Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: j+nYI24kGec6HK98Zi1d6DmHpnKBULHGavcsBNsnN4s=
Subject key identifier: 15:5D:C2:A8:2B:33:34:3E:C5:AB:10:C0:18:5B:87:84:5D:B5:BC:87
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 0197B5FC27B81469DD9B18F5464D967DD2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0AD7
Signing time: Sat 28 Jun 2025 10:01:30 +0000
Manifest this update: Sat 28 Jun 2025 10:01:30 +0000
Manifest next update: Sun 29 Jun 2025 10:01:30 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: 0lmalvqPVYwdapbFkaw1X3Yp1h6PvsGluUK39VoH+O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:27:b8:14:69:dd:9b:18:f5:46:4d:96:7d:d2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Jun 28 10:01:30 2025 GMT
Not After : Jun 29 10:01:30 2025 GMT
Subject: CN=155dc2a82b33343ec5ab10c0185b87845db5bc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:e7:f1:87:4d:f5:5e:88:5f:ce:2f:a9:ee:
01:2d:d5:b8:f8:26:b0:d8:05:8d:af:79:eb:ce:21:
e8:b4:cd:ca:b2:71:20:cd:12:eb:4a:4e:a2:30:d2:
09:df:58:3c:a5:90:5b:1b:15:91:33:39:7b:1d:48:
91:85:10:1d:46:db:8e:5b:37:55:85:21:dc:ee:99:
a8:35:3d:50:55:0a:eb:36:4d:f4:24:20:47:9f:06:
3e:04:a8:d7:84:13:f4:7d:f8:61:1d:75:16:7e:11:
9a:be:b2:6f:ad:e3:4e:1c:6b:88:5b:a1:85:a3:b3:
b3:61:1d:56:9d:2a:88:b0:c6:a7:44:c6:8f:64:a4:
49:0d:34:ad:29:fc:ba:23:47:dc:ce:3a:b3:53:2f:
b2:bc:86:f6:32:21:3c:68:fa:72:71:10:d5:56:6c:
7b:99:fe:e1:78:eb:fe:b3:79:64:7a:e4:91:42:a5:
da:c6:af:06:b2:ef:f0:af:57:b4:8e:4d:e7:3e:d7:
4b:fe:03:cb:2d:ee:ab:be:82:5f:5d:01:6f:64:3b:
e3:0a:72:ed:d7:5f:d0:81:58:b7:60:15:2d:40:89:
94:89:0d:21:79:37:8e:42:f9:0f:e4:c4:9f:a8:a4:
49:c9:2e:b6:6c:21:e9:79:4d:34:b6:da:6a:40:27:
b7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5D:C2:A8:2B:33:34:3E:C5:AB:10:C0:18:5B:87:84:5D:B5:BC:87
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c8:be:18:49:41:aa:6e:31:b4:5c:24:9b:58:0b:17:54:6c:
68:16:7e:04:2a:3a:c7:57:ee:53:a6:8a:13:97:7e:e0:bd:0a:
f0:3a:cb:30:32:67:c8:be:1f:ed:bb:88:8b:f3:f1:78:21:5e:
3e:07:c3:80:87:e3:ca:a6:63:f6:87:f5:bd:ad:4f:3b:a3:56:
65:db:5e:ca:c7:59:40:05:4f:91:e8:ca:59:4c:6c:92:f8:31:
2a:6a:2e:19:3b:b8:b2:a7:98:d6:a1:ac:3b:7f:cb:82:99:4a:
aa:5f:b2:9e:34:ad:c6:0d:b3:9e:8b:b7:70:8f:0c:3b:e2:a3:
3f:0c:2c:ea:71:f9:eb:e9:a0:ba:c2:23:47:09:cf:15:a5:d0:
12:3b:db:89:d1:c0:3d:55:6a:60:3f:54:fb:79:97:2a:fa:8a:
f9:c8:fc:18:2d:7d:1b:b8:75:db:d5:47:0c:d7:4f:e5:16:95:
f4:0a:69:0f:e7:e9:2e:7c:99:7c:13:95:a1:53:a3:b8:9a:ea:
8e:01:27:03:2b:ec:cc:69:2a:da:62:6b:7b:69:b2:90:42:2f:
c1:10:3e:ac:d5:80:70:c5:b8:97:a2:c0:2a:08:b4:80:58:22:
a0:6b:ef:c8:f6:a3:c1:73:e7:0f:01:0e:79:dc:4e:3f:80:f0:
17:5b:01:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:43 2025 by rpki-client