Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json)
Hash identifier: OWekaw0OPJuM90+zB32ScOWBKyIqwEI9MKGcXOmYwQ8=
Subject key identifier: F8:EE:9B:B5:61:A1:0F:81:1B:F9:93:68:70:BD:7F:5D:32:A1:40:25
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 019872D000FCFC73947E32A3DBADF2091AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
Manifest number: 1556
Signing time: Mon 04 Aug 2025 02:01:31 +0000
Manifest this update: Mon 04 Aug 2025 02:01:31 +0000
Manifest next update: Tue 05 Aug 2025 02:01:31 +0000
Files and hashes: 1: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: rxZZOdY1VJm0uPxxS7lTUvkIlJGIbOEHX7ZBuGOCxLk=)
2: YrgeNV0Q3t4Xw5uBv1-S6YoZvb0.roa (hash: j80OYLZ1mn+7VVYJkW8xMNJr5ib6X+eHYr4UT4vddFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:00:fc:fc:73:94:7e:32:a3:db:ad:f2:09:1a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: Aug 4 02:01:31 2025 GMT
Not After : Aug 5 02:01:31 2025 GMT
Subject: CN=f8ee9bb561a10f811bf9936870bd7f5d32a14025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b5:20:9e:ba:d9:1b:8c:62:f8:d1:22:82:72:
6c:a6:12:07:5d:51:11:a0:c4:94:ee:da:bb:4d:9d:
72:3b:06:02:03:13:cf:09:8d:ed:37:b2:f8:4e:be:
ad:5b:f7:03:1d:bb:44:71:56:35:2a:82:56:01:db:
d8:cd:07:9c:88:55:30:7e:5e:28:89:3d:30:93:2b:
e3:8b:6e:10:e9:2e:a2:b2:49:3d:47:1c:a6:d3:4b:
fa:6f:55:03:57:22:74:a1:51:fd:e7:84:22:d6:16:
b6:18:43:fa:e0:a0:80:6e:91:83:fa:c1:b1:6f:5d:
96:da:57:74:73:51:0a:83:4f:81:84:c2:81:3e:6d:
40:c3:64:2e:0f:fe:41:e5:d7:28:26:53:5b:90:e2:
9f:c2:62:d4:e4:6e:ae:3a:92:5a:de:ab:ba:22:0e:
1c:47:3e:99:6b:d7:65:00:2d:6c:eb:d0:97:48:70:
fe:37:86:34:93:76:38:b2:92:3a:ec:14:a6:ef:52:
1e:0e:5a:e4:92:59:a5:6f:86:36:04:23:2d:4b:fb:
be:68:cc:7c:3a:b1:42:d3:87:06:05:44:7e:56:79:
4b:b9:ff:f4:5d:8e:fc:7f:61:9b:8c:8b:1f:f6:1c:
c7:58:e4:62:5f:1e:33:8e:6e:9f:59:49:48:22:1e:
8a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EE:9B:B5:61:A1:0F:81:1B:F9:93:68:70:BD:7F:5D:32:A1:40:25
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:21:d0:42:66:7c:bc:4b:0e:88:cc:15:72:09:73:74:b1:b1:
c3:51:dc:4b:54:18:cd:69:62:81:a9:62:80:40:af:fd:0c:5a:
8a:c8:88:82:b6:11:e9:64:78:02:b2:0b:49:86:c0:ff:9a:91:
33:dc:12:59:54:88:1c:68:03:62:04:d3:a8:0f:32:01:06:b9:
08:24:15:89:5f:00:c2:74:6d:49:79:d1:6a:fd:cf:c6:e7:e7:
f9:5c:a3:b2:21:7a:3d:03:58:23:94:d1:91:e8:e8:ab:33:9b:
5d:70:10:9d:c7:b0:07:05:29:4d:7c:74:4b:64:f1:f2:a1:71:
82:90:7c:1a:b6:41:a8:1b:04:c8:7a:f2:83:17:1a:33:5a:d4:
66:bc:6c:7d:be:61:19:18:8c:22:df:43:18:e4:f3:52:31:1e:
84:06:94:fa:e6:a7:19:bc:22:68:03:dc:60:34:c6:54:e3:36:
4d:97:cc:d7:07:83:2e:ab:3e:25:c2:9d:04:ec:ad:5e:21:f4:
e9:9e:f0:2d:f5:cd:58:72:2e:f5:57:d1:a6:08:50:83:c0:5a:
51:d1:8b:c8:c8:26:c7:da:5b:ec:29:2e:c0:67:88:0b:ae:a7:
c5:eb:62:5c:a4:ca:0f:81:fb:37:99:4f:c7:aa:5a:59:4e:38:
0b:12:f9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:26 2025 by rpki-client