Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
File: 5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft (raw, json)
Hash identifier: fDz/DQ7AO0qrIJuYNHeQXHr5kbhMF6ZHcgHKP3r0WZo=
Subject key identifier: 01:95:BD:F5:DC:30:61:BD:92:33:57:8F:2D:95:32:82:58:61:3E:44
Authority key identifier: E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02
Certificate issuer: /CN=e47e92bf41a5a774511fb723af94aff0d3512602
Certificate serial: 0197B7B36D70A887F73A32BF9287CA2F98FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
Manifest number: 03ED
Signing time: Sat 28 Jun 2025 18:01:18 +0000
Manifest this update: Sat 28 Jun 2025 18:01:18 +0000
Manifest next update: Sun 29 Jun 2025 18:01:18 +0000
Files and hashes: 1: 5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl (hash: 4iUhhz6gqSStlsMc+vNrsENoHRUBs3+4A+wMvvGyTfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:6d:70:a8:87:f7:3a:32:bf:92:87:ca:2f:98:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47e92bf41a5a774511fb723af94aff0d3512602
Validity
Not Before: Jun 28 18:01:18 2025 GMT
Not After : Jun 29 18:01:18 2025 GMT
Subject: CN=0195bdf5dc3061bd9233578f2d95328258613e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:10:c8:fe:1f:b4:51:fe:cb:18:1b:c8:59:1b:
3a:df:37:90:94:e9:81:c7:5e:50:29:3e:f6:a5:4f:
ce:19:3a:04:ec:11:be:55:61:67:4e:96:3c:c7:90:
89:51:f2:33:77:b7:6e:13:88:34:f2:0b:28:b2:a7:
9b:e3:f9:6c:3d:51:6f:d0:9f:91:a5:ab:9e:6f:9f:
10:cb:d7:2d:68:44:84:d9:4d:04:6b:e7:ac:41:45:
c9:73:84:e1:c4:43:71:11:f2:63:c6:88:48:d5:97:
78:5d:09:a1:9f:f2:f3:0f:1e:ee:37:49:1b:f2:38:
c0:3a:97:a2:34:c7:47:c0:27:17:2a:24:42:17:53:
aa:5f:84:d2:29:ba:d8:b9:09:d5:97:e0:b2:1a:38:
74:44:54:4a:28:f6:41:64:ff:7a:00:5f:03:c2:72:
41:f3:5b:6f:2c:e2:ea:77:22:54:0c:a4:fe:fe:20:
7c:a1:c5:7a:12:6d:f8:f9:df:e8:82:7b:91:ee:3c:
ce:f7:c2:90:ce:1a:cb:d0:67:ec:ac:54:5a:87:42:
53:96:45:a6:43:27:a1:50:c2:7e:d2:ed:d3:09:21:
43:2a:98:39:84:87:ed:22:26:d6:f5:ca:74:c6:87:
0a:90:11:34:c8:78:02:b7:9e:0d:15:c3:74:eb:93:
00:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:95:BD:F5:DC:30:61:BD:92:33:57:8F:2D:95:32:82:58:61:3E:44
X509v3 Authority Key Identifier:
keyid:E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:eb:93:50:4a:19:aa:73:74:77:c3:5f:fb:ed:2a:4c:5d:b0:
50:91:96:8e:a8:6a:32:4c:67:96:08:d4:ea:0b:d2:1f:7c:ca:
fc:aa:8f:3a:08:42:f2:db:3a:f8:b5:7b:4c:49:4f:9f:d3:d6:
2f:e2:73:d0:cd:de:79:36:07:d3:dc:a4:19:09:3f:39:2f:8b:
26:d4:b9:99:21:44:b6:a0:86:41:3c:01:0d:d2:43:bd:23:1d:
88:af:25:e3:bd:96:ac:fb:7f:32:bf:6e:d2:d1:b9:47:df:72:
98:53:bf:df:d5:20:5d:ff:f1:4b:a1:64:45:13:ad:84:b5:00:
21:ae:86:f0:7c:b6:29:2b:d2:80:de:87:34:48:4a:0c:93:04:
cb:7b:bc:d0:4b:26:36:15:cc:67:3f:8a:ac:b4:46:14:56:9a:
ca:e7:d3:1f:99:e8:63:0c:73:07:1e:92:f9:a9:d0:92:5b:5a:
75:2c:c1:25:5d:12:d3:90:07:e1:f3:43:bc:5a:cf:aa:d2:ec:
84:2a:04:9d:5e:18:dc:07:7a:0f:65:9e:a0:b3:38:04:5d:f5:
48:73:d8:7e:46:d3:be:c9:a6:e5:13:be:15:57:8c:71:aa:8e:
f2:6e:79:35:ee:79:e8:6f:c9:fc:95:7a:46:4e:f6:b3:4f:84:
12:39:df:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:54 2025 by rpki-client