Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json)
Hash identifier: ZuhCfr2kaXnzA0ZDnNtDn0HuCDVaaLgwGCcTjt2Nz+Y=
Subject key identifier: 6A:45:01:1C:41:AE:B6:50:58:22:CA:24:AB:CC:48:EB:CC:33:21:57
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 019691F1253541FE534CCC50279AE5294BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
Manifest number: 145D
Signing time: Fri 02 May 2025 17:00:22 +0000
Manifest this update: Fri 02 May 2025 17:00:22 +0000
Manifest next update: Sat 03 May 2025 17:00:22 +0000
Files and hashes: 1: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: A3L00YHnlC4ALffG3dbakFhG7h2ilbMUaFMoXaXIY5g=)
2: YrgeNV0Q3t4Xw5uBv1-S6YoZvb0.roa (hash: j80OYLZ1mn+7VVYJkW8xMNJr5ib6X+eHYr4UT4vddFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:f1:25:35:41:fe:53:4c:cc:50:27:9a:e5:29:4b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: May 2 17:00:22 2025 GMT
Not After : May 3 17:00:22 2025 GMT
Subject: CN=6a45011c41aeb6505822ca24abcc48ebcc332157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:79:99:f0:5a:cc:d8:d1:6f:7d:65:e9:03:d2:
3a:b6:96:84:71:06:11:f5:7b:20:e6:f9:b8:01:59:
2e:7d:48:78:88:90:48:6c:2c:91:7f:9b:05:83:db:
7b:77:12:d2:c3:fb:aa:84:0c:5d:80:00:23:b3:bb:
52:3b:a7:3e:9d:41:39:21:46:61:3d:b0:b4:0b:1d:
68:38:7c:cd:54:c7:c0:b5:4e:8a:3b:86:f6:18:7d:
3d:27:40:8d:7e:4a:13:af:34:d4:ef:a9:32:6b:ab:
bf:48:f5:eb:fd:f9:08:fb:db:26:9d:83:a5:90:91:
e2:9f:71:68:c0:3e:7f:97:74:74:df:10:0d:63:54:
78:10:c7:c7:60:42:f9:6c:cc:cc:b6:01:94:d4:23:
75:a8:c0:b2:d7:c7:b0:5e:52:19:55:cf:26:4d:6f:
6d:a9:c8:09:27:8a:d6:77:c9:87:e0:91:7f:47:d0:
38:a0:48:cd:ca:96:97:de:d5:ab:1e:84:28:39:94:
fe:09:63:6a:b6:a1:c1:88:ec:d1:a3:5e:b7:a5:1f:
71:f5:b5:c1:db:8b:75:24:a2:3d:64:05:34:d5:49:
9a:a4:80:79:b5:0c:a1:9f:e5:bc:79:33:8c:ea:a4:
12:6c:40:bc:fc:14:a7:3d:ef:55:01:c6:0f:f7:11:
10:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:45:01:1C:41:AE:B6:50:58:22:CA:24:AB:CC:48:EB:CC:33:21:57
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b4:79:01:bc:1f:00:a9:32:a3:2b:c2:3e:bf:ca:64:c5:a6:
31:2a:bd:8f:96:28:9b:cc:e4:ef:48:46:e4:06:3f:5c:ff:ac:
2a:d4:70:f4:81:a7:13:9f:00:a6:f1:34:a5:57:df:98:c2:e8:
b8:ba:e9:65:5f:44:cc:6f:a9:2d:9d:cc:07:fb:84:aa:29:f4:
b5:d7:d9:ab:36:46:2e:f0:5a:c9:ae:0e:21:0c:4c:11:38:51:
21:dc:0e:bb:06:eb:18:a6:6e:17:7c:dc:f0:fa:51:8e:80:21:
69:62:77:f7:52:75:06:16:f4:be:08:5e:e8:16:d7:4b:71:d7:
79:41:da:be:4c:aa:57:9d:ff:c3:50:7f:8f:2a:0e:d9:31:15:
ea:bf:13:6f:6d:3a:4c:6f:0d:23:70:23:2c:6c:36:b4:52:4a:
1c:c2:22:e2:8e:30:8f:fc:a5:a3:30:32:e4:f4:e5:da:80:35:
b7:82:1a:e8:80:c4:b4:3e:31:bd:86:8c:5e:c4:30:29:d0:14:
38:08:09:b4:86:0c:36:19:38:9f:77:b5:6e:e7:e3:05:03:f0:
f8:17:7a:d9:ef:af:50:2d:e1:3e:67:82:8a:f0:29:f4:45:bd:
4c:d9:dc:99:84:50:3f:e4:54:d5:f0:05:1e:8c:eb:5d:eb:eb:
84:b1:a1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:22:15 2025 by rpki-client