Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File: 5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier: HiDIpFgWBMi9xpVLGUAX5MQ/M/DU0z9nu4TsD7sJi6g=
Subject key identifier: C3:36:5E:D3:4C:19:C9:8F:8A:87:7E:70:2F:51:08:BD:2B:93:6A:61
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer: /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial: 0197B6A09CF4D882E56897B8D5057E53B6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number: 08FC
Signing time: Sat 28 Jun 2025 13:01:08 +0000
Manifest this update: Sat 28 Jun 2025 13:01:08 +0000
Manifest next update: Sun 29 Jun 2025 13:01:08 +0000
Files and hashes: 1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: WGjRhod7eZDh9cKr5MUb+14VBh4lZ8eyF0gRRHfuY8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9c:f4:d8:82:e5:68:97:b8:d5:05:7e:53:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Validity
Not Before: Jun 28 13:01:08 2025 GMT
Not After : Jun 29 13:01:08 2025 GMT
Subject: CN=c3365ed34c19c98f8a877e702f5108bd2b936a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:c3:74:fb:c5:8a:69:79:f1:0b:e0:ff:cf:
f4:f5:ba:8d:44:f8:a2:b0:d4:bc:38:78:03:76:db:
8f:b6:f4:a2:7e:68:af:39:d0:fb:c0:1e:6a:7f:09:
45:b5:ba:b9:65:3d:4f:da:aa:58:b1:5b:f8:38:6c:
84:d8:ae:d7:3f:57:7d:e8:b0:26:5e:65:c8:72:a1:
b4:9a:35:90:51:a2:92:ac:28:1f:b8:12:2d:e4:cc:
0f:ed:66:dc:bd:b7:a8:d7:49:c6:b5:48:97:ce:3e:
75:d8:f1:4b:78:74:a6:15:bd:f0:56:49:32:76:8c:
bd:53:48:2c:18:49:6b:ce:31:f8:07:99:46:ae:54:
12:c7:26:b2:03:b1:33:14:c2:c8:78:54:4d:6d:5b:
e7:44:9c:b5:c2:5e:10:64:ce:89:e2:c1:6c:dc:88:
ba:f4:02:e6:60:48:35:85:3d:93:e4:b7:8a:ca:66:
b4:94:23:55:cb:72:c9:8c:0b:77:cd:1d:79:b5:d4:
80:cf:e9:55:f2:be:ea:59:61:f0:fd:0c:86:2f:b9:
73:f2:5f:0c:7d:3f:72:bc:1b:cf:c4:70:9c:dc:2e:
70:1b:b2:69:65:7f:2c:fb:a2:eb:41:52:bd:41:ab:
7d:8f:42:93:00:41:c8:75:ab:96:e2:d6:ce:f6:70:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:36:5E:D3:4C:19:C9:8F:8A:87:7E:70:2F:51:08:BD:2B:93:6A:61
X509v3 Authority Key Identifier:
keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:1b:21:ed:55:bd:67:6c:05:a2:c6:d8:a1:c4:85:90:77:b5:
2c:d1:a8:04:d5:38:af:c1:35:14:1e:56:0d:4c:c7:29:98:6a:
7a:34:2a:d4:99:f4:04:87:de:b4:fe:5a:d0:58:57:5c:44:13:
b1:f1:be:19:ef:56:14:98:b7:57:99:5f:e6:63:11:32:82:db:
88:8c:33:fc:1c:4c:33:fb:88:9d:01:25:ea:9d:b6:94:6f:2a:
c8:c8:21:98:7e:e1:b2:59:5b:da:99:a5:cc:31:1d:b2:7e:ef:
59:95:7d:35:06:e5:bc:91:55:84:2e:3e:3f:9f:30:12:fb:98:
50:d0:07:ea:1f:a1:e4:e3:1e:bf:3c:45:6e:c8:2e:fa:42:56:
80:d8:e7:17:ad:0a:5f:a2:41:0a:fa:19:47:b2:c0:3f:9d:7a:
6f:43:c1:cb:48:52:0c:7d:6d:3c:c4:31:76:23:c6:c2:99:cd:
5b:00:19:f7:fc:64:b7:d0:cb:46:69:45:0a:4f:56:0e:a9:2b:
3b:bd:d4:e6:b8:59:6f:fd:59:f5:fe:13:43:2e:a3:83:15:38:
9c:3e:f1:5e:f5:21:5d:e1:28:e8:9a:2b:e7:14:16:db:66:7e:
d0:1c:12:cc:fa:2b:6f:53:fc:7b:05:bb:41:e5:7e:b5:16:25:
63:83:9c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:23 2025 by rpki-client