Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
File: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft (raw, json)
Hash identifier: Ze76eV6jEzY2cw1KsFaOFYoGlNxOFuhGmH749Cjpz5E=
Subject key identifier: A2:3C:CE:5C:80:1F:5F:D0:38:9B:67:39:61:88:65:06:16:E0:84:2B
Authority key identifier: E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
Certificate issuer: /CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Certificate serial: 0197B74515893280B244E0C8EC3684020915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 16:00:47 +0000
Manifest this update: Sat 28 Jun 2025 16:00:47 +0000
Manifest next update: Sun 29 Jun 2025 16:00:47 +0000
Files and hashes: 1: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl (hash: iuzITFbAMP2+X+kMWY/JQ5ghTzco344S/IJPFij8nc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:15:89:32:80:b2:44:e0:c8:ec:36:84:02:09:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Validity
Not Before: Jun 28 16:00:47 2025 GMT
Not After : Jun 29 16:00:47 2025 GMT
Subject: CN=a23cce5c801f5fd0389b67396188650616e0842b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7a:82:8c:09:7f:6d:8a:9e:a5:81:44:f7:c2:
d2:3b:1f:47:70:36:45:27:8e:93:ec:b0:8e:d7:a1:
0a:5b:5e:2a:d0:e7:19:83:b1:7b:4c:3e:d1:d9:93:
53:6d:99:6c:a6:89:00:dd:c2:6f:fe:8d:2a:c0:ef:
f2:50:5b:41:6f:86:41:e0:63:04:e5:5d:65:ef:1b:
68:5e:21:0b:3e:17:27:f0:da:9e:aa:00:27:18:ba:
b4:3e:72:cb:d5:74:01:00:31:6b:dc:f4:96:67:98:
39:95:f6:f5:01:09:7a:16:5b:9c:70:05:89:b4:cc:
45:ef:46:66:cb:6e:da:be:fa:32:a6:58:18:e6:f8:
4d:0a:df:7d:f3:93:3f:9e:0e:de:79:d7:f2:3b:9b:
b7:6e:0a:08:df:e1:1e:d8:92:14:a6:4a:fd:97:3c:
47:f4:da:3b:3c:2a:c2:96:71:78:ae:34:ce:e5:be:
fb:43:08:24:eb:e7:43:03:94:72:c2:ef:e4:1d:71:
bd:f9:b4:85:a6:6f:12:8e:69:88:5a:b1:d2:a8:e4:
7f:b7:ca:2c:12:44:1e:41:be:9b:6a:00:0c:8b:e5:
e6:59:3c:34:d0:ab:fc:12:90:eb:d5:d3:bf:2a:79:
2c:d9:ef:5e:97:d0:9d:03:2a:5c:11:a8:27:cc:bb:
02:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3C:CE:5C:80:1F:5F:D0:38:9B:67:39:61:88:65:06:16:E0:84:2B
X509v3 Authority Key Identifier:
keyid:E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:63:dd:d8:77:f3:31:d8:cb:65:04:f8:b0:98:61:19:37:fd:
a8:2c:c5:6c:ad:79:61:c9:5e:9e:0b:61:2b:60:dc:50:af:e5:
d3:76:42:c3:24:29:09:b3:cb:1d:be:d2:b0:1c:87:db:c1:82:
55:2c:c5:21:a1:87:83:25:31:12:c3:bb:21:0b:fe:17:19:fc:
ef:76:60:a0:50:00:43:ed:57:86:21:04:de:01:5f:6b:c1:13:
19:98:1f:18:c1:70:29:ee:69:6b:14:eb:09:3d:d0:c9:5e:33:
d9:00:52:6e:e3:16:b3:a9:65:f2:83:7b:bd:2e:3a:d1:26:1b:
81:3b:10:e0:4d:8d:32:56:ad:ed:43:7a:7a:d0:cd:1c:66:2a:
80:c4:eb:ee:d6:95:f0:54:c1:9c:48:f6:71:e4:cd:bf:4b:33:
55:70:50:12:c8:52:24:8b:5d:13:f7:e8:66:b6:88:d1:01:91:
b2:af:4e:97:16:37:f7:f4:d3:31:80:3a:7c:77:bd:b2:e8:a9:
0b:af:15:e5:86:a1:fe:22:5a:aa:d1:f5:55:a9:cd:2d:5d:48:
91:d2:26:6e:6c:9d:a3:e8:6c:a0:b6:5f:2c:16:bf:d1:fc:32:
4e:44:26:e1:96:01:ea:41:59:f7:db:0e:16:15:0b:30:22:11:
8c:86:9a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:56 2025 by rpki-client