Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier: KeoAiB2kSFM2gdnxaebYN1olNX/3oloeAnqmjZwl+Z0=
Subject key identifier: 54:0E:18:A3:21:E2:BE:D5:80:C5:BB:00:A3:BF:C7:DA:45:83:68:10
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial: 0197B8907AC98FF32926A41C0D36E7398C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number: 07E8
Signing time: Sat 28 Jun 2025 22:02:45 +0000
Manifest this update: Sat 28 Jun 2025 22:02:45 +0000
Manifest next update: Sun 29 Jun 2025 22:02:45 +0000
Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: /cey9op5IgAw6I/IjdUSUsX5zVNM+enpGcgteOh7Wdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:7a:c9:8f:f3:29:26:a4:1c:0d:36:e7:39:8c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Validity
Not Before: Jun 28 22:02:45 2025 GMT
Not After : Jun 29 22:02:45 2025 GMT
Subject: CN=540e18a321e2bed580c5bb00a3bfc7da45836810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d5:7f:9b:c7:c6:f6:49:67:1f:63:8a:e6:d1:
31:7d:4b:71:cf:77:d2:bb:a8:78:ad:da:49:2f:51:
cd:3e:40:a2:bd:32:2f:8f:2c:11:1b:3c:ce:15:a1:
fb:01:f0:4d:c3:9b:13:60:c3:ce:72:70:b8:f7:64:
ea:4c:aa:d7:2d:5b:20:77:fb:26:a3:df:70:f0:32:
dd:bf:ca:f2:7d:e9:81:48:25:5e:a6:6f:2e:d8:d7:
b0:7e:3a:2f:e6:96:02:89:79:3a:82:9b:5a:fe:ba:
a5:f6:a5:1c:c8:5a:01:bd:2f:f3:26:e2:cd:a0:92:
1c:21:f6:0e:01:92:cc:1d:65:60:30:3b:74:c7:32:
ee:86:12:75:53:dc:7c:68:65:3c:c5:d7:90:dd:df:
5d:44:93:3f:fe:f3:48:e0:bc:a4:f7:e7:8c:e0:17:
7b:43:48:38:1c:56:34:56:7b:51:c6:88:38:e5:01:
67:6c:c3:a2:be:f3:0b:b5:bd:e1:78:93:2d:67:5c:
35:da:a9:62:4d:e9:c9:e2:69:ba:26:ac:8c:ea:90:
50:40:fb:c7:d2:ef:ed:54:27:10:13:27:0a:1b:7b:
85:88:68:84:3a:65:ac:84:6e:21:47:fb:9e:73:0e:
68:b2:ac:f0:2a:46:d2:ca:04:a8:33:a4:ed:17:b1:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0E:18:A3:21:E2:BE:D5:80:C5:BB:00:A3:BF:C7:DA:45:83:68:10
X509v3 Authority Key Identifier:
keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9a:ee:d8:46:1a:34:bf:87:37:c4:f8:02:14:b8:17:64:e7:
4d:40:57:ab:63:4d:07:29:01:ff:f4:91:5c:d6:c0:de:89:4f:
1e:3e:a2:78:cb:af:31:36:f3:ab:0f:1d:7b:e9:ff:db:ec:a0:
8b:3d:03:20:2c:9b:80:77:98:35:00:65:aa:44:e5:fa:20:1c:
8b:5a:c2:f5:94:b8:93:95:70:a0:25:be:54:14:6e:8b:6f:a0:
b1:67:a0:77:0c:c4:13:33:71:4d:b4:e7:9e:0b:4c:0d:0b:c0:
2a:64:01:28:af:39:e9:ad:9a:17:88:f3:f1:c0:16:fb:c6:d5:
6e:e9:65:38:de:0e:70:37:e2:f2:69:8d:88:6e:0a:b0:19:75:
9a:34:87:04:3a:81:93:df:78:a2:85:c5:af:5d:17:29:e6:00:
78:19:18:84:f0:ca:ec:61:23:52:b9:cf:22:08:00:18:f0:da:
2b:bb:45:20:4f:3b:f6:62:4b:d8:75:da:a2:29:0c:c0:bc:15:
c9:7f:43:08:90:63:35:ee:9f:28:51:d5:3c:60:9f:e2:8c:1d:
18:64:ce:e5:6d:ee:df:0f:e8:f0:93:89:0d:bf:e9:23:5b:23:
9e:14:89:17:7f:c8:c0:b0:48:63:4a:23:1f:f9:0a:42:74:83:
54:d9:bf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:14:04 2025 by rpki-client