Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
File: 5cePoZk9RRL-JDa4ztqL_JKdZX0.mft (raw, json)
Hash identifier: tCfNwoTI7LqHewI2nr4cDlfAnkt2W7lIuHLfHrWzxtY=
Subject key identifier: 26:67:97:D8:20:46:69:C5:AB:D6:8D:A1:A5:91:15:6E:99:C6:F5:B4
Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
Certificate issuer: /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Certificate serial: 0197B6D77802DD444BBFDA7D9DB5FD35AB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
Manifest number: 08F5
Signing time: Sat 28 Jun 2025 14:01:03 +0000
Manifest this update: Sat 28 Jun 2025 14:01:03 +0000
Manifest next update: Sun 29 Jun 2025 14:01:03 +0000
Files and hashes: 1: 5cePoZk9RRL-JDa4ztqL_JKdZX0.crl (hash: /juLveULl09X4mFZS/KpWuLdlj7/Ncf7yIrabEwP4uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:78:02:dd:44:4b:bf:da:7d:9d:b5:fd:35:ab:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Validity
Not Before: Jun 28 14:01:03 2025 GMT
Not After : Jun 29 14:01:03 2025 GMT
Subject: CN=266797d8204669c5abd68da1a591156e99c6f5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:14:04:51:7e:48:c7:3f:b5:6f:1d:ef:73:
32:e8:01:7a:e5:48:21:09:d6:89:32:0f:86:fd:d5:
f8:f8:49:fa:d6:d6:dd:4c:41:33:af:db:ae:a5:fa:
f0:8e:b5:77:4b:73:71:65:c4:70:56:58:5e:86:52:
da:21:a9:43:3b:3f:f0:ee:fe:10:7b:85:e2:83:c4:
fd:dd:2f:cc:3e:e7:f2:80:93:f7:ac:15:5f:95:af:
c4:9e:e3:22:62:1f:ee:31:27:e7:57:50:45:99:31:
87:b5:ea:cd:7d:d7:0c:25:f2:5f:c1:6c:79:c0:c3:
c7:91:fd:86:dc:5e:9a:69:a9:72:18:6d:c8:de:d1:
b5:e7:29:22:2a:c5:d4:1b:f4:7b:fd:01:d7:d0:b4:
66:fc:93:e1:7e:b0:18:a2:ca:61:b5:df:9b:1c:15:
b7:bc:f4:0e:48:94:2e:42:2f:67:6e:a0:cb:ee:f0:
d7:47:87:6d:46:20:cc:cb:37:c7:73:82:26:30:c5:
6e:c8:68:c0:75:b5:6f:45:18:ba:f1:0c:79:77:d8:
92:0b:59:14:95:5d:0a:c4:3b:b8:17:fd:7a:3d:23:
fb:30:b9:fc:a4:2d:00:8a:49:d1:b2:39:16:ee:3a:
17:1b:fc:2a:94:0e:eb:ce:1a:89:cc:d2:51:5a:90:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:67:97:D8:20:46:69:C5:AB:D6:8D:A1:A5:91:15:6E:99:C6:F5:B4
X509v3 Authority Key Identifier:
keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ee:e6:d0:0d:fe:9b:b4:e7:a1:44:00:f2:ce:58:92:9a:30:
f7:6b:7f:d8:01:7a:a8:ad:0c:12:fe:b6:fb:46:ab:1f:83:6b:
62:91:40:34:1d:eb:52:2c:ae:75:98:21:f0:c4:ee:04:10:3b:
85:4a:0e:d1:cf:93:95:13:ab:ef:c0:af:66:74:41:dc:cb:62:
df:eb:bc:01:4f:82:75:30:15:0a:a7:dd:cb:e1:8d:7c:e1:a5:
bd:c2:5c:2c:c0:f3:53:34:29:76:37:c3:67:98:fa:1b:07:a6:
35:5c:3f:99:61:b0:a8:ce:c5:15:95:f4:44:64:63:7d:74:07:
e6:60:73:16:9a:7c:23:2e:6a:bb:6b:4f:3b:8b:a7:2b:2e:e8:
21:83:f1:17:0c:8a:2a:8b:27:c4:ee:4e:b2:23:e0:47:b7:6b:
cf:b3:d4:21:2c:6f:d1:76:d0:53:2d:cf:b5:92:fa:20:8a:d8:
0c:78:59:df:e0:bf:74:20:e0:eb:84:cc:e8:c0:29:10:5c:a8:
80:33:dd:42:01:61:ec:58:fb:16:63:22:a4:5a:59:6d:9d:48:
aa:da:2b:37:ee:0d:69:85:70:88:1a:a6:37:21:ed:f9:85:f5:
1a:63:b6:1b:3a:81:0b:1c:c5:24:39:bd:e5:9c:e9:0c:91:e3:
0c:6e:a5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:08 2025 by rpki-client