Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
File: 5qi5LUxZf2wET3clKFSPnJEpoNM.mft (raw, json)
Hash identifier: ZEKYQSJs0CCEFhiIfaUObX1VzN92dEuoxVZNOIEWtFY=
Subject key identifier: D3:B2:CF:FD:1D:D0:50:27:20:5B:EE:8F:42:21:63:D8:39:8A:CE:57
Authority key identifier: E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
Certificate issuer: /CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Certificate serial: 0197B70F1994B8D4C66912FFE398138F4A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
Manifest number: 1293
Signing time: Sat 28 Jun 2025 15:01:49 +0000
Manifest this update: Sat 28 Jun 2025 15:01:49 +0000
Manifest next update: Sun 29 Jun 2025 15:01:49 +0000
Files and hashes: 1: 5qi5LUxZf2wET3clKFSPnJEpoNM.crl (hash: wUKrpgYPoO0tf1QnP4rW22vwinjOJpflsH96AfyRuYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:19:94:b8:d4:c6:69:12:ff:e3:98:13:8f:4a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Validity
Not Before: Jun 28 15:01:49 2025 GMT
Not After : Jun 29 15:01:49 2025 GMT
Subject: CN=d3b2cffd1dd05027205bee8f422163d8398ace57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6b:2f:8c:b3:35:80:14:d7:88:90:b9:0f:b9:
5b:d2:e4:6e:c4:8c:43:42:9d:b1:fb:60:48:39:ba:
6e:e8:37:92:4b:e0:11:e5:3b:d0:83:02:7a:d0:a1:
ac:ac:10:41:ad:87:21:12:74:a7:23:53:17:bc:75:
3e:37:d4:dc:4b:72:17:7c:38:97:85:15:29:a0:a2:
61:b8:70:ce:34:c5:14:ba:35:ce:8c:4a:06:5a:84:
e9:9a:4a:9b:4e:3b:d4:96:db:bb:7b:02:0e:30:f1:
16:b0:16:43:27:1b:2e:58:5c:e7:97:40:e0:8c:92:
56:0b:6d:d6:8f:db:fb:f9:f2:37:63:03:83:80:27:
3f:e2:4a:c7:7a:5b:c4:b9:f8:56:82:0e:4b:f4:cb:
63:7a:87:d0:1c:56:e7:89:a5:0a:2c:1c:83:4a:b3:
b5:c7:4d:2a:69:d9:35:7c:46:d3:6a:33:47:fb:40:
ce:63:00:1e:ad:4d:b1:fa:7b:20:da:05:cc:42:56:
6b:67:65:26:f1:db:8c:60:c0:6a:e7:ff:05:c0:9e:
ba:45:a8:f7:35:b7:53:6b:74:44:0d:27:0c:f3:02:
9b:0d:de:0e:ee:f6:aa:31:bc:f0:7b:81:3b:db:12:
2f:99:b1:8f:bf:cc:2d:71:b8:df:fa:a4:2b:24:e1:
a7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B2:CF:FD:1D:D0:50:27:20:5B:EE:8F:42:21:63:D8:39:8A:CE:57
X509v3 Authority Key Identifier:
keyid:E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5f:70:88:15:81:a8:df:19:de:dc:f5:e9:a3:01:1a:8b:39:
de:bb:c0:4e:4d:91:77:af:b5:70:0d:64:dc:fc:d1:ca:26:f8:
c3:c8:5b:0b:0f:45:82:f1:b4:00:c4:09:b8:a3:45:ee:93:78:
70:92:63:93:42:07:34:79:05:10:58:1a:ca:f4:87:6c:20:db:
81:f5:a9:cf:36:01:1e:14:9f:6a:a5:09:ce:4c:dc:bb:40:dd:
ec:7e:b5:96:69:5c:bb:61:d6:55:7e:2d:5a:5a:a1:33:34:8b:
2b:0f:f3:c3:4a:e2:6f:48:e8:6e:b4:6b:99:06:f0:db:d2:7d:
db:01:c5:96:c5:41:8a:9e:90:71:32:07:55:38:b4:a7:44:bc:
b8:77:c2:f5:e3:2a:3c:97:2a:e0:11:b9:7b:1c:06:bd:5c:5a:
31:24:6f:13:a9:e5:86:e3:dc:ae:8a:11:59:41:49:be:d1:80:
47:6e:55:cc:6d:ec:5b:38:bd:7a:78:bc:38:ba:3b:17:a5:6b:
30:27:4e:47:c6:4c:aa:04:3b:31:65:45:3d:94:f3:1c:da:7b:
8d:51:03:78:dc:e8:d5:23:94:4d:84:e7:dd:63:bf:1f:46:81:
4a:5e:ba:38:66:1f:81:d6:35:6c:a7:dc:38:dd:91:da:1b:6b:
bb:6d:d5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:39 2025 by rpki-client