Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier: GvpaS00l/lQi8ZWvTYIICuVJWmQf3H84bgowxiEbTTM=
Subject key identifier: 56:99:13:9F:03:9E:3F:80:6C:63:93:03:13:C4:E7:2C:27:31:C0:B1
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer: /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial: 0197B70E6F875747204B9E438AF7585BF5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number: 0B8F
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: PreD7gzvRiEH2yr9BgBKr31d0pg16PAaYVRUZ6NJp8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6f:87:57:47:20:4b:9e:43:8a:f7:58:5b:f5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=5699139f039e3f806c63930313c4e72c2731c0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:73:95:6c:95:22:93:42:f5:58:16:e2:42:
b1:03:8f:4f:53:31:01:09:d8:6e:61:ce:d9:35:da:
2a:cc:2f:66:b9:7f:f3:25:d9:06:a9:81:0f:77:75:
d6:99:9d:0f:34:b0:6b:b3:8c:ea:f0:23:52:68:da:
f0:fb:00:53:6b:76:2a:97:6c:15:e8:f6:70:8b:18:
48:17:aa:34:af:dd:58:ea:29:4e:80:4d:d6:86:d7:
bc:70:ba:a7:ac:b6:3d:63:9a:d3:fc:4f:2b:2e:1b:
0c:cf:ae:dc:82:75:70:92:82:4a:1e:ac:5e:21:99:
15:ed:0d:d5:c5:2c:49:62:bd:24:45:19:23:fd:16:
07:c9:8f:8c:4a:6d:3b:52:5c:0e:e5:5a:ed:15:c8:
78:3d:57:3d:33:c7:2b:09:2d:2b:7f:bf:d7:b9:ba:
35:00:b3:c9:f7:9f:fa:2c:57:7c:7f:cb:e8:b2:6c:
8c:9d:16:4d:40:cc:54:ed:27:3e:a0:ee:06:4b:5d:
80:57:33:17:16:37:c4:26:b6:de:41:8c:ef:cf:e4:
6b:0a:92:5a:bb:dc:ed:a9:6b:68:f3:12:3b:91:a0:
9f:93:73:9e:c8:f3:ba:cd:ce:2f:b5:cb:8f:7e:da:
d1:5f:e8:85:49:3b:2f:53:f9:ce:87:bc:0f:84:9e:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:99:13:9F:03:9E:3F:80:6C:63:93:03:13:C4:E7:2C:27:31:C0:B1
X509v3 Authority Key Identifier:
keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:72:6f:e5:be:78:22:07:de:92:06:32:c5:66:70:db:9d:d7:
2a:3f:2a:42:c1:8a:bc:04:7b:fe:3e:74:a5:24:fc:2a:d9:78:
46:2c:72:09:ca:6b:cc:77:d6:09:d7:3e:8e:09:c6:22:20:cf:
e5:c5:e9:60:af:d0:da:49:89:f8:50:e4:af:9e:32:0e:e5:e7:
af:b4:cc:17:b6:8f:9d:d8:8c:10:9b:2e:19:b6:11:88:64:ef:
b0:d4:d9:b7:d0:fa:ca:a9:0a:8a:5d:a0:f7:63:18:e6:31:91:
d1:a3:19:b1:9d:39:69:05:80:ec:bf:32:75:ce:5c:0c:b3:f8:
3a:bf:86:b4:ad:f6:2d:0b:9a:0f:95:67:0f:d4:81:c5:08:32:
6c:1a:67:b4:0f:34:66:30:95:5f:5d:01:e3:d4:86:f8:f3:f5:
87:e2:6c:59:9a:c4:eb:89:89:68:9b:74:d0:80:b2:48:07:89:
e9:9c:55:9b:f9:cb:67:16:d0:15:79:02:e0:cc:6b:c3:53:51:
40:0e:57:57:c3:b4:2b:c6:e9:09:d5:48:2e:ff:35:a6:48:72:
66:1e:66:97:d5:20:68:b1:68:8e:b3:fb:9d:c3:bc:45:25:73:
62:6d:50:43:c5:a0:24:25:fb:dc:65:02:99:9c:56:51:ea:98:
7c:bd:29:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:49 2025 by rpki-client