Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
File: T5mJlOtWGejymrO956sq0U6r_P0.mft (raw, json)
Hash identifier: uPiR5Fqigf/s/SoGGddT/8m9eF4HZIrrs0uDDb45HgM=
Subject key identifier: 6E:1B:5F:CE:B9:7E:1F:23:7C:F7:D3:C2:C2:77:77:B2:3D:0C:CB:62
Authority key identifier: 4F:99:89:94:EB:56:19:E8:F2:9A:B3:BD:E7:AB:2A:D1:4E:AB:FC:FD
Certificate issuer: /CN=4f998994eb5619e8f29ab3bde7ab2ad14eabfcfd
Certificate serial: 0197B7EA95B7203518CF33EEAA98A918CE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 19:01:33 +0000
Manifest this update: Sat 28 Jun 2025 19:01:33 +0000
Manifest next update: Sun 29 Jun 2025 19:01:33 +0000
Files and hashes: 1: T5mJlOtWGejymrO956sq0U6r_P0.crl (hash: zOzgFaY5fEorEAMOZAchQtrNS40+i4VA7tPF73E/Lpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:95:b7:20:35:18:cf:33:ee:aa:98:a9:18:ce:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f998994eb5619e8f29ab3bde7ab2ad14eabfcfd
Validity
Not Before: Jun 28 19:01:33 2025 GMT
Not After : Jun 29 19:01:33 2025 GMT
Subject: CN=6e1b5fceb97e1f237cf7d3c2c27777b23d0ccb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:c8:09:11:d0:fc:56:8e:92:03:b3:a2:b1:
34:12:ac:23:62:bd:99:60:74:dc:4c:49:b2:be:71:
e8:4b:9f:91:4c:c2:f1:8d:8c:f5:b2:bd:67:25:d1:
b6:8b:be:c2:9a:e1:a0:2d:39:69:14:ab:46:dd:c3:
f2:22:3b:8d:02:e1:e6:ef:59:b0:09:c0:66:06:35:
ef:2c:80:74:0d:f0:8a:7b:75:ba:8c:ef:34:42:76:
97:0b:0d:c0:63:44:6f:c0:85:4c:6d:f9:94:7f:87:
0f:9c:4f:81:69:fd:d3:40:b5:a2:ab:39:bd:0f:be:
31:bc:cc:c0:94:14:05:c3:47:d1:c2:24:c6:60:60:
c5:07:43:3d:de:e0:db:9e:b9:63:7f:95:e0:4e:f4:
fe:44:61:f7:26:f6:69:65:f4:7c:ca:e7:74:f1:d8:
2e:fc:04:93:81:2c:a6:7e:bc:a8:80:51:f0:da:cb:
69:29:cb:67:4d:f8:4e:dd:a8:8a:ee:da:eb:ad:5a:
fd:10:62:4b:c5:8f:61:47:49:74:ed:a3:10:8c:95:
8e:4b:3c:49:6c:77:01:c1:86:6b:16:f1:31:66:5e:
39:4e:d3:40:74:83:c7:fc:79:5e:be:ec:5d:4c:e9:
f6:34:71:89:8f:66:14:cf:67:f6:57:25:e6:5e:5d:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1B:5F:CE:B9:7E:1F:23:7C:F7:D3:C2:C2:77:77:B2:3D:0C:CB:62
X509v3 Authority Key Identifier:
keyid:4F:99:89:94:EB:56:19:E8:F2:9A:B3:BD:E7:AB:2A:D1:4E:AB:FC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:81:7d:6c:da:e4:b1:42:74:7c:81:bd:4e:fb:3d:46:3d:db:
da:17:6d:57:94:e6:d3:92:b6:34:36:47:d4:fc:2e:40:28:63:
5f:2c:aa:a8:ae:b3:3e:ca:96:b1:02:80:94:4e:8e:ff:34:03:
a6:92:a7:46:6b:ab:5e:f5:95:92:8e:19:16:aa:f4:cf:23:f8:
ae:f9:a4:9d:f0:3d:85:1b:f8:b4:45:7a:0c:5e:ea:0d:7e:85:
b9:a6:95:cd:04:81:d3:7a:9b:07:fa:d2:70:f4:9e:09:bf:f7:
81:36:55:c7:a4:6f:5f:06:2d:30:b3:53:04:d3:2b:05:72:fe:
37:23:6e:0b:b3:01:b4:ef:91:51:cb:aa:dc:fb:b6:6e:f3:f5:
af:b6:e8:1e:55:62:37:5e:99:95:49:ed:ff:38:16:c0:0c:96:
50:1e:b2:3c:94:db:28:62:bb:61:8e:22:c2:13:aa:7e:7b:72:
97:62:d1:ca:25:ba:17:67:a5:9d:e0:e8:3e:bd:24:8a:6d:bc:
44:eb:dc:ed:57:c2:5a:3d:da:d0:8f:85:de:16:a1:1e:53:80:
e4:02:f4:50:3e:bb:12:92:aa:69:52:23:14:7c:7a:f2:05:6f:
e9:3c:2f:f4:46:16:2d:2b:ed:4e:30:48:ff:c3:1f:44:d6:e7:
cd:76:da:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:23 2025 by rpki-client