Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
File: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft (raw, json)
Hash identifier: dszdy+d51WQ12JFwd83CKo1w2sILeEcSI2gLB86xJwo=
Subject key identifier: E8:D8:A0:0D:94:39:72:FD:E9:88:F4:E3:6C:2F:D2:DA:A4:1A:52:7B
Authority key identifier: E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
Certificate issuer: /CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Certificate serial: 0197B8906C92D158394283C15E457B12E12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
Manifest number: 039A
Signing time: Sat 28 Jun 2025 22:02:41 +0000
Manifest this update: Sat 28 Jun 2025 22:02:41 +0000
Manifest next update: Sun 29 Jun 2025 22:02:41 +0000
Files and hashes: 1: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl (hash: 7XKsNhdR8EWH/9djmzUCurmOnjXA1/rR/CDDV1hHD6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:6c:92:d1:58:39:42:83:c1:5e:45:7b:12:e1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Validity
Not Before: Jun 28 22:02:41 2025 GMT
Not After : Jun 29 22:02:41 2025 GMT
Subject: CN=e8d8a00d943972fde988f4e36c2fd2daa41a527b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:35:1a:0a:53:8b:42:59:bd:03:c4:c8:3e:
58:9b:d8:94:04:02:ef:16:4b:dc:b8:51:20:6a:1d:
d5:1c:5c:c2:b8:cd:f6:bf:c0:fb:d9:39:20:27:0e:
66:07:cd:45:25:c5:81:97:61:c5:1b:aa:2a:49:92:
26:77:d9:0b:5b:81:04:d7:83:9b:3e:74:7e:e2:d2:
58:79:b2:07:2b:df:79:fa:30:c9:be:75:ca:27:b6:
ae:02:56:9d:cf:01:68:62:e9:a1:4c:7d:73:2d:01:
94:51:33:6e:20:17:9e:25:9e:24:43:fe:2a:7d:f3:
ec:57:02:39:e6:4b:76:39:56:a1:24:87:d4:f9:62:
37:fe:49:ae:be:e0:66:0e:86:bc:15:e2:6b:be:ae:
d7:a3:fc:ba:42:0c:51:8b:4c:ad:06:af:23:7a:14:
fe:f1:7a:6e:eb:13:e5:f5:a0:57:74:81:26:06:6b:
91:37:27:aa:7e:90:dc:aa:f2:fd:19:cc:46:b7:52:
2f:70:6f:c0:b7:78:4c:6c:86:ef:ef:29:12:8a:d4:
e2:35:76:3b:af:96:76:56:ad:f5:8d:6e:b1:03:f3:
9a:54:85:93:94:9e:e9:4b:bd:c1:eb:77:83:8f:78:
6b:dc:ca:02:84:77:d4:f2:c4:2f:b1:d1:b1:0d:56:
a1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D8:A0:0D:94:39:72:FD:E9:88:F4:E3:6C:2F:D2:DA:A4:1A:52:7B
X509v3 Authority Key Identifier:
keyid:E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:50:c2:2d:10:6b:29:08:18:b2:65:83:50:5d:37:69:98:d4:
66:c6:8a:09:79:1e:19:27:20:47:b5:ee:47:db:38:c6:f9:f2:
8a:86:6d:a1:24:7f:64:ad:16:e3:73:cf:fb:93:7a:c4:69:2b:
45:9e:47:c7:d5:63:1c:ac:a0:89:d0:47:19:1b:84:87:7d:a0:
02:6b:b2:c2:4e:14:f7:a4:69:e3:d9:db:1d:8d:83:02:3b:5b:
94:51:42:9c:03:fc:69:5d:37:06:2b:59:8b:e9:7b:73:4a:8b:
7f:52:c9:cc:73:87:c5:8d:fd:20:22:4c:db:4a:95:e1:c3:21:
99:f9:5b:5e:ca:7d:88:aa:f8:d7:fc:59:ab:e1:e7:e2:c2:e2:
fb:89:d7:49:73:14:5b:f9:7a:87:28:c6:22:c9:83:d4:4f:ca:
a6:3a:99:dc:63:9c:9c:22:02:18:9d:89:8c:d9:86:3f:15:5f:
5a:d4:73:6c:7c:60:f1:9e:c0:cb:f1:12:6c:57:95:47:b6:53:
2b:6d:dd:59:07:76:b8:34:b0:52:2d:32:96:eb:fd:8c:d5:7e:
3f:99:5f:6e:ee:06:30:ba:11:05:f3:c7:70:9f:47:60:34:a5:
5f:66:17:b9:e7:fb:d3:58:b9:5b:4b:b5:d3:db:35:54:bd:e8:
f1:c9:44:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:25 2025 by rpki-client