Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
File: 5iL2U5eBxQvEl8egtvXVBe-IudY.mft (raw, json)
Hash identifier: BFLkL62rKeu9SZFHTe/Bd837ntRHJGMzhLIvRb8zEa4=
Subject key identifier: 44:ED:D7:6E:A8:CB:7A:90:C0:97:B9:AC:36:49:5E:77:91:88:6E:BD
Authority key identifier: E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
Certificate issuer: /CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Certificate serial: 0197B6A05F1307BDB9F048062076F5EE9701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
Manifest number: 1106
Signing time: Sat 28 Jun 2025 13:00:52 +0000
Manifest this update: Sat 28 Jun 2025 13:00:52 +0000
Manifest next update: Sun 29 Jun 2025 13:00:52 +0000
Files and hashes: 1: 5iL2U5eBxQvEl8egtvXVBe-IudY.crl (hash: lhFcVL0mOzjKzu5BfJLR2CeK7sjk6HfKrCniYL+PmQg=)
2: 75gL-QM6p_WWaZpy6iMBTgopl4A.roa (hash: C70hkA6dezEt2xcdG5Lxg7y2p7KFd6680YSWy+fNqPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5f:13:07:bd:b9:f0:48:06:20:76:f5:ee:97:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Validity
Not Before: Jun 28 13:00:52 2025 GMT
Not After : Jun 29 13:00:52 2025 GMT
Subject: CN=44edd76ea8cb7a90c097b9ac36495e7791886ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:0e:23:d6:ed:4d:6f:20:20:11:e9:50:f0:
82:a0:5a:44:0e:f7:eb:68:01:56:2c:4c:eb:f5:a3:
07:b0:49:4f:b2:1e:55:b1:0b:ff:c8:42:28:8c:2d:
37:d2:1f:1b:19:cd:82:a9:e8:87:ed:a0:c8:da:ff:
f8:7a:80:ba:55:3d:2d:38:8d:0d:35:13:b4:ae:fd:
1f:92:98:0f:68:a6:b2:50:37:a1:51:c5:ca:b7:fb:
25:1a:79:b1:89:39:f7:bd:a7:c4:03:35:b4:f5:f2:
5d:14:7f:e8:93:5c:6a:50:57:a8:f5:d2:6b:6b:57:
f5:cf:d2:4f:b0:2a:02:2f:e4:52:32:79:72:d4:6d:
f2:57:d2:9f:f4:8b:4c:71:16:6a:c2:be:e7:d7:c0:
e1:be:aa:6b:bb:27:39:47:2d:90:17:5d:b0:15:d7:
73:ac:8c:1e:b5:15:16:c5:b9:d0:2f:68:58:76:31:
50:77:10:f3:9b:23:83:4f:7f:54:ac:69:9d:c4:59:
68:78:5c:85:e6:25:c0:bc:18:b5:9a:d8:f1:a4:36:
68:17:f2:33:f5:f9:50:b5:d1:65:4a:d7:5f:e2:3f:
74:37:85:64:9f:64:df:64:3f:c6:4e:41:6a:49:1b:
02:7e:b5:a0:32:3b:39:23:9f:be:df:f1:7c:ef:fd:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:ED:D7:6E:A8:CB:7A:90:C0:97:B9:AC:36:49:5E:77:91:88:6E:BD
X509v3 Authority Key Identifier:
keyid:E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ae:13:9f:a2:08:ca:6a:17:3f:e6:ec:f7:48:30:90:51:49:
a3:10:a3:1a:63:95:97:1e:25:1c:01:b1:e1:66:00:31:ba:43:
3f:b3:ca:51:29:6e:d1:ab:cc:2b:91:69:04:54:24:89:e4:07:
cc:33:cd:cb:18:2b:6e:27:32:0d:34:04:a7:73:86:3f:b4:3d:
1d:61:e8:f9:32:bf:ab:4e:1d:e0:6e:6a:bc:fb:88:4e:1f:6f:
19:11:77:8a:5a:38:12:a3:a0:64:46:31:e2:1f:5a:64:ed:54:
8d:3e:f2:63:ae:85:3a:1e:71:26:9b:32:68:3f:9d:bf:fc:f3:
97:57:9a:4f:2f:d5:cc:a2:25:0b:cf:df:95:8c:54:1f:66:d3:
39:61:e0:c3:ca:b7:c5:f4:0a:10:62:57:5f:2c:4f:00:47:6a:
1a:e7:6e:75:50:f7:bb:c3:47:9a:6b:fe:b1:f9:87:79:e8:bb:
f7:2f:2f:f2:5a:00:3d:df:9f:5c:3d:89:11:84:b5:2d:a4:59:
07:1b:63:98:86:a9:bb:ad:95:b3:68:2f:94:52:30:14:1d:1b:
22:6c:ac:d2:9c:0b:04:05:63:13:01:97:2d:6d:d8:4f:2a:47:
86:d1:ca:3f:a4:68:77:94:56:c5:1a:37:64:c3:5e:8c:e2:e9:
ef:6b:19:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:30 2025 by rpki-client