Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
File: 5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json)
Hash identifier: mPh7dedeGfC15WfN6h0eeN/QMShyh2OUynUEZi9G0cY=
Subject key identifier: C8:01:B5:9E:03:E0:C8:B0:30:49:EF:2F:F6:2A:F1:08:93:EC:2D:8C
Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
Certificate issuer: /CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Certificate serial: 0197B6A1C279ED2B9C56A439A37FD0E684DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
Manifest number: 0F30
Signing time: Sat 28 Jun 2025 13:02:23 +0000
Manifest this update: Sat 28 Jun 2025 13:02:23 +0000
Manifest next update: Sun 29 Jun 2025 13:02:23 +0000
Files and hashes: 1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: OuhHBNdLbNGfakQYVqRGB8udgvGJcc960UmcFSYkd1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c2:79:ed:2b:9c:56:a4:39:a3:7f:d0:e6:84:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Validity
Not Before: Jun 28 13:02:23 2025 GMT
Not After : Jun 29 13:02:23 2025 GMT
Subject: CN=c801b59e03e0c8b03049ef2ff62af10893ec2d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fc:c0:47:61:c5:7f:1e:f0:e0:b0:33:3c:c3:
7a:44:c1:40:e6:de:8d:33:b7:c5:7f:d3:33:66:12:
a2:8e:fb:b3:fa:92:68:85:51:9c:5c:d7:97:1e:5d:
2b:77:bb:1f:46:8f:95:fa:06:96:d4:70:a4:9c:59:
f4:08:8e:4c:c3:e3:a5:32:03:76:70:a0:c7:5e:4a:
22:82:7f:bb:18:0b:fa:33:bb:8e:64:c0:94:24:49:
ce:b0:bc:aa:5a:b2:57:c0:db:b3:02:96:2e:d1:41:
b5:50:92:7f:49:f0:70:48:87:cf:8c:c0:c0:03:23:
12:ad:ef:6f:86:47:2c:8e:83:c3:1c:62:7c:07:3a:
dd:bf:c6:6d:9c:ef:11:ff:0d:b9:68:63:44:e8:3b:
61:2f:95:70:e3:54:80:16:db:b1:a7:a9:37:ae:cf:
0a:01:4c:99:38:02:76:d6:9b:06:bc:75:c6:eb:ac:
d0:e9:72:06:1b:5e:50:94:c7:08:af:9c:eb:cf:8a:
79:78:5e:a4:e9:98:dc:bc:8a:c3:6f:7e:9a:95:bc:
8a:86:48:f5:9a:95:4a:de:b7:3a:22:5b:0e:65:d7:
0c:77:27:46:90:1b:8e:a4:2a:ad:77:50:37:ad:88:
f2:96:dd:ca:e9:70:b4:f2:f4:ab:d0:7a:ad:69:3e:
6d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:01:B5:9E:03:E0:C8:B0:30:49:EF:2F:F6:2A:F1:08:93:EC:2D:8C
X509v3 Authority Key Identifier:
keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:df:65:df:df:37:dc:b9:b8:34:4d:b7:f7:24:04:81:2e:29:
c8:26:6c:c8:b9:08:36:5d:3e:41:0d:f4:5a:2c:e7:d2:d3:f5:
1a:52:ec:47:ff:2b:e8:ef:56:d0:e6:41:fe:6f:f4:77:0b:02:
3d:f0:04:39:93:7f:98:29:05:b0:cc:d3:85:f6:0a:a0:34:b4:
61:88:3b:93:32:c8:d1:c8:b1:3a:b4:ca:6a:9e:f6:57:25:39:
45:0f:85:ca:5e:b1:97:db:83:0c:13:ab:f2:09:b4:f9:fd:10:
08:51:58:23:e0:8c:15:ca:c9:62:34:b2:82:b3:ad:2c:2a:51:
45:01:41:f6:5d:53:90:55:27:e0:04:70:a2:05:a8:b3:2c:bf:
5d:97:aa:45:52:f7:77:a3:48:fc:64:b8:bb:59:65:b4:09:be:
74:9c:2d:d1:0b:41:df:e2:b5:61:d9:79:bd:e1:89:39:5f:a7:
01:10:65:77:3a:30:0f:4d:36:c9:87:ea:ef:81:6c:48:41:c2:
91:e3:fe:dc:6e:46:e0:f3:23:50:e8:eb:e5:1a:0b:3f:d7:14:
44:4d:f2:34:c3:76:b7:a6:56:a5:a6:97:86:c6:d4:d5:9c:03:
f7:69:f3:91:b3:04:06:b9:7b:bf:78:62:1e:97:d3:42:50:86:
17:38:a6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:23 2025 by rpki-client