Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
File: 5J1E2IEnX8osC2s_fs7i0iIUb9I.mft (raw, json)
Hash identifier: j6NETZJrGUP45Al5sPGDU8gcCITeK4kOI92+Udt/kyk=
Subject key identifier: 5D:C7:9C:00:92:D6:7A:6F:6E:D9:B1:20:C9:23:57:50:90:05:67:26
Authority key identifier: E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
Certificate issuer: /CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Certificate serial: 0197B745BE8A7CFD9AD76DFD8E430429F4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
Manifest number: 12DD
Signing time: Sat 28 Jun 2025 16:01:30 +0000
Manifest this update: Sat 28 Jun 2025 16:01:30 +0000
Manifest next update: Sun 29 Jun 2025 16:01:30 +0000
Files and hashes: 1: 5J1E2IEnX8osC2s_fs7i0iIUb9I.crl (hash: r//UgkrDCtWAyWLGi/NfpsdBmb2gnVgWaYjf4Adkk5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:be:8a:7c:fd:9a:d7:6d:fd:8e:43:04:29:f4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Validity
Not Before: Jun 28 16:01:30 2025 GMT
Not After : Jun 29 16:01:30 2025 GMT
Subject: CN=5dc79c0092d67a6f6ed9b120c923575090056726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:8e:ca:d5:64:e9:ec:35:a5:f9:ed:b9:27:
93:b3:d2:73:a0:66:67:ed:3d:e3:f4:8d:ad:06:7b:
c2:e2:25:3f:26:9c:23:9b:14:bb:e3:15:7e:b5:9e:
10:c9:d8:80:4d:95:46:aa:b8:30:ab:f3:f1:ee:04:
10:96:c7:f0:ae:c2:9d:c8:87:86:87:06:d1:a1:c5:
72:d8:de:b7:1d:8b:78:3a:62:54:d4:82:71:96:24:
93:0d:8d:63:0b:22:ed:6f:00:aa:08:bb:ba:1f:33:
2c:b9:06:af:ea:44:85:ca:52:7f:fc:41:9c:a2:20:
7a:ac:10:34:4b:fc:af:01:03:bd:fa:43:04:d5:06:
e1:7e:be:2d:1f:42:86:a8:0d:bc:8a:52:38:6d:38:
44:12:a4:5e:8d:04:70:9c:76:d2:fa:55:85:1f:02:
3f:f2:8f:c7:12:2c:ae:49:34:d1:90:df:2a:da:fb:
08:2b:9b:ed:5f:22:a3:50:48:28:18:b6:06:49:a6:
f5:a1:63:08:e3:53:05:fb:3b:9a:6c:aa:10:59:39:
c6:41:67:29:52:94:65:b2:79:51:d3:c8:32:6b:6b:
38:94:4f:40:a6:4b:88:f2:d4:15:09:bd:9a:dd:79:
f5:13:5b:41:94:56:0f:24:7b:7d:8d:19:63:15:73:
51:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C7:9C:00:92:D6:7A:6F:6E:D9:B1:20:C9:23:57:50:90:05:67:26
X509v3 Authority Key Identifier:
keyid:E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a7:99:02:df:8f:82:29:8f:b8:51:46:54:cd:16:2c:73:95:
46:f8:b4:7e:3f:ff:27:d2:9a:d0:7d:58:c0:57:84:17:a2:78:
d3:76:37:8b:f2:02:28:61:9b:8d:d3:b8:40:d9:94:01:bf:ef:
17:11:2c:46:d4:f6:25:5a:41:c1:5c:f7:31:07:90:59:7c:a0:
94:a2:70:63:cc:46:6a:6a:f1:c1:7f:43:73:df:93:1e:95:98:
25:bb:9f:1c:cd:07:83:32:78:47:5e:f7:57:ce:86:55:85:a1:
c0:cf:88:fa:01:74:ca:0a:2d:d4:63:eb:3a:80:27:5f:76:df:
91:d0:70:a7:31:d7:ce:ea:14:8a:c4:70:97:33:a3:31:19:e8:
4a:71:b9:ad:ce:c0:92:f5:46:20:7a:4a:8d:19:47:7d:d4:52:
69:b4:96:6c:23:98:b4:8f:83:8c:50:a7:2c:f2:6d:68:85:09:
16:aa:72:ef:e2:7a:b7:0d:f7:aa:f8:1e:a5:96:b0:c8:68:d0:
55:24:64:ad:83:3b:61:5f:c2:29:d4:af:79:ed:f4:1b:18:bc:
9e:fe:c0:ee:05:76:3f:c5:03:27:f0:9f:22:69:89:ff:25:36:
b9:f9:d4:19:b5:97:27:03:e8:25:82:81:0d:22:53:d7:8c:a3:
43:d9:94:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:05:17 2025 by rpki-client