Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File: 5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier: je0ekQQMZqR8Gxovb1elNJJv+t8TipmL8mxU1aDXT4c=
Subject key identifier: 2C:13:A0:EC:68:04:F7:0D:BB:BA:4D:5A:D1:C5:61:2A:83:1C:8B:45
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer: /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial: 0198D660C71D900DF364BA4F15AEB51924A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number: 0991
Signing time: Sat 23 Aug 2025 10:02:03 +0000
Manifest this update: Sat 23 Aug 2025 10:02:03 +0000
Manifest next update: Sun 24 Aug 2025 10:02:03 +0000
Files and hashes: 1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: LaKfSlAqdBCOTEwaCl+4F2PQk8PMirjnKaeO3cfoa1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c7:1d:90:0d:f3:64:ba:4f:15:ae:b5:19:24:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Validity
Not Before: Aug 23 10:02:03 2025 GMT
Not After : Aug 24 10:02:03 2025 GMT
Subject: CN=2c13a0ec6804f70dbbba4d5ad1c5612a831c8b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:72:91:8c:31:58:38:0c:34:53:4f:6d:a0:
ae:7d:d8:9c:2a:44:af:01:fd:fd:a7:3c:09:bd:a8:
81:93:c7:f1:4e:52:73:26:16:cf:31:b8:03:a8:b8:
3f:b7:d7:5a:e1:bb:a0:a3:f9:72:27:bc:ae:b2:68:
55:de:e8:f7:49:5f:44:8a:37:f1:90:23:5e:1a:31:
c2:a3:80:7e:00:76:23:e1:f0:1b:25:ae:12:3f:c6:
ce:a0:0d:e4:76:27:fc:82:a9:22:44:23:3f:d0:41:
3f:ac:a9:55:57:20:6d:05:ae:1e:e9:e6:dd:5a:21:
df:5a:92:24:b2:3e:fe:1e:15:f0:4b:02:69:6c:a5:
e4:c5:c2:98:5a:95:65:9b:35:d5:54:57:b3:2f:eb:
9c:40:f0:0e:55:8f:66:37:76:60:89:7b:6f:3a:ed:
8f:c6:b2:4e:4a:65:1d:cf:97:b8:af:6d:79:7b:14:
28:7c:cf:0f:83:d4:50:97:d1:64:d0:aa:e0:63:d7:
0a:45:63:95:81:c6:28:42:0f:bd:48:ea:7f:bc:7a:
eb:b3:39:90:78:9a:39:0d:c3:5d:83:62:24:bd:c1:
2f:68:37:64:fc:4b:2d:29:fb:a6:3f:82:d6:36:8d:
ef:2e:74:19:08:87:df:6e:d5:89:46:3e:d2:27:12:
c2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:A0:EC:68:04:F7:0D:BB:BA:4D:5A:D1:C5:61:2A:83:1C:8B:45
X509v3 Authority Key Identifier:
keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cb:f9:71:58:19:0e:36:c1:9a:78:08:ef:7c:6d:6a:30:36:
a1:7a:db:a6:fa:b8:ec:e8:ea:ce:bc:9c:f5:f9:d5:74:4a:b4:
b4:b9:e3:eb:80:1e:83:f0:3f:27:6c:bf:11:26:27:25:97:c5:
fc:01:1c:c8:d7:dc:e8:bf:01:48:49:21:4c:06:b2:d3:a5:0f:
22:9b:7d:11:a4:db:da:17:27:83:b7:67:0a:fb:29:90:1d:40:
f6:cb:8d:03:cb:e8:99:2c:65:8f:12:e8:ae:88:d3:90:17:7b:
02:3a:d4:40:10:99:c8:f3:04:bc:39:03:1b:f0:9f:92:df:64:
42:9e:e4:7c:c6:c6:94:5c:7d:f7:4a:65:9d:f6:7d:36:d7:89:
66:d6:26:cb:98:46:f8:18:8b:dc:83:96:53:c8:f2:79:f4:7e:
f3:1a:b6:b0:17:35:b0:68:a3:b9:ef:2b:43:01:72:89:7b:42:
0b:b6:f5:59:cf:8c:f9:1d:19:bc:72:b6:2b:6f:e2:43:f9:52:
38:7f:ef:27:10:e6:8b:d9:49:1f:0d:bd:7d:51:61:1c:16:ba:
2c:aa:85:ab:fb:be:07:34:91:5f:bf:b3:1a:b1:05:d7:2a:90:
31:ca:d3:d7:db:3e:6d:ac:bb:24:95:68:b4:4a:5b:1e:0b:99:
a7:e3:9a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:03 2025 by rpki-client