Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
File: l5SL1vKtFY5iT9jonp718b2x05o.mft (raw, json)
Hash identifier: Bf87Dx8Q4lhzNRpXGriNS/U3XFlFPaZ/2raerlxLfD4=
Subject key identifier: 86:18:32:B5:16:EA:0A:F0:56:C7:E7:E1:B5:1A:16:41:B8:14:07:0F
Authority key identifier: 97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
Certificate issuer: /CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Certificate serial: 0196A9F97441460016440F990F168E89BAC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
Manifest number: 0259
Signing time: Wed 07 May 2025 09:00:19 +0000
Manifest this update: Wed 07 May 2025 09:00:19 +0000
Manifest next update: Thu 08 May 2025 09:00:19 +0000
Files and hashes: 1: l5SL1vKtFY5iT9jonp718b2x05o.crl (hash: vO+P7/5Z9yByg/D0b+Vws54BC7eN7vw1dMWQdVyAK/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:f9:74:41:46:00:16:44:0f:99:0f:16:8e:89:ba:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Validity
Not Before: May 7 09:00:19 2025 GMT
Not After : May 8 09:00:19 2025 GMT
Subject: CN=861832b516ea0af056c7e7e1b51a1641b814070f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:cc:43:cd:94:9a:26:b4:c2:c3:08:b2:ee:
4e:ae:7d:e0:56:d8:61:8d:91:ec:35:1c:f5:3d:b8:
92:6b:ad:4f:d0:c9:67:9a:53:1d:eb:af:7a:67:74:
0b:09:85:3f:3d:66:6e:7a:ec:22:1a:18:b7:40:79:
bd:78:c3:21:59:b3:c4:d5:b4:e5:d3:3d:3d:76:2d:
3c:f7:e7:ec:ab:0b:8e:f6:b1:ea:e9:bf:e8:8b:b7:
a1:ff:2a:5a:3d:6b:84:9c:32:a0:9f:5e:f5:4e:a7:
af:d5:d0:d2:17:89:2a:8a:ac:d4:ba:20:6f:fd:6c:
c7:aa:ae:8a:44:71:7a:20:39:43:08:37:4c:73:23:
76:6c:fb:ab:d2:eb:65:46:7f:cc:57:6f:66:d3:f4:
1a:7c:28:ea:03:63:4e:11:4d:1d:ad:4c:f7:fe:b6:
a9:ba:a2:58:14:d4:c4:95:ba:32:a6:56:8a:ef:00:
5f:a5:16:57:b2:df:81:c4:90:a4:2a:70:42:af:15:
ae:eb:75:cb:98:5a:2d:9c:37:2d:d1:1c:ac:09:b3:
b7:d6:01:81:dd:63:6a:d7:a3:18:ef:e5:94:bf:80:
5c:f4:f2:5b:b5:2a:1d:d6:a8:ea:cd:5b:e1:d4:d4:
6e:47:45:e0:46:a5:2b:fd:0e:33:25:4a:7d:e2:ab:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:18:32:B5:16:EA:0A:F0:56:C7:E7:E1:B5:1A:16:41:B8:14:07:0F
X509v3 Authority Key Identifier:
keyid:97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9d:a9:8f:83:6c:6b:f4:64:76:a0:0a:f7:97:16:52:8b:7f:
56:06:f4:dc:30:2e:36:0d:21:9b:cd:25:ab:05:cb:54:a0:62:
22:d8:61:dd:0c:a8:06:42:ca:e5:f8:15:8c:f2:27:14:1e:03:
84:85:92:f8:d0:90:9b:9a:38:46:8e:b8:0c:4e:79:04:a3:86:
2e:02:c9:cb:74:7f:b8:3a:d4:6a:23:57:72:06:fe:7c:85:97:
60:9b:ef:8a:24:75:64:99:6d:60:12:59:f0:37:9b:55:d0:86:
5d:24:21:8e:f4:c6:75:1c:3f:66:e1:d6:97:83:2a:0f:0f:30:
72:94:85:97:36:f6:2f:d9:8d:1d:44:08:7b:57:e0:b1:45:30:
b3:c7:38:0e:e5:cf:f1:e9:ad:56:af:30:e7:35:50:47:47:15:
8c:34:d8:42:df:a7:97:65:7f:b0:9a:9a:a1:17:8f:01:4f:c9:
ae:85:46:2f:bb:82:df:b6:53:5f:32:f3:c0:a7:29:b5:6c:98:
5c:6c:01:52:29:0b:ec:be:29:7a:4d:c8:06:47:4b:bc:ff:e4:
da:a4:c1:3f:d3:9c:3a:a8:7e:b3:51:92:a0:f8:f3:ee:15:b0:
bb:6b:d5:58:68:01:fe:fe:3d:d4:13:e7:b6:b7:6c:81:80:d6:
4e:4f:60:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:53:46 2025 by rpki-client