Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier: xEmcQuC/wW+NQVvEeqURUjoN4g1cQ8xf+ptTmrO+ryg=
Subject key identifier: 34:97:05:A0:FA:30:40:F7:79:00:C2:D1:B4:31:EC:E9:2A:FD:A5:BE
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial: 0198744FD07AE114BD3513BDC1DF06C9746B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number: 0649
Signing time: Mon 04 Aug 2025 09:00:44 +0000
Manifest this update: Mon 04 Aug 2025 09:00:44 +0000
Manifest next update: Tue 05 Aug 2025 09:00:44 +0000
Files and hashes: 1: Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa (hash: uO7pu6+EQ/hXwHNJ2EqENUuB+uo9LMGBRXK6r0igHMI=)
2: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: k0NChZTTRLFiA6n65RgjxdoCxlTOR4gY+m71zTyad4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:d0:7a:e1:14:bd:35:13:bd:c1:df:06:c9:74:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
Validity
Not Before: Aug 4 09:00:44 2025 GMT
Not After : Aug 5 09:00:44 2025 GMT
Subject: CN=349705a0fa3040f77900c2d1b431ece92afda5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:b5:72:87:3a:53:4a:ee:78:e1:61:94:74:
b2:f2:df:be:ce:3a:cc:a2:b9:f4:8c:2a:27:e4:d3:
cd:82:c2:49:1d:fa:51:b7:82:c7:24:76:91:28:f7:
a2:31:02:d0:e0:66:ad:fc:5c:90:6e:bd:1c:fb:cc:
a2:98:48:83:2a:39:9a:18:1d:a8:21:22:a7:16:31:
80:fb:3e:dd:fa:26:46:b4:61:37:f0:f0:46:0f:0e:
70:83:a3:e3:4e:75:a5:da:66:96:80:ef:58:0e:7e:
ab:8a:18:a9:62:c3:d5:5e:ec:50:f5:bc:09:79:0d:
29:3d:28:cb:a9:40:5b:13:c8:54:86:d2:e5:ca:1a:
24:2e:84:22:96:30:4d:93:27:93:c7:15:c3:89:f5:
34:e8:a8:19:a3:e8:52:4e:b9:07:9a:b5:8a:7b:01:
a0:44:6f:9c:4a:97:27:88:c8:97:dd:b7:93:73:a8:
f6:ae:99:64:75:d9:53:0a:9b:94:18:85:2f:88:f4:
77:b6:af:58:bd:10:d6:90:0d:a9:b7:d8:4a:60:26:
fe:0b:24:6c:2c:15:aa:37:85:45:27:11:24:97:69:
9b:b7:d2:f5:9b:83:7c:88:ac:ee:9f:0a:05:6b:1d:
5c:e4:87:50:52:9c:0f:94:25:7c:a6:08:fc:2d:18:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:97:05:A0:FA:30:40:F7:79:00:C2:D1:B4:31:EC:E9:2A:FD:A5:BE
X509v3 Authority Key Identifier:
keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:61:66:e8:15:c9:96:98:b6:0c:f3:69:58:ec:ff:bf:5f:4d:
2c:ba:d9:45:a6:11:d0:f6:9d:50:c1:e1:0a:ed:a8:96:66:9b:
2c:50:9f:4b:35:38:39:b4:8d:29:7c:f9:89:e7:aa:34:39:17:
78:ec:14:f3:28:91:38:13:ca:dd:b1:cd:2a:77:de:90:c3:ff:
05:0b:19:98:62:a2:c1:e2:57:43:6e:00:f1:58:8a:0d:81:b3:
af:4b:02:89:aa:87:49:ff:32:61:5c:1c:0a:09:4e:b4:2e:c0:
d1:14:e3:1e:1a:8d:11:ad:37:30:2a:ec:f8:ba:90:5d:7d:2f:
e7:bf:1e:c2:7b:d3:85:3c:13:e2:7c:33:d4:b4:5a:26:aa:a5:
aa:c0:a9:3b:99:e7:89:16:49:b6:fa:11:c4:4a:1a:71:6c:9a:
8f:61:95:dc:3f:50:72:9e:e7:39:12:21:8e:0d:f0:73:8c:12:
9b:55:34:f0:a1:42:3e:c4:d0:25:2f:71:34:1a:8b:d0:14:8a:
78:15:03:e5:99:eb:82:a1:d5:e2:24:a8:41:8b:3c:cb:0c:9e:
0f:af:c1:45:33:b8:2a:03:c6:81:db:8b:cf:b8:9a:9a:88:ed:
4b:5e:a7:0e:fb:fc:8c:e8:a6:cd:a4:3d:67:76:46:fa:a5:07:
d0:2f:7d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:16:10 2025 by rpki-client