Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
File: 5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json)
Hash identifier: 94+eHdaZXlu6wRutU1Odt/IAyfc7G7RSohSkER/5Qks=
Subject key identifier: 1F:01:5C:99:14:FC:24:96:8C:24:AA:71:B5:D1:27:F6:8B:7A:57:67
Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
Certificate issuer: /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Certificate serial: 0197B77C1625CDA6AA07A9A3216CDF2BBFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
Manifest number: 0259
Signing time: Sat 28 Jun 2025 17:00:52 +0000
Manifest this update: Sat 28 Jun 2025 17:00:52 +0000
Manifest next update: Sun 29 Jun 2025 17:00:52 +0000
Files and hashes: 1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: h2EX6fHnZz1XSwd0glNQ3NzCC3M8KbyeTHrdp6ip81U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:16:25:cd:a6:aa:07:a9:a3:21:6c:df:2b:bf:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Validity
Not Before: Jun 28 17:00:52 2025 GMT
Not After : Jun 29 17:00:52 2025 GMT
Subject: CN=1f015c9914fc24968c24aa71b5d127f68b7a5767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:a4:e2:7a:5e:d1:ac:c6:55:f8:42:ca:fc:
aa:4e:53:d8:1c:da:28:e2:7d:40:6d:fb:df:a8:5b:
50:bd:dc:e4:5b:7e:4c:ec:98:d7:6f:de:32:db:e0:
54:3e:35:ca:11:3e:f0:44:82:54:35:a8:18:a9:fc:
d3:20:6b:97:30:b7:ab:bc:37:39:32:3a:ed:5d:f4:
8b:41:7b:7d:8c:fb:c4:c0:d2:e9:94:3f:22:83:d8:
00:f5:92:6c:f7:37:68:8c:94:af:c4:81:e3:42:31:
a6:3c:bb:8d:de:7e:90:de:58:39:b9:2d:56:b8:cd:
d0:36:d2:08:e9:30:5f:17:28:74:80:dd:19:c3:50:
b9:1c:8d:dc:70:4c:fa:69:68:21:49:a0:c8:ad:e9:
34:60:88:ea:3c:8d:af:af:36:c6:7f:ec:2a:2c:f0:
17:8e:e1:df:3d:68:64:23:95:97:06:64:d3:4d:57:
6b:11:aa:5b:35:61:95:ce:b1:7f:cc:13:75:fa:b3:
3d:7a:c8:2a:31:da:26:4c:d7:75:0a:2d:98:b4:e8:
4d:23:2f:35:e5:b7:e8:cc:d7:b3:50:5c:83:15:47:
57:3c:0b:a9:17:b2:50:89:d0:5e:78:9a:ab:53:33:
a8:1b:67:52:31:6b:fd:66:82:8b:6a:35:be:68:ae:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:01:5C:99:14:FC:24:96:8C:24:AA:71:B5:D1:27:F6:8B:7A:57:67
X509v3 Authority Key Identifier:
keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f8:3f:4d:f5:23:45:70:6d:9e:ab:2f:7d:8e:1e:61:ef:d3:
07:61:01:a9:2b:9b:ba:6b:af:71:39:49:cf:8f:dd:2d:4a:fa:
e5:d5:89:c4:3f:02:40:10:29:14:42:50:9c:02:3e:bf:66:49:
04:fd:c4:c0:9e:44:d9:c7:cc:73:b1:21:89:cb:34:dc:79:5e:
ba:c0:27:01:3e:5e:8c:71:31:91:31:6f:f1:85:69:12:c4:4f:
72:64:d5:93:bc:9a:1e:40:0a:b2:85:25:81:36:05:e6:29:6e:
f1:10:99:b8:c0:b1:21:e7:c3:0d:10:08:61:a6:1d:9b:d9:d4:
73:a8:47:2b:82:19:42:93:85:11:5f:68:44:ab:60:f7:66:fe:
38:53:e1:fc:20:59:05:cf:d1:25:92:16:4c:8d:38:29:06:24:
07:1f:1d:b1:99:6f:73:b6:8d:4d:a3:da:86:4b:56:f3:50:38:
23:3e:47:68:35:b2:8c:15:3f:cb:1a:49:2a:95:e4:00:32:c9:
c0:55:b7:4e:8c:20:1e:0e:5a:79:8b:3f:10:ca:55:14:92:b2:
41:01:17:2f:f0:2c:11:fb:da:79:c3:d1:80:f3:4d:30:aa:2f:
16:70:10:b2:f5:5c:94:6e:a2:8e:08:e9:a3:bc:eb:f6:f2:fe:
b6:0f:74:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:06 2025 by rpki-client