Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
File: 5UHTgH6p2K1130eFWJlQnubzKCA.mft (raw, json)
Hash identifier: 9szOe+PLbhMdOErwfYu8gOqXHboGqfNpDGtDCxCQL7g=
Subject key identifier: 14:03:A0:C8:CA:93:56:06:BA:F4:BC:54:35:52:29:9E:40:B4:4F:39
Authority key identifier: E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
Certificate issuer: /CN=e541d3807ea9d8ad75df47855899509ee6f32820
Certificate serial: 0197B70F6584DE8AEA042F906DD353880B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
Manifest number: 0101
Signing time: Sat 28 Jun 2025 15:02:08 +0000
Manifest this update: Sat 28 Jun 2025 15:02:08 +0000
Manifest next update: Sun 29 Jun 2025 15:02:08 +0000
Files and hashes: 1: 5UHTgH6p2K1130eFWJlQnubzKCA.crl (hash: nu/kjU1HDhT66x0y72dZb3hFW81A0fWn3mA+cBMDsOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:65:84:de:8a:ea:04:2f:90:6d:d3:53:88:0b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541d3807ea9d8ad75df47855899509ee6f32820
Validity
Not Before: Jun 28 15:02:08 2025 GMT
Not After : Jun 29 15:02:08 2025 GMT
Subject: CN=1403a0c8ca935606baf4bc543552299e40b44f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:fc:7c:64:a0:d7:22:c3:ff:ac:5a:90:20:
ae:07:f9:66:0d:37:9b:94:cf:84:91:a6:69:95:a5:
4e:ea:45:50:8b:f1:e5:c9:1c:85:5b:45:68:53:f4:
ad:0c:92:5f:86:b5:12:e9:49:e0:41:b0:51:fd:73:
42:fa:4e:06:96:3f:75:cf:d9:ad:96:80:b2:b6:00:
46:e1:8c:ea:ea:d1:22:09:0a:ae:d1:4c:67:cf:12:
e3:dc:54:95:ee:f7:53:3c:b5:c2:35:d6:6c:4e:e4:
fa:43:9b:44:0e:a5:8a:d8:f0:4c:43:29:7d:45:43:
fc:01:c9:4f:b3:e1:28:82:6d:fa:12:e9:e9:ee:35:
94:fb:10:68:07:ec:a0:cb:43:ad:cb:d2:9f:b1:fc:
ae:a1:eb:d1:33:18:00:01:10:66:ee:d7:f9:d4:86:
b4:a8:40:30:bd:28:c6:7e:28:73:c5:df:45:a1:ad:
69:91:d3:ee:ff:17:6d:00:41:cf:19:96:ad:e7:d0:
bf:08:4b:ba:d7:2a:82:9b:f9:33:d4:bc:ee:9a:51:
37:24:3f:51:45:b3:fb:6d:ab:d4:0b:90:a9:d6:f2:
48:9a:e9:c4:58:b0:bc:06:97:fc:45:74:c1:f8:53:
3f:bb:ee:90:f0:c0:0d:37:8e:27:9f:f1:72:16:d2:
c0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:03:A0:C8:CA:93:56:06:BA:F4:BC:54:35:52:29:9E:40:B4:4F:39
X509v3 Authority Key Identifier:
keyid:E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:57:bb:04:07:36:8e:33:6c:78:fa:a0:43:02:9c:65:08:4a:
a7:1c:c5:9c:43:2f:7c:d4:44:82:61:a8:8d:73:77:f6:ae:3c:
e6:01:17:7f:13:fa:e4:91:cc:cf:64:41:74:5c:8a:e8:81:fb:
2e:5c:78:42:f6:df:4f:b7:a5:69:c6:20:ff:b9:81:92:8f:60:
31:c8:c0:96:7c:ef:2e:dd:d3:d6:64:12:04:3d:db:f5:93:00:
53:d5:f7:0d:6c:ee:46:94:8e:98:6f:55:08:a0:48:40:6e:6e:
96:40:e6:19:73:95:a9:c7:ba:f3:a2:04:40:83:9e:7c:f5:c2:
e1:57:37:1a:49:4e:71:99:cb:f6:c2:a0:a9:71:5d:44:1a:06:
ce:61:5c:42:31:ba:a0:40:c1:4f:58:c2:fd:6e:8e:bb:22:35:
31:e0:72:3a:2a:bb:38:8e:bd:90:f7:d1:bf:e4:f8:70:7c:05:
27:1c:dd:76:05:78:75:d9:78:56:37:54:1c:ec:63:a0:ab:41:
5c:cf:bd:4f:df:7a:ee:0c:3f:07:c5:cf:57:90:f9:e3:a4:d4:
8e:b9:54:1c:3e:6e:f9:ae:24:a3:6b:66:e0:45:4b:3a:b1:13:
bc:5a:7f:13:25:50:d1:ef:c9:63:e9:e9:1d:85:cd:88:62:2a:
25:2d:e6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:29 2025 by rpki-client