Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json)
Hash identifier: 6O49gXQ8zPXyQU1mMmSEnHBfQHI1AGk24zd0nbStxAQ=
Subject key identifier: C0:5B:35:28:75:10:6B:4C:A6:20:EB:30:B3:53:C2:42:99:37:32:45
Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac
Certificate serial: 0197B6A1FF8281526193B3BA43731AD339F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
Manifest number: 08E7
Signing time: Sat 28 Jun 2025 13:02:39 +0000
Manifest this update: Sat 28 Jun 2025 13:02:39 +0000
Manifest next update: Sun 29 Jun 2025 13:02:39 +0000
Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: pu8lXKRJDOOupqbyofqWDItOV9durgMZcovi/Vg7NiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ff:82:81:52:61:93:b3:ba:43:73:1a:d3:39:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac
Validity
Not Before: Jun 28 13:02:39 2025 GMT
Not After : Jun 29 13:02:39 2025 GMT
Subject: CN=c05b352875106b4ca620eb30b353c24299373245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:e5:5b:43:e8:35:04:66:a2:5c:b9:84:71:
5f:c2:d1:d4:5d:79:c3:fa:97:0d:83:0d:26:43:bc:
bf:88:c7:5a:b1:4b:90:6e:07:c3:5a:1d:32:a9:68:
ab:e5:41:77:4b:3a:75:2d:91:b8:97:04:b1:6c:da:
fc:85:b9:20:74:16:9d:b5:e8:cf:2d:c2:8d:11:f8:
61:40:fd:02:8a:9f:63:3a:13:ff:d9:90:e2:4b:fa:
ee:6e:63:3f:83:d7:28:ce:18:66:c8:3e:0e:62:1b:
9e:d6:18:d8:13:b0:3b:6e:c4:89:df:af:8b:64:0b:
bf:e3:0e:d4:86:ef:bd:ac:de:cd:71:b3:3f:a1:b4:
2d:bf:c4:4b:94:30:4e:ed:1d:45:13:2a:82:db:ea:
b3:6d:47:91:ff:16:06:6b:3b:67:52:0a:4c:02:4e:
b2:fe:1c:96:34:bc:cd:d1:d6:93:eb:ae:e0:35:4d:
bd:00:2b:23:43:30:9e:3c:88:fc:2f:ad:e2:12:cf:
a5:ab:dd:e6:9a:39:14:dc:70:ef:0c:5f:39:03:68:
2e:b0:82:8d:47:54:4f:64:6f:7a:73:8b:0f:8b:74:
94:35:1d:04:7c:f6:28:99:c4:4c:c2:2c:bf:49:c7:
c4:05:50:89:32:8f:a7:2f:f5:fb:30:35:ec:d2:04:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5B:35:28:75:10:6B:4C:A6:20:EB:30:B3:53:C2:42:99:37:32:45
X509v3 Authority Key Identifier:
keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:37:54:64:d8:dc:4f:1e:d9:3d:8d:80:6d:bc:54:f2:34:c1:
fc:4b:17:51:e9:a5:e8:63:9b:e6:8f:c6:30:72:6c:b4:b8:16:
79:cd:74:86:24:39:e4:80:d5:72:f7:4c:50:52:97:e6:21:ed:
c9:b6:66:53:9c:78:d4:e4:88:d8:c5:7b:7a:5c:a9:7d:36:ba:
df:63:1d:d4:30:00:de:58:d0:6a:a9:a0:5f:43:67:23:d6:1a:
09:70:df:25:0a:22:e0:ff:e9:09:ea:65:32:68:bc:7e:33:fa:
e4:50:ce:cb:4e:eb:0f:e9:7e:93:97:1c:b5:16:5c:9b:fb:45:
d1:8b:49:50:00:09:ff:a8:c7:0c:63:1c:ca:98:b2:9e:7a:49:
57:de:49:f0:fb:73:be:53:13:45:d4:96:13:d8:27:09:25:ac:
1f:57:49:2b:f7:ca:8e:9b:a3:fa:5d:eb:62:2e:39:27:35:23:
a4:b9:e9:b1:dc:c9:a9:fe:84:4a:6f:ff:a3:9c:1f:29:0c:dc:
91:80:bd:46:fb:42:59:17:86:cb:41:02:58:1b:33:74:a7:c3:
a7:7c:43:c2:4d:8b:9c:03:13:2c:35:9c:50:ca:9d:7d:ba:86:
fc:a6:5d:57:ef:bd:07:27:51:a1:9d:5c:1e:0a:03:d1:48:e3:
c6:cd:8d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:55 2025 by rpki-client