Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
File: 5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft (raw, json)
Hash identifier: nMBjx34iLouMFxz8UPspQ/N2zpILImK0bujlCJwzsbQ=
Subject key identifier: 42:4D:74:C8:36:E8:CF:CC:25:26:4B:04:08:EF:79:49:EE:D1:2F:F7
Authority key identifier: E5:C0:4C:01:9B:C6:93:65:04:28:55:85:51:FA:CD:22:20:80:12:6D
Certificate issuer: /CN=e5c04c019bc693650428558551facd222080126d
Certificate serial: 0197B74514AA11C72C99C3F46A4DA64CAC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cBMAZvGk2UEKFWFUfrNIiCAEm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
Manifest number: 025F
Signing time: Sat 28 Jun 2025 16:00:47 +0000
Manifest this update: Sat 28 Jun 2025 16:00:47 +0000
Manifest next update: Sun 29 Jun 2025 16:00:47 +0000
Files and hashes: 1: 5cBMAZvGk2UEKFWFUfrNIiCAEm0.crl (hash: Y0OTFDTL1xePbMhOlJTkhq7AnP357zxPoWSoDiJUVgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cBMAZvGk2UEKFWFUfrNIiCAEm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:14:aa:11:c7:2c:99:c3:f4:6a:4d:a6:4c:ac:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c04c019bc693650428558551facd222080126d
Validity
Not Before: Jun 28 16:00:47 2025 GMT
Not After : Jun 29 16:00:47 2025 GMT
Subject: CN=424d74c836e8cfcc25264b0408ef7949eed12ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:12:29:07:19:f6:55:a3:8b:6b:3e:51:7b:
27:cb:8b:50:08:11:62:0f:e4:d8:2c:84:92:6a:ea:
8d:d5:fe:8d:a5:b7:0e:f8:5b:05:95:35:49:48:65:
70:d6:56:11:70:41:db:5d:a8:ae:61:21:83:4e:7c:
f2:8c:4e:5f:3e:91:2c:7b:7e:88:a3:22:d7:55:2c:
e0:2f:d0:e1:54:3b:62:13:5e:11:75:36:5e:20:46:
a9:03:cf:95:ea:ae:b4:27:f8:15:f5:55:3f:f1:b8:
cd:6c:9c:41:ad:f5:1e:77:7d:ab:39:89:c3:f9:92:
30:58:56:c5:5d:06:f3:04:62:ac:00:01:01:0c:0b:
a6:c8:4b:5c:dc:53:5a:a9:fe:a1:ee:f8:22:47:e2:
9c:5a:f7:06:e2:02:50:8d:e8:5d:91:a9:73:46:de:
9b:6e:8d:90:e6:82:f8:d1:6b:48:e6:ec:c7:7f:14:
90:b8:23:36:ab:9f:d6:c1:22:d8:9c:a2:07:fe:06:
00:af:02:36:f1:e3:34:5e:7b:77:e4:c2:96:b7:96:
12:70:3e:36:52:6c:30:5b:06:e3:94:52:31:a6:e4:
ad:e3:14:6f:86:68:ad:a4:a2:37:c9:04:8d:21:24:
d7:2e:47:c2:de:5e:4f:c7:63:1a:4d:89:be:71:73:
0d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4D:74:C8:36:E8:CF:CC:25:26:4B:04:08:EF:79:49:EE:D1:2F:F7
X509v3 Authority Key Identifier:
keyid:E5:C0:4C:01:9B:C6:93:65:04:28:55:85:51:FA:CD:22:20:80:12:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cBMAZvGk2UEKFWFUfrNIiCAEm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:02:9b:f0:a9:2a:e0:8c:f5:27:8c:1c:5b:62:e2:61:9b:16:
d6:4d:8f:d5:4a:46:ee:9f:33:c9:5f:b1:50:21:84:b8:57:8a:
25:7c:fa:87:56:e4:f1:b3:cb:4d:89:2d:1a:06:aa:86:90:82:
dc:d6:72:06:3c:9f:4c:ee:81:56:36:0e:aa:eb:8c:9f:1e:02:
f4:a6:3f:cf:ce:16:4b:e1:27:a7:10:81:3e:31:38:5a:c1:8a:
c5:b9:60:02:97:d6:a7:b6:91:c6:e8:aa:6c:cc:a9:18:dd:73:
0e:9d:91:11:bb:8e:dd:a5:5e:ab:b4:ff:92:81:b6:05:1e:0c:
2a:2f:51:83:84:98:63:1a:91:84:3f:f9:94:d4:ce:17:6e:93:
92:59:7d:d7:cf:9d:9e:70:f2:68:ff:8f:34:27:d6:93:95:96:
a2:ab:f8:ee:be:8d:ca:c1:dd:70:a1:b6:5d:ea:78:1b:b7:fb:
de:f1:f8:35:12:f6:88:8c:7e:f1:85:93:11:77:e1:e7:7f:c6:
6b:ab:eb:b9:df:35:21:2d:8d:08:6b:c1:bc:13:57:01:70:18:
88:3a:72:63:44:53:63:3e:db:6f:81:52:2a:d4:40:93:45:47:
2b:b7:76:23:75:77:cc:01:94:11:a6:fd:f7:9f:74:3d:20:68:
e8:73:3b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:02:17 2025 by rpki-client