Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
File: p5ROOKJ1k6RvXEoqli9YO49r5GA.mft (raw, json)
Hash identifier: OrZ/DToQmha95tWxgWtWITnuW15/eKAZ8vzfYaRrPag=
Subject key identifier: 9C:03:28:5D:80:37:3C:03:52:D0:65:28:41:A9:F0:1D:55:32:C7:E0
Authority key identifier: A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
Certificate issuer: /CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Certificate serial: 0197B6A231A65279F9AEA69B0DC6CC9E073F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
Manifest number: 11A2
Signing time: Sat 28 Jun 2025 13:02:52 +0000
Manifest this update: Sat 28 Jun 2025 13:02:52 +0000
Manifest next update: Sun 29 Jun 2025 13:02:52 +0000
Files and hashes: 1: p5ROOKJ1k6RvXEoqli9YO49r5GA.crl (hash: TmqPUxzW40z2VmoY8cAzg/AuoPfbA2og3hDWazbW9oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:31:a6:52:79:f9:ae:a6:9b:0d:c6:cc:9e:07:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Validity
Not Before: Jun 28 13:02:52 2025 GMT
Not After : Jun 29 13:02:52 2025 GMT
Subject: CN=9c03285d80373c0352d0652841a9f01d5532c7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:2b:46:65:b3:fe:db:02:93:eb:57:d2:49:
11:cb:98:1a:5a:81:af:c0:82:d2:d1:5d:9f:39:ec:
d6:b3:ee:7f:48:e1:31:5b:f9:6b:96:a6:3e:e1:df:
53:d3:d9:c9:14:44:6c:c4:38:c9:2f:78:4e:44:23:
9f:2c:e1:25:94:0c:51:f9:72:3f:aa:22:3e:60:01:
b4:3f:c1:46:d0:96:1e:e8:3d:d0:9c:85:7f:54:48:
a6:1c:af:87:35:50:24:1a:79:29:c4:66:8b:5a:c4:
bd:17:8f:a3:cf:b7:27:d1:c5:6f:3c:f2:51:1d:bc:
32:bc:ea:1e:db:d0:66:29:3c:cf:53:2b:48:05:76:
be:e8:d2:eb:ba:db:8d:8e:c9:3a:56:a2:66:25:e0:
e7:dc:32:1e:f5:3c:b3:a6:98:6b:f8:f3:ed:20:de:
25:e8:b3:31:fe:be:4e:3a:6d:aa:7e:05:1a:7b:00:
ef:c8:d1:e2:ec:05:d4:84:aa:6d:ed:e8:b7:8f:06:
24:c3:73:10:a6:1d:fe:4f:41:59:fc:53:03:f0:4e:
23:c2:b1:06:26:70:23:2e:10:3a:f7:38:eb:01:64:
b8:cd:36:b4:e6:61:59:24:f3:fa:89:a6:5d:f6:41:
e5:b5:fc:3e:de:f1:44:0c:4d:15:ec:da:4a:c3:4b:
73:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:03:28:5D:80:37:3C:03:52:D0:65:28:41:A9:F0:1D:55:32:C7:E0
X509v3 Authority Key Identifier:
keyid:A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:df:7f:19:be:14:c6:68:1f:7b:8d:f7:ed:1f:6f:64:1d:c9:
eb:e4:07:75:cd:34:78:cc:b3:5c:7a:d7:82:23:e5:75:01:d1:
40:57:ef:ab:0c:e7:66:68:9d:bd:59:03:ad:05:c5:c8:e5:40:
47:f1:05:96:dd:a9:97:2d:82:95:d3:54:d6:65:5e:07:fe:39:
4a:63:1c:95:65:1a:6c:84:df:6b:1c:d8:fc:40:d8:c0:5d:3f:
03:bb:2c:a3:1a:b8:98:f0:f6:0a:6b:55:af:09:6d:b6:de:43:
79:24:76:f7:c8:72:e9:fd:16:7c:f1:8a:ba:66:b4:10:9a:f1:
10:cc:a2:34:9f:f2:af:32:06:b7:32:c8:8d:c1:8f:05:e4:b3:
7a:ca:ad:54:26:52:9b:95:e8:db:14:00:a1:71:50:c7:aa:11:
2d:38:37:3b:9a:04:2d:84:71:08:49:0b:14:23:89:56:ec:a0:
1e:cc:83:43:4a:98:eb:39:36:cd:e5:1a:d0:5b:57:33:58:bd:
3b:de:81:4e:2d:e8:8f:e6:15:17:c2:e7:ff:f3:63:e2:e9:0f:
2f:b6:1d:ec:21:b4:ec:6a:a6:39:63:56:07:3d:58:81:9c:53:
53:af:08:26:c2:4f:6f:f6:17:0a:35:7f:a9:3b:35:96:9e:0d:
5c:b4:7a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:51 2025 by rpki-client