
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
File: SdhmPTuWngJTom1UJb7hxdRDs2E.mft (raw, json)
Hash identifier: XlIA+daz+etox8MKWXIQq6NOBH/z9BplXgL0u3+2/xo=
Subject key identifier: 5F:FF:E5:DC:FB:22:E0:32:6E:C6:F9:1E:28:11:8C:23:A4:E2:44:C4
Authority key identifier: 49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
Certificate issuer: /CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Certificate serial: 0196C6F18D6EF5B63A66C81300721EE3EB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
Manifest number: 0697
Signing time: Tue 13 May 2025 00:00:41 +0000
Manifest this update: Tue 13 May 2025 00:00:41 +0000
Manifest next update: Wed 14 May 2025 00:00:41 +0000
Files and hashes: 1: 1-Sq9N9tDpqPpCxfnJu3FOlWH6ZA.roa (hash: Tpyvvdu3VZJ5oo8JL4qWFUonGAY9eL3r/UHvnFRq5cY=)
2: SdhmPTuWngJTom1UJb7hxdRDs2E.crl (hash: Rwy7sqQASnmAHe+17QHLUN94CEE8nnXS2oDcLoMchc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:8d:6e:f5:b6:3a:66:c8:13:00:72:1e:e3:eb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Validity
Not Before: May 13 00:00:41 2025 GMT
Not After : May 14 00:00:41 2025 GMT
Subject: CN=5fffe5dcfb22e0326ec6f91e28118c23a4e244c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:9f:54:08:3c:ac:de:04:13:ff:7e:c7:2f:
8c:e2:f3:f1:f2:d5:86:fe:6d:fc:6a:72:e1:32:6b:
c4:22:53:1d:2c:ed:7e:cd:02:1e:68:9d:0f:c7:47:
9e:51:e0:18:c9:be:fe:7d:07:16:73:c6:6f:aa:89:
df:95:54:44:ba:46:1f:78:f4:33:5d:1c:1a:12:95:
8f:ba:7a:4f:3e:ab:d7:49:60:10:27:99:6c:c5:bf:
98:90:aa:cb:46:a1:9c:bf:92:89:1d:90:65:10:44:
d2:1e:e2:be:06:92:cb:af:5e:67:91:82:18:0c:36:
9b:75:18:b7:b5:f2:d8:c6:54:fe:3c:85:10:eb:35:
83:28:05:22:e0:d7:5d:b3:a4:49:f5:10:82:6b:aa:
ea:9b:50:72:69:11:a9:13:54:d0:af:fb:e4:f8:5f:
62:5f:97:d7:a1:9d:7b:b0:85:b7:51:5d:d6:8d:79:
75:25:d0:05:e4:34:ed:da:38:58:06:84:26:53:d2:
9f:f4:0f:b4:70:47:23:e8:3f:43:48:96:3e:79:6c:
0b:19:5b:c3:21:30:05:0a:99:b1:64:cc:9e:3d:8c:
a0:b8:a8:b9:5b:30:34:d4:3c:ca:75:ce:5d:91:63:
5a:35:a4:3b:6f:6e:f2:8a:d1:b7:fe:4f:32:e6:fd:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FF:E5:DC:FB:22:E0:32:6E:C6:F9:1E:28:11:8C:23:A4:E2:44:C4
X509v3 Authority Key Identifier:
keyid:49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:6b:bd:d1:28:3e:40:7e:b9:69:8e:14:70:7e:81:24:43:fd:
33:de:ce:7f:62:dd:1f:e8:5e:28:ba:78:bb:45:e4:88:52:0a:
d1:9c:cf:7a:30:c0:2e:60:67:56:be:d6:e6:40:c7:14:39:74:
5a:f1:96:89:32:7c:d0:70:1a:4d:05:3b:08:92:01:f0:f5:bb:
4b:35:42:5b:67:38:1e:ba:a4:fa:c5:78:dc:e6:78:b7:1d:88:
e5:aa:ea:ab:0c:5b:72:f6:00:0c:f1:00:fe:5e:9c:37:15:76:
49:72:74:8b:33:ea:45:10:b1:2b:71:f6:21:ee:87:5f:8d:88:
d5:ea:09:6f:2e:27:4b:8c:0b:b2:55:74:90:3d:f3:66:94:60:
e9:57:4d:c7:e6:43:52:82:e2:42:c0:63:62:ee:e3:20:73:dc:
08:cd:02:51:a0:89:0b:49:cf:a7:45:ca:ab:91:91:79:c4:bb:
a0:1a:88:99:d0:3a:02:18:e7:96:0f:24:1f:e2:c5:1d:a9:7e:
07:cc:e9:be:b7:91:c6:67:00:a4:d4:24:62:5e:07:84:00:2a:
2c:e9:83:fe:ca:11:81:38:5f:3a:90:d0:eb:33:d8:bc:88:8b:
2f:97:38:71:4a:f0:c9:5e:bf:26:28:60:c2:69:0b:2d:36:cb:
b4:c0:84:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:30:53 2025 by rpki-client