Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json)
Hash identifier: i75fOckltJdOJAYqA33B7U0YI48I0LSO3H2p1mTVbpE=
Subject key identifier: 09:E6:57:D4:09:4A:F1:95:64:FE:32:D8:C0:D0:C9:36:BE:71:6A:EA
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 0197B58DC590DEB6DB7F8166E572B9753669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
Manifest number: 14F4
Signing time: Sat 28 Jun 2025 08:00:56 +0000
Manifest this update: Sat 28 Jun 2025 08:00:56 +0000
Manifest next update: Sun 29 Jun 2025 08:00:56 +0000
Files and hashes: 1: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: c2+3kcpkCpXSpI34H5DZcwqGbkA9X+wUpFARKizsEKU=)
2: YrgeNV0Q3t4Xw5uBv1-S6YoZvb0.roa (hash: j80OYLZ1mn+7VVYJkW8xMNJr5ib6X+eHYr4UT4vddFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8d:c5:90:de:b6:db:7f:81:66:e5:72:b9:75:36:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: Jun 28 08:00:56 2025 GMT
Not After : Jun 29 08:00:56 2025 GMT
Subject: CN=09e657d4094af19564fe32d8c0d0c936be716aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a6:6c:26:3b:e5:97:3d:63:25:1e:58:38:cd:
d3:ef:de:cd:3b:71:f0:99:ec:f5:2c:76:29:37:a7:
03:b8:d3:0d:e1:7f:13:89:e1:e4:a7:97:5f:97:d7:
46:52:04:70:0c:06:79:0d:d4:19:75:35:ea:cd:fa:
ca:1a:6f:38:d2:81:03:03:a5:a7:61:7e:4e:9c:31:
96:0b:dd:4e:b3:94:5a:03:0c:a2:db:ad:e0:47:51:
4c:01:1a:37:bc:9e:6b:16:64:b5:56:b0:13:5d:d5:
69:66:74:31:c4:d2:dc:3b:c4:c4:49:05:f8:e2:2b:
e7:00:94:5d:5a:86:60:9b:19:5d:a6:db:0d:34:5d:
da:ad:70:89:90:a7:87:3c:0a:85:ea:0d:10:ff:61:
6e:c7:31:65:78:c8:33:80:bf:ab:01:d8:98:34:e7:
30:10:a5:cf:38:47:8e:91:de:16:05:f6:2d:97:90:
78:6f:54:22:a3:2a:38:26:d1:f3:ab:47:c9:33:c3:
a4:2c:52:23:1f:f6:41:17:39:14:0b:0b:ad:09:15:
4f:50:6a:1a:13:51:77:d0:8a:78:48:aa:15:05:77:
40:7c:c7:50:b8:80:52:53:a7:de:4d:12:de:cf:0d:
a8:d6:8d:00:fd:ff:f9:e5:9e:26:fc:02:15:a4:a2:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E6:57:D4:09:4A:F1:95:64:FE:32:D8:C0:D0:C9:36:BE:71:6A:EA
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e8:69:c3:ff:7e:7f:21:d6:44:78:1d:ed:d4:73:82:29:8b:
0a:f1:44:d0:6a:7b:9f:93:22:91:c8:b4:09:e8:a3:a6:26:48:
54:5d:24:ab:7a:c9:af:97:70:9b:0c:8c:38:e5:f2:58:03:6a:
3b:37:43:15:3d:73:29:cd:9f:61:e6:f4:d5:81:0b:21:3e:0b:
28:bf:4f:1f:41:d5:a8:56:40:9f:32:1f:ff:88:27:4a:15:18:
50:e4:d2:b3:7a:03:44:d4:f9:0c:ce:c7:40:8e:d6:51:de:eb:
9f:3b:a2:84:2e:e2:b4:31:6d:d9:f7:8f:fe:65:f3:57:f0:a1:
45:1d:14:3f:a9:24:4a:11:7e:94:bb:47:70:9b:ab:fb:4c:9f:
2e:c5:a0:d2:bc:4c:73:ae:69:d4:fb:02:fa:a7:31:57:c6:65:
66:e3:53:11:14:0e:09:58:be:51:e3:55:57:e5:4f:a8:87:e9:
4b:af:b3:a8:41:16:36:68:33:57:42:49:61:4d:79:36:56:80:
93:8e:6a:e5:10:fc:65:0f:e1:99:27:17:29:0a:79:45:05:89:
3d:e7:c1:a1:26:47:0d:6b:4d:04:af:6f:b3:c6:4e:95:bc:00:
50:67:47:0b:37:ab:78:68:ce:0f:2a:4c:2b:10:65:f5:7b:2f:
83:3e:37:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:37 2025 by rpki-client