Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
File: g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json)
Hash identifier: sdisoN28V0pXFWc6M+QJLAl+hyKX5Hlzwim2ZObTq50=
Subject key identifier: 0E:CF:42:83:F9:7E:96:58:0C:D0:9A:DF:A3:C9:B9:10:29:3E:82:A0
Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
Certificate issuer: /CN=83924d22253dd6b78699bc5d0a011027913e5f70
Certificate serial: 0198D4A81E3D6372199F8C4398B728E83293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
Manifest number: 0580
Signing time: Sat 23 Aug 2025 02:00:43 +0000
Manifest this update: Sat 23 Aug 2025 02:00:43 +0000
Manifest next update: Sun 24 Aug 2025 02:00:43 +0000
Files and hashes: 1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: 10rDJgDIMc6irh88TpYgkRxLxdo8kgaRx3zJO9oNu/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:1e:3d:63:72:19:9f:8c:43:98:b7:28:e8:32:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70
Validity
Not Before: Aug 23 02:00:43 2025 GMT
Not After : Aug 24 02:00:43 2025 GMT
Subject: CN=0ecf4283f97e96580cd09adfa3c9b910293e82a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:02:b0:1a:b5:5e:3d:ab:94:20:d5:69:13:ec:
23:36:25:42:5e:f7:1a:ff:ab:45:30:7e:50:21:3e:
b3:74:5b:8e:f1:61:3e:b0:23:62:dd:a3:a6:73:ef:
99:51:fb:ef:7f:9c:a6:bf:11:15:e9:03:7b:4f:d8:
d2:41:cc:f2:db:3d:c9:33:5c:0e:17:1e:1f:a2:c4:
f4:96:bc:2f:00:ab:c5:a4:1a:cf:c5:03:ad:a2:76:
a5:76:2c:8f:5d:9f:79:4c:96:e3:98:4d:7f:73:9b:
fd:fb:a2:97:e2:21:09:b5:42:f7:61:83:05:c0:2a:
ac:04:8b:71:ba:5a:1a:48:cc:76:cf:29:d5:32:cb:
f1:dc:03:70:16:01:8c:8d:16:f2:bd:f7:ca:b8:34:
ac:3d:92:d7:6a:cc:76:e2:92:b7:69:73:12:f1:a7:
d7:25:7b:2b:8c:7d:3b:8a:19:fd:bd:cd:a7:f3:a5:
97:f2:1e:0f:3b:3b:31:48:68:57:c0:aa:2f:37:22:
54:1d:22:52:ad:27:8f:bd:de:43:7c:74:9d:12:d6:
63:fa:62:a0:e4:c1:d1:40:bc:d7:62:ea:c7:99:04:
01:0e:67:2e:69:49:0e:37:30:39:09:58:09:ec:d3:
74:b3:af:b1:9d:4c:a1:05:21:4f:cc:e4:f5:0b:05:
21:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CF:42:83:F9:7E:96:58:0C:D0:9A:DF:A3:C9:B9:10:29:3E:82:A0
X509v3 Authority Key Identifier:
keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:10:05:e3:ee:0f:b2:9a:54:6a:54:fb:52:f4:dc:9c:fa:10:
c3:52:31:30:4c:7e:e5:ca:72:7b:90:13:b7:84:1d:47:f9:e3:
63:39:6b:2f:05:14:8f:3d:64:60:67:e7:2f:d1:e1:7a:43:09:
7f:3b:08:5a:69:d4:2b:f0:94:50:ff:c9:30:b2:7f:a9:ad:41:
2c:21:56:15:6c:78:a2:47:7b:3a:ca:59:60:84:a2:07:8c:2e:
93:d8:bb:96:37:6c:bb:38:30:92:c5:f7:60:e5:4a:80:37:3e:
63:60:64:0a:cd:96:9b:4d:e1:e3:d9:f6:1c:56:e1:8d:96:cc:
98:a5:85:4e:1c:91:2c:b8:a4:71:ea:dc:18:4c:cf:62:92:6e:
f7:bc:6c:3a:59:d6:68:40:a5:ad:d8:18:75:aa:d3:f1:51:c4:
1a:99:af:01:dd:30:83:97:fb:20:eb:3e:41:8f:ba:e8:7f:d5:
bf:1e:97:63:3d:bc:86:35:28:44:00:d1:8f:d2:76:cc:fb:fc:
b6:a5:5c:49:05:2e:15:91:7b:cb:a1:8b:b6:46:ac:c2:4d:9b:
d4:be:0a:d9:79:cd:7b:ba:21:5b:aa:86:87:51:d4:3d:92:45:
04:29:d5:36:9d:55:56:36:04:46:b5:c9:1d:fe:69:b8:6b:04:
72:ca:2e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:34 2025 by rpki-client