Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json)
Hash identifier: FmJIoCMNQEfoYCEmM4Fic8xZV8Q7nv6v5rDkyXEj3VA=
Subject key identifier: E3:B9:91:47:BE:93:6D:0B:78:81:DF:AA:EE:24:BE:A0:69:A1:FB:53
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 0196C6160D87B6AF642CD4436F59FEABFAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
Manifest number: 1478
Signing time: Mon 12 May 2025 20:00:56 +0000
Manifest this update: Mon 12 May 2025 20:00:56 +0000
Manifest next update: Tue 13 May 2025 20:00:56 +0000
Files and hashes: 1: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: s0CKmgDALxqZ3eUHwHXSvFjSifcjclpAjCaew3y7liE=)
2: YrgeNV0Q3t4Xw5uBv1-S6YoZvb0.roa (hash: j80OYLZ1mn+7VVYJkW8xMNJr5ib6X+eHYr4UT4vddFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:16:0d:87:b6:af:64:2c:d4:43:6f:59:fe:ab:fa:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: May 12 20:00:56 2025 GMT
Not After : May 13 20:00:56 2025 GMT
Subject: CN=e3b99147be936d0b7881dfaaee24bea069a1fb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:37:ab:1a:64:ca:f1:11:15:b8:8f:13:ba:
b7:d6:45:77:ce:3c:8b:63:8e:f0:50:5d:28:63:f8:
2d:da:d4:d4:76:6f:27:cf:91:10:32:7a:54:91:88:
a0:48:1f:16:74:c1:b3:13:5d:4c:6f:f1:6c:58:3d:
dc:58:77:35:2d:3f:c3:cc:d7:d9:b8:cd:ee:02:6f:
ab:c1:77:e4:56:b9:75:d3:32:94:5e:18:cb:f2:dc:
09:68:11:25:68:ca:81:00:c1:a1:fb:5a:fa:12:0b:
be:3c:77:0a:17:05:b8:d5:a8:c3:cb:ee:e2:9a:11:
94:d7:6a:97:14:41:ee:ca:e6:5e:fe:84:96:36:90:
3b:e5:13:1c:c7:a7:d6:aa:d0:b8:4b:20:39:00:cb:
00:f0:d3:c2:9e:6c:5b:18:63:e2:b7:10:bb:0a:b0:
f2:67:06:b2:43:24:eb:07:1f:0d:96:f4:d8:0b:70:
ee:43:b5:81:db:04:ef:4e:84:a7:95:95:fa:d5:da:
cb:40:a1:a1:48:d0:60:75:d3:96:34:76:17:0b:1c:
5c:8c:25:63:a1:ae:65:92:ba:ef:97:2c:95:b0:19:
41:21:21:fb:2f:7b:f4:c0:b7:9c:cb:75:11:ec:da:
29:a7:c2:90:a3:80:88:0d:84:e5:e7:9a:83:d1:e3:
c1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B9:91:47:BE:93:6D:0B:78:81:DF:AA:EE:24:BE:A0:69:A1:FB:53
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:31:93:5c:3d:1a:64:ca:7d:9c:17:c4:b5:f4:3e:d9:a9:81:
5e:bd:3a:34:47:5e:5c:8c:4a:fb:1b:fc:95:f9:df:e9:e8:ee:
1f:58:5f:4c:e1:df:c6:77:62:d5:d5:36:fa:ef:43:80:af:68:
3d:7e:26:74:3d:d8:59:dd:43:f3:5b:07:a9:25:9b:21:d9:45:
de:07:8b:da:ea:91:aa:a8:da:ed:4f:e1:42:1f:d3:99:b8:9b:
17:20:84:0f:15:82:84:3f:76:3d:89:14:ee:7f:a7:2e:1d:96:
00:8f:a4:5e:f6:31:bc:fc:4d:06:27:91:96:fe:f3:f3:d2:9f:
f2:19:b8:18:97:67:36:fc:e2:84:cf:e4:12:78:ee:7f:1b:b8:
f8:b3:5b:4a:dd:47:80:4d:ee:ea:df:22:a2:d7:4d:64:d1:73:
82:f7:c2:a6:36:98:5f:1c:15:43:29:56:2d:10:be:15:df:49:
3e:e9:1b:54:1e:71:ef:40:73:2a:5e:b5:e6:7d:19:ae:1c:3a:
51:97:93:c5:8a:e4:d5:46:4f:ef:2c:88:37:70:9d:1b:7e:43:
d6:41:65:9b:97:d8:de:0b:56:98:bd:39:ea:54:59:e4:92:fa:
8e:12:49:10:6e:a3:a2:fe:d5:de:f8:ed:e9:cf:6b:c6:8b:3c:
9e:ff:88:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:44:55 2025 by rpki-client