 29 Jun 2025 15:01:34 +0000
Files and hashes: 1: Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa (hash: uO7pu6+EQ/hXwHNJ2EqENUuB+uo9LMGBRXK6r0igHMI=)
2: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: mO364G0STYRvaVboXZrRwomsui0qrfMMH7NgQvGv+qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:df:dd:53:67:f1:a7:4c:25:0c:03:0f:99:5f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
Validity
Not Before: Jun 28 15:01:34 2025 GMT
Not After : Jun 29 15:01:34 2025 GMT
Subject: CN=8507dbd2414f41fef2e919a0b37f3b2894724ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:40:e7:88:76:84:4d:f4:e1:cb:f9:2a:a2:
f8:23:a2:73:1e:56:16:66:62:b6:7c:e3:71:6f:20:
94:6d:a4:6f:17:fd:9e:31:52:a3:74:55:41:61:f4:
ec:c3:bb:85:e0:85:1c:03:71:f5:30:29:08:93:10:
8a:ca:5a:b5:df:93:40:59:bd:e8:e2:4c:89:63:8e:
a8:e1:b0:49:fe:c9:68:8d:ba:33:ad:39:65:7f:aa:
7a:98:8c:19:47:0b:57:88:9e:aa:2a:8d:ff:2f:b4:
4b:c1:19:8c:b4:6e:1c:82:bd:85:5e:12:39:b5:07:
13:6e:85:a7:d3:2a:39:e7:bf:e2:2c:08:0e:17:5c:
f1:4b:db:e9:0d:7f:6d:f4:68:ff:2c:ac:c5:2c:b0:
88:12:fe:6f:3f:8f:c6:8b:60:70:38:00:88:6b:60:
7b:8e:ad:30:ce:cf:10:37:8e:d3:1c:a5:99:f9:f7:
fb:03:b4:9b:b9:6c:b4:eb:99:a3:cf:67:e3:22:07:
25:f7:34:43:5a:bd:ac:53:f7:f9:ab:35:c3:9c:7f:
a6:24:51:2c:e8:b5:91:87:c7:e2:24:d7:2f:04:8a:
3a:25:1d:95:5b:1b:76:51:7c:1b:92:a4:cb:74:ad:
66:28:f5:bc:f1:bf:4a:d5:44:9e:5e:95:c2:73:29:
3b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:07:DB:D2:41:4F:41:FE:F2:E9:19:A0:B3:7F:3B:28:94:72:4E:E9
X509v3 Authority Key Identifier:
keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1f:58:5e:c6:b8:0d:11:25:85:b4:e2:1b:34:a5:90:1a:3a:
6b:0c:86:e8:45:0c:66:2f:77:a3:95:78:c3:41:fe:d4:97:d3:
38:4d:bd:6a:ca:a6:9e:cb:30:e6:f7:50:3e:6c:1e:33:d9:97:
a1:cc:73:fe:54:cc:98:60:be:fb:3d:2d:46:36:67:50:52:91:
65:ab:80:36:f0:2c:04:05:91:2a:4d:01:fc:e5:7e:8c:c7:e5:
38:1f:0f:37:a7:18:da:23:46:e2:70:93:fd:4a:ef:c4:15:fc:
e6:89:02:1d:95:a5:eb:ac:c9:c4:a0:3d:23:30:f2:22:6c:9e:
ff:61:49:37:60:27:b9:aa:a4:75:5d:6b:a7:28:62:d2:b8:0f:
2a:8e:e6:b7:bf:65:49:da:d1:1b:1d:23:83:75:3e:dc:27:8a:
fc:e8:29:5b:e7:d4:38:c3:11:83:91:77:af:be:a3:34:fa:d1:
83:13:4e:4d:fb:73:97:d9:c6:90:e7:d5:90:8c:9e:2b:fb:be:
a7:2d:be:79:9d:86:63:73:20:58:3c:62:bb:50:0e:e0:d7:75:
27:60:f2:02:be:44:b6:34:63:c7:71:cf:ff:ab:5a:2d:71:b8:
2e:75:d1:9b:6a:e9:76:e7:20:05:0c:9b:9d:d6:af:51:c3:28:
99:e2:b7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:58 2025 by rpki-client