Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
File: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft (raw, json)
Hash identifier: Rs7D67eNNiiU0BIZAT4RZpkFOQqhyiTmAEAnE0KaIrs=
Subject key identifier: 68:C5:5C:2E:32:F5:06:69:65:17:35:6C:D2:68:13:CC:B7:FB:43:DC
Authority key identifier: FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
Certificate issuer: /CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Certificate serial: 0197B70EF2A48CA0B6357F075D7CD5CB30D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:39 +0000
Manifest this update: Sat 28 Jun 2025 15:01:39 +0000
Manifest next update: Sun 29 Jun 2025 15:01:39 +0000
Files and hashes: 1: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl (hash: KxZ7ehOya/gu4WYpKXnpIijVytCcf5jf0EDGPL5akxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f2:a4:8c:a0:b6:35:7f:07:5d:7c:d5:cb:30:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Validity
Not Before: Jun 28 15:01:39 2025 GMT
Not After : Jun 29 15:01:39 2025 GMT
Subject: CN=68c55c2e32f506696517356cd26813ccb7fb43dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:f4:61:f5:10:7a:d8:c4:61:07:33:e7:7e:
40:8b:38:0e:6a:25:ee:ac:2d:64:13:2d:26:a8:b9:
51:14:8a:25:a2:69:ce:50:ec:5c:89:ee:ad:00:67:
3d:01:ef:c5:0d:c1:f3:3b:05:7b:b1:f8:b2:0e:ec:
82:3a:eb:a9:94:d9:0e:2c:5d:9d:63:34:55:b2:c5:
ba:7c:3a:3e:d2:a6:be:c0:87:0c:ff:54:da:22:2f:
3f:a7:43:77:38:91:92:fe:92:b6:b0:f1:0d:af:94:
46:f2:7a:9a:ee:fd:d3:4f:2b:e0:1a:f6:69:21:ce:
7c:b3:22:07:31:ac:89:c0:e1:6d:e0:58:0e:ef:7f:
9b:6a:fc:e4:ed:02:c9:15:5f:90:5b:31:df:01:94:
a0:0e:b4:2a:7d:9f:c8:44:ce:67:44:64:84:36:c1:
75:8f:1f:79:11:a4:e3:70:99:7b:29:f6:0e:fa:da:
78:4a:32:f8:47:62:c7:cc:b0:34:e8:99:58:95:b2:
ee:2a:03:fe:f0:e2:2e:81:d2:00:c2:94:b2:2f:75:
97:da:c9:41:dc:1b:38:cb:72:b3:c4:79:a3:5d:2f:
9e:0b:19:65:f3:9f:9b:23:97:7a:e0:b6:b5:4d:f5:
01:9d:94:ba:b3:94:66:91:bc:b9:85:5e:c8:07:6d:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C5:5C:2E:32:F5:06:69:65:17:35:6C:D2:68:13:CC:B7:FB:43:DC
X509v3 Authority Key Identifier:
keyid:FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:da:a6:69:ca:2d:bb:df:f1:f4:ab:ea:e5:04:a2:d8:0d:fc:
c7:27:de:dc:fc:3d:71:5c:25:a9:37:58:a5:ef:90:46:b0:5d:
5c:51:4b:39:be:45:02:50:6b:a4:34:bc:77:53:c6:6e:8f:67:
0a:07:9e:36:a1:15:f2:66:dc:4b:b7:06:08:6c:9a:f9:fb:70:
56:94:6c:90:fd:05:7c:6b:0b:8a:a1:f9:46:2b:a8:68:31:cd:
bf:07:04:0a:b2:2a:de:e8:fe:a9:ce:14:57:33:e6:7d:b7:5e:
9d:9b:f8:78:1a:6e:cb:db:4c:d1:8d:89:95:28:f8:10:3a:1f:
f1:9c:fc:ec:38:95:5a:b3:4d:bb:9f:6d:ef:41:51:4a:e5:42:
b8:9b:26:c5:53:ec:53:70:ec:a9:09:45:61:b7:3b:37:68:22:
4b:67:c8:76:7c:17:39:2f:6b:8d:ba:55:a8:5c:16:80:64:cd:
3e:9b:0d:52:67:3c:39:42:93:37:fc:83:57:b5:78:11:96:e3:
b2:e6:49:a0:58:75:16:29:4a:58:86:ef:7c:10:ec:fa:71:79:
0e:40:9e:46:bf:9b:7d:2e:5e:ee:75:5e:df:83:d4:e2:38:f4:
67:a2:b9:34:3c:2b:2a:0b:4d:59:3a:9d:a9:44:0f:1e:35:fc:
10:19:7b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:05 2025 by rpki-client