Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier: vY8ObrVHaNXnEmE5hmsQ9VhUNzu7j39l600bozsXQhQ=
Subject key identifier: 30:F9:DF:6C:6A:36:FE:F4:AB:6A:44:D6:BA:A2:B6:35:1F:82:70:32
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial: 01967868B97A0D696E57C08EC288DECB06CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number: 0542
Signing time: Sun 27 Apr 2025 18:00:51 +0000
Manifest this update: Sun 27 Apr 2025 18:00:51 +0000
Manifest next update: Mon 28 Apr 2025 18:00:51 +0000
Files and hashes: 1: Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa (hash: uO7pu6+EQ/hXwHNJ2EqENUuB+uo9LMGBRXK6r0igHMI=)
2: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: rGRAu/pGwkVR/V5tPdELTT7+IA3v8BMEpgT3rkegdWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:b9:7a:0d:69:6e:57:c0:8e:c2:88:de:cb:06:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
Validity
Not Before: Apr 27 18:00:51 2025 GMT
Not After : Apr 28 18:00:51 2025 GMT
Subject: CN=30f9df6c6a36fef4ab6a44d6baa2b6351f827032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e1:e1:a4:e9:f1:71:a2:e8:4c:e1:11:24:3e:
29:50:0e:05:49:40:e3:90:0a:ed:a8:a4:a1:f6:39:
bc:37:29:24:be:a0:c6:db:6d:a3:63:99:89:70:03:
62:bc:f4:12:71:04:12:f0:28:dd:5f:7f:c2:c7:1b:
5a:9e:d3:5d:01:40:f3:72:c4:9c:ca:7a:75:00:31:
96:d9:d1:d3:54:d9:28:23:b1:fb:3a:06:1d:6b:04:
ba:e3:f9:19:b7:e6:12:90:47:f8:18:1a:09:18:49:
26:a1:ae:db:aa:a8:3b:bd:f1:a6:15:45:c3:a9:a3:
9a:84:96:40:33:65:b7:31:6f:7b:17:51:70:f5:6c:
96:ba:c5:ab:83:9a:30:0e:3f:dd:8a:ef:52:5a:d9:
2e:0f:85:c4:33:61:18:78:52:d7:77:35:b5:bf:97:
a3:de:d0:0e:97:55:c0:bb:e8:ff:4c:de:f8:34:9c:
11:52:cf:b8:05:f1:9e:45:93:f1:e2:b2:1c:c1:cb:
0e:ea:0e:9e:4a:92:e5:c1:ea:1e:9c:3b:51:da:74:
33:27:0b:1b:45:28:17:4d:ca:03:ae:1f:9b:d9:be:
69:d1:0c:82:77:51:64:1c:61:60:fd:94:a1:5e:38:
67:43:32:6f:16:cb:dc:71:60:d2:95:09:54:9f:74:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F9:DF:6C:6A:36:FE:F4:AB:6A:44:D6:BA:A2:B6:35:1F:82:70:32
X509v3 Authority Key Identifier:
keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f3:af:7c:d7:76:c5:6b:04:ab:ce:8c:d7:15:f5:bb:26:d6:
9b:f2:21:d6:48:98:e8:2f:fd:39:9a:36:b8:72:2b:0d:5b:b3:
39:94:74:30:27:e7:d4:02:07:3d:d7:ff:fe:c8:df:dd:32:a4:
60:99:88:f1:79:e8:40:46:01:f7:6b:22:e5:b1:ed:e3:8a:01:
b4:f0:0c:ac:57:c8:1c:e8:97:df:29:f5:fd:95:52:6c:08:55:
c7:40:35:ab:7d:92:c1:cf:05:50:37:37:be:d3:87:e5:65:8d:
83:d8:2f:7a:06:12:21:05:b1:8a:d4:b5:6b:bb:78:c6:fc:28:
d1:03:57:ab:12:8e:7b:28:70:2b:a2:86:c5:1a:d8:53:54:a6:
ce:e3:c4:bc:9d:6f:17:99:bf:a1:1b:8f:4d:88:07:c5:bc:6a:
53:39:e4:b9:42:e7:9f:8c:6e:c6:fd:8f:76:64:f8:bf:01:3d:
54:63:1d:23:9a:14:31:0b:87:db:86:18:0c:01:1e:66:bc:f0:
30:44:08:39:25:78:5f:82:5d:f5:45:9a:a3:48:68:f9:8c:79:
bc:b8:d6:8a:ce:99:c2:c0:32:d7:08:d5:6c:a3:14:17:c1:29:
89:8b:8d:f2:20:6b:cd:87:3b:e6:a3:86:a6:5e:d2:4b:30:40:
30:e1:76:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:19:07 2025 by rpki-client