Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
File: t5im6ZG5VaKTURGf9312hksNOEo.mft (raw, json)
Hash identifier: 6eiCQXZGjzch++gRRG/Dd77HKSHvLL7iuRfwdXAJ3GQ=
Subject key identifier: E4:8E:30:E4:EE:4B:CD:EA:CC:D2:62:DE:1D:1A:DD:25:51:1D:93:8F
Authority key identifier: B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
Certificate issuer: /CN=b798a6e991b955a29351119ff77d76864b0d384a
Certificate serial: 0197B88ECAD3D9E3942543E59208226B8163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
Manifest number: 0CD9
Signing time: Sat 28 Jun 2025 22:00:55 +0000
Manifest this update: Sat 28 Jun 2025 22:00:55 +0000
Manifest next update: Sun 29 Jun 2025 22:00:55 +0000
Files and hashes: 1: t5im6ZG5VaKTURGf9312hksNOEo.crl (hash: PZ3zUOoKTpdAis0ICvseQwz4MC/V31dU38FQnG2XwWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:ca:d3:d9:e3:94:25:43:e5:92:08:22:6b:81:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b798a6e991b955a29351119ff77d76864b0d384a
Validity
Not Before: Jun 28 22:00:55 2025 GMT
Not After : Jun 29 22:00:55 2025 GMT
Subject: CN=e48e30e4ee4bcdeaccd262de1d1add25511d938f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:bd:e3:6d:1a:a4:ac:dd:c3:9e:a2:72:1c:
93:b1:d0:35:39:52:64:f5:ea:39:6a:f0:86:9e:0f:
b1:b4:d1:65:53:c5:22:ac:af:3c:8b:21:70:8c:f0:
04:61:5e:7e:88:50:9a:dc:35:a1:23:52:64:15:28:
b8:25:4f:e7:89:c4:ee:fe:5b:43:d1:06:5b:a1:c3:
3f:aa:6a:6d:02:11:98:45:16:76:20:43:93:03:bd:
81:64:24:1f:40:e8:12:3f:a3:2f:5f:f0:03:32:e1:
52:65:7a:40:90:01:48:15:50:48:4e:95:90:6a:d5:
9d:87:9c:33:b9:7e:08:41:31:fb:f4:8a:19:d0:3e:
6a:98:80:bd:5d:f1:17:9d:3a:72:f8:fd:05:a8:66:
38:25:86:35:b0:58:69:6a:9a:3f:b4:90:7a:ac:10:
76:fe:9a:e3:b3:33:29:fb:d5:7f:8c:d9:12:a8:e9:
d6:c5:53:23:ef:b7:51:7d:85:50:2b:6c:07:11:3f:
f2:64:af:44:06:00:74:de:58:e9:3c:bb:df:a6:f7:
fd:db:1f:d4:aa:28:5a:09:ad:f8:d4:cc:0a:8f:2d:
6c:e5:55:59:ed:23:47:7c:5b:d3:8c:1f:0d:fe:2b:
af:b8:65:37:35:4a:83:bd:f0:21:a3:f4:72:81:75:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8E:30:E4:EE:4B:CD:EA:CC:D2:62:DE:1D:1A:DD:25:51:1D:93:8F
X509v3 Authority Key Identifier:
keyid:B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3e:ea:2d:e1:4e:cb:f7:51:de:b4:08:41:cd:8e:65:ff:0a:
d0:c8:66:f0:c8:32:63:4d:13:e5:c0:01:cd:b3:96:c7:6a:8b:
3e:f6:07:94:3a:f6:4f:05:28:eb:96:c9:50:a4:ad:b4:34:02:
46:fe:e4:66:70:4b:0a:5c:d1:52:4f:e8:08:56:29:cc:bf:db:
1c:fb:4f:18:dd:b4:1b:0e:20:01:aa:19:1e:7c:38:8b:a0:71:
de:74:47:2a:b9:ef:28:f3:21:a0:db:c5:fe:a7:68:73:b2:e0:
ee:ca:99:f6:6f:a8:4d:4a:55:10:d5:bc:18:04:e3:cd:cd:ae:
8d:ed:59:53:97:4f:4a:af:e2:c0:3c:89:9d:93:96:11:13:1a:
f5:c0:8a:89:3a:7e:48:b2:3b:93:a7:b9:30:f3:ab:b7:19:fc:
38:7d:40:a8:57:e4:b9:02:71:5c:48:7e:b3:52:6d:31:83:cc:
5b:f6:72:b4:cb:aa:ed:cf:b6:1e:77:5e:0e:11:c9:5d:77:ea:
27:9a:f4:f1:0a:b8:00:41:b7:31:f2:4b:e7:7c:14:5d:62:5a:
65:24:fe:09:ad:e3:9d:39:93:29:26:1c:90:78:28:85:eb:19:
5d:52:c9:0b:0f:7a:60:d9:ad:61:4f:24:3d:82:0e:8e:6c:36:
59:00:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:04 2025 by rpki-client