Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
File: N5jHIczxJbe4Klf7Pdk7d6YqOag.mft (raw, json)
Hash identifier: 502H9EZKNTEczjRbdPR+pDZgFgC/V/LcyAPvZm1dc4I=
Subject key identifier: 87:5D:CC:11:EA:A1:0B:2C:5C:1C:1E:8C:8F:F3:BD:10:52:1E:FC:E4
Authority key identifier: 37:98:C7:21:CC:F1:25:B7:B8:2A:57:FB:3D:D9:3B:77:A6:2A:39:A8
Certificate issuer: /CN=3798c721ccf125b7b82a57fb3dd93b77a62a39a8
Certificate serial: 0197B70EF804A9911D94465D4924CE03F45E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
Manifest number: 0A1F
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: N5jHIczxJbe4Klf7Pdk7d6YqOag.crl (hash: 05B6lYdNp1IQ9m5pYBcTUWeZHS850kEdSSc7fyc0rZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f8:04:a9:91:1d:94:46:5d:49:24:ce:03:f4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3798c721ccf125b7b82a57fb3dd93b77a62a39a8
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=875dcc11eaa10b2c5c1c1e8c8ff3bd10521efce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:88:f8:0e:ee:86:98:e2:38:0b:26:48:6c:
93:55:06:af:63:e3:8c:73:bb:fc:60:e8:00:32:d7:
6c:66:5b:88:91:cb:f5:a1:54:24:d1:e5:8a:cf:1f:
0f:51:4b:94:50:71:0f:55:ca:7b:6c:87:ad:ea:35:
fb:31:f1:97:54:11:5e:a1:fd:57:b5:aa:24:f8:7e:
4a:dc:d1:c3:ad:52:eb:07:32:cd:0a:21:12:62:50:
58:0e:67:d3:5b:fa:41:5b:f2:32:ba:d9:34:60:84:
85:1a:17:d1:77:80:3a:db:76:a8:ec:77:0b:67:28:
fa:95:43:8f:29:5d:a8:d9:4c:23:9e:dd:2f:de:1b:
54:72:ec:24:c4:f0:5a:72:09:5c:84:7a:f6:3a:7e:
43:1f:e6:7e:f3:cf:e4:15:4f:44:02:dc:cd:31:96:
d0:d8:4b:ff:6c:7c:e4:b3:a7:c6:28:10:cc:d9:a2:
17:2a:48:b0:b1:5b:53:ec:65:d8:9d:26:41:77:cb:
5d:50:40:af:3b:04:5f:8c:5f:07:52:57:99:fc:8e:
24:6f:3e:21:0f:6b:94:58:45:26:c0:f9:fe:d6:3d:
a2:53:3c:d4:e2:2a:35:60:20:f4:10:8f:d4:77:3a:
80:19:b7:37:b7:1c:61:46:3c:ce:31:71:4d:3b:af:
7f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5D:CC:11:EA:A1:0B:2C:5C:1C:1E:8C:8F:F3:BD:10:52:1E:FC:E4
X509v3 Authority Key Identifier:
keyid:37:98:C7:21:CC:F1:25:B7:B8:2A:57:FB:3D:D9:3B:77:A6:2A:39:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5jHIczxJbe4Klf7Pdk7d6YqOag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1040ae-aa13-4cbb-90da-367b86fbcbf7/1/N5jHIczxJbe4Klf7Pdk7d6YqOag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c5:26:f8:a3:31:9c:96:9a:69:3e:a4:23:ac:a3:58:7c:d7:
7e:91:19:ba:cb:63:0a:91:f6:6d:c0:1a:39:51:ad:69:27:cb:
b0:d6:85:6a:59:a5:bf:ce:19:ab:4a:5e:cb:db:ee:03:4a:57:
71:67:c6:02:a2:74:1d:46:07:78:28:01:3e:a2:b4:33:c2:8c:
67:0c:99:95:c2:d0:1c:c7:ef:18:ac:95:4b:7b:d8:a2:6c:ed:
8f:d8:53:ce:a8:24:f9:e0:19:6c:91:42:d9:ca:b8:ab:7c:62:
81:89:d9:7b:83:91:c5:d4:24:4a:4b:24:42:04:6d:7c:39:8d:
d9:0e:e1:f2:9d:62:c2:ee:96:90:9a:11:4b:23:de:fc:22:85:
70:17:bc:b2:8a:53:5a:71:26:46:bb:4d:3a:60:cf:1d:e2:bf:
3a:9d:c9:76:77:92:b5:07:f6:2c:9b:93:59:2f:c3:a6:c9:33:
a8:70:48:2c:d7:a0:c3:ee:e9:ca:76:99:71:44:5e:ca:08:40:
18:1c:89:d1:bf:74:a0:31:46:68:7f:31:9f:ab:bc:0a:ab:5b:
d5:4d:d6:af:17:12:ae:e2:15:a9:75:b5:81:59:f1:1f:f0:54:
ce:be:95:c0:8d:ff:3d:66:1a:22:12:b5:ab:73:85:30:8f:0b:
db:48:a9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:37 2025 by rpki-client