Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
File: t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft (raw, json)
Hash identifier: /aEjUQ7BatPkSThLajBKZhJQQRQxZ93KJyjDOXmSOvI=
Subject key identifier: 13:1A:B0:CA:B6:F5:66:BF:A3:7C:B6:C1:FA:1F:23:C4:CD:1A:A9:5A
Authority key identifier: B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41
Certificate issuer: /CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
Certificate serial: 0197B70EA8E5C63BC9CAAC2DB15D0248C19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
Manifest number: 0C4A
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl (hash: 4F5iFgXE7pHSGqZT246fE8KiGPOMUBCFxQHj4gb/++A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a8:e5:c6:3b:c9:ca:ac:2d:b1:5d:02:48:c1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=131ab0cab6f566bfa37cb6c1fa1f23c4cd1aa95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e9:2a:08:51:28:05:01:47:f9:8c:79:14:e1:
99:ce:02:ca:1e:bc:2e:18:70:e2:f7:8f:5b:9b:23:
15:a7:ac:a9:35:e8:b6:ad:1e:68:32:8f:e4:05:1d:
4b:b1:ed:5d:a3:a1:a4:a5:f9:40:90:61:14:b4:2c:
0c:d4:7b:01:04:33:85:a9:c4:d8:0d:83:1f:5b:32:
31:89:50:37:36:45:31:28:58:e4:20:88:d9:f6:0c:
9c:b5:33:89:4b:57:11:9d:ba:f3:1a:b8:52:d2:9b:
be:81:41:b7:62:d3:b6:4e:6d:b8:2b:ae:30:39:d1:
93:62:df:98:9e:f4:dd:fa:73:27:dc:9b:6b:dc:54:
f1:70:8c:37:cc:21:a4:af:8f:17:d7:26:70:cc:9b:
66:8e:e6:67:c0:2e:39:7b:6a:e4:fb:65:4e:ff:82:
36:3e:66:7f:91:d4:4a:98:ad:c0:9d:6d:23:3c:41:
f6:0e:db:b2:08:44:4a:06:fe:8a:0e:7f:20:ee:e6:
f6:94:4a:2d:df:49:32:4d:18:ba:0e:0a:5e:df:c4:
ac:51:dd:cb:a1:b2:a8:69:7d:68:f5:62:ba:25:ee:
4d:b4:91:86:1f:e5:a4:8d:81:1d:19:40:82:43:5a:
d3:1c:ce:f8:e7:ac:6e:44:35:15:18:48:a9:d6:48:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1A:B0:CA:B6:F5:66:BF:A3:7C:B6:C1:FA:1F:23:C4:CD:1A:A9:5A
X509v3 Authority Key Identifier:
keyid:B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:61:60:df:fb:bd:3f:ad:2d:8d:cc:a6:67:dd:c5:2d:26:15:
ea:86:c1:65:79:86:92:96:f8:17:60:be:8b:77:af:8f:3e:40:
20:ea:09:ac:21:59:be:f2:bf:10:ff:27:ef:1a:9b:5a:f1:9b:
cd:26:e4:ee:dc:7e:36:33:92:03:94:3b:2a:d8:11:d8:2d:ab:
68:0c:1f:13:c2:f1:f6:f4:4a:3f:03:be:92:dd:e7:6b:6b:f4:
d7:9a:cd:42:b8:c1:f0:12:b8:06:3b:4d:5a:83:2c:95:d1:83:
49:51:15:7f:4b:5c:4c:fa:c4:c9:35:43:76:3c:75:81:b7:bb:
be:23:bd:7d:00:cd:82:29:52:6e:35:22:0c:19:34:a3:e0:f5:
b6:3d:e5:17:a0:09:38:24:68:12:98:30:3c:3a:b9:2c:91:85:
99:5f:9f:ea:af:06:80:66:92:1e:7f:75:a4:44:9a:46:fd:79:
0d:7b:f1:fe:9e:2e:2b:06:db:57:bc:05:d1:7e:b9:b6:32:d2:
50:0a:a5:21:95:00:7b:75:c1:a6:e3:ab:fa:d4:1f:87:61:23:
e2:52:3d:34:00:fb:1a:a0:32:bf:7f:f9:38:03:ab:fb:65:53:
5e:15:65:b8:1c:be:e1:0a:d9:d1:d8:c7:9b:c6:45:ae:c6:3f:
d8:e9:46:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:43 2025 by rpki-client