Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier: PGVxMKRn4cfWR1eiqcTX+IaBTDy0iS0a3xbwpvR3550=
Subject key identifier: 59:01:0E:EC:41:D5:D9:AC:20:4A:72:E1:B7:DA:D5:4D:F4:C2:BC:F3
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial: 0198D473F2E63133088E4ADBD6B4275DA0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number: 087B
Signing time: Sat 23 Aug 2025 01:03:45 +0000
Manifest this update: Sat 23 Aug 2025 01:03:45 +0000
Manifest next update: Sun 24 Aug 2025 01:03:45 +0000
Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: 74IggNWFMhAH/Z2D9sgpOMB4UKxvCs3dzbzxXqsmI+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:f2:e6:31:33:08:8e:4a:db:d6:b4:27:5d:a0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Validity
Not Before: Aug 23 01:03:45 2025 GMT
Not After : Aug 24 01:03:45 2025 GMT
Subject: CN=59010eec41d5d9ac204a72e1b7dad54df4c2bcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:72:b0:a7:65:98:6f:e7:f8:46:9e:a3:af:
72:c4:13:2c:b0:3c:f2:d8:ec:23:2b:0e:38:f2:92:
c0:6a:09:50:e1:b1:d8:42:92:2e:6c:da:05:2f:ce:
6f:34:a1:dc:4b:47:e9:cc:b4:8d:58:85:bb:48:d6:
70:72:7c:77:24:a0:be:1f:5a:7a:0b:10:f0:d9:ae:
2d:69:01:83:62:04:e1:58:0e:21:60:cd:3a:63:42:
30:85:f5:ad:dd:94:29:45:18:9b:2f:1a:44:f3:1a:
af:0c:7d:db:b8:e4:a4:1e:aa:a9:37:0b:33:3e:33:
22:88:af:e4:51:d5:cb:6e:8a:6d:c9:37:dc:2f:34:
d8:02:2e:52:1f:7f:e2:5d:3f:3d:96:22:f4:8f:05:
6b:88:cb:fe:a6:61:40:c9:7b:b2:4a:b6:5f:73:dd:
76:23:23:6e:fd:3a:e0:cc:f5:8c:ba:71:7d:14:54:
08:a2:01:fa:a4:83:b4:6b:7b:72:39:19:69:ff:3b:
e1:48:37:9b:45:31:4c:6c:b1:f3:01:31:4b:84:35:
49:d1:39:7a:5c:2a:57:7f:c4:68:29:78:b1:ca:c8:
6b:db:62:c6:47:88:02:f7:54:d9:98:bc:e2:9c:d1:
47:c8:8b:ee:20:0f:01:71:3d:05:c6:ef:24:83:27:
55:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:01:0E:EC:41:D5:D9:AC:20:4A:72:E1:B7:DA:D5:4D:F4:C2:BC:F3
X509v3 Authority Key Identifier:
keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2d:08:af:11:a6:7d:15:07:f3:fd:66:ef:a1:88:03:d9:75:
9c:ee:cf:f4:05:96:eb:a0:d7:8c:ee:a6:c6:fa:24:3a:c4:1f:
2b:5a:37:4e:c2:b9:53:78:97:35:82:d6:0e:0f:88:af:c4:33:
21:63:46:46:42:ea:46:0b:1d:10:ca:e6:dc:9c:07:39:cb:a3:
e7:17:09:c1:64:3b:a2:be:1d:33:89:7c:45:1e:5e:ff:7d:cd:
2b:c3:97:c5:af:59:ff:54:76:ba:04:fd:b6:5a:61:35:d3:d4:
dc:e7:9a:76:98:70:1f:8a:67:af:32:e5:79:61:01:4e:65:20:
49:11:af:62:58:d1:30:44:09:41:8c:67:a7:d9:37:1a:6e:3f:
d9:ca:d3:d0:1f:0e:62:cc:52:95:4f:6e:12:20:eb:c5:b2:83:
e0:21:97:03:2e:4b:2d:6f:4b:9f:bf:d0:b7:23:fa:ae:f2:1e:
0b:78:80:c3:7b:1d:65:8c:46:d1:36:88:b7:a3:15:1b:60:93:
23:fd:4f:a4:f9:9f:13:20:db:2a:f7:ba:c4:f1:88:98:d7:4f:
e1:b7:d7:b7:3b:96:2a:5b:df:fe:21:26:2b:4e:be:34:9a:0a:
c3:b7:41:cc:48:8a:ed:3a:71:ff:28:a7:6d:5b:c9:17:4c:77:
51:61:7a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:24 2025 by rpki-client