Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File: 5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier: f0HxoJaoVedF2QEpTN+/FaXZl8TiY+vdj7jS1MgQCWI=
Subject key identifier: B4:A9:BD:8A:07:16:94:92:E1:CC:C3:45:2F:52:3A:6B:C6:09:54:9C
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer: /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial: 0197B9D90FF9491A6C64653322F5754E3CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number: 15B3
Signing time: Sun 29 Jun 2025 04:01:39 +0000
Manifest this update: Sun 29 Jun 2025 04:01:39 +0000
Manifest next update: Mon 30 Jun 2025 04:01:39 +0000
Files and hashes: 1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: Yz2FIX0EWXevhdGjRn2ifffXFrRMuKxYcC932+1d1Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:0f:f9:49:1a:6c:64:65:33:22:f5:75:4e:3c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
Validity
Not Before: Jun 29 04:01:39 2025 GMT
Not After : Jun 30 04:01:39 2025 GMT
Subject: CN=b4a9bd8a07169492e1ccc3452f523a6bc609549c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:68:52:31:56:01:78:8a:5f:c6:02:bf:59:
9f:54:c5:2b:68:7a:35:6d:60:60:18:12:c7:47:61:
ea:b7:14:de:0a:9f:bc:3f:74:c0:50:16:1a:8e:23:
06:8d:14:68:13:60:a3:31:a3:5b:41:1c:34:a1:28:
b2:7f:c5:ee:e7:27:3d:8b:ef:95:26:7b:31:6c:e8:
db:de:e8:00:cd:6e:6d:e1:d3:e2:39:9d:57:14:a7:
f9:96:66:65:8c:43:25:40:a5:f0:ab:0d:6e:12:70:
3b:7b:82:61:63:f2:69:35:f4:65:34:0e:55:f9:8a:
6d:2f:0c:f5:e3:f4:db:8d:26:ff:c9:9d:40:0c:b4:
49:a2:e9:09:fa:26:9a:e9:7d:c9:cc:f4:cf:59:d7:
e3:b6:fe:7e:ff:73:ab:46:54:d2:5c:f1:a0:4f:15:
b6:83:c0:b9:ed:ce:8f:c3:82:d7:4c:83:93:b9:8b:
7f:f5:0e:ce:a6:1b:d9:7f:1c:45:80:6b:53:5a:bd:
0a:01:99:16:25:aa:53:d9:71:12:40:a7:64:4e:a4:
a7:e2:04:a3:15:6c:0c:95:ac:85:b1:d0:55:bc:b4:
58:48:05:b2:bd:03:f7:b8:ee:5d:ed:b4:78:b8:ae:
eb:c0:c4:b8:21:55:e0:4a:21:94:2c:2a:98:cb:60:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A9:BD:8A:07:16:94:92:E1:CC:C3:45:2F:52:3A:6B:C6:09:54:9C
X509v3 Authority Key Identifier:
keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0d:3d:ff:13:50:3b:6e:a9:87:83:54:26:91:c1:9b:2e:45:
ea:e8:e1:86:76:1a:66:e1:c6:6f:1c:8c:d9:67:ef:7b:7d:f1:
24:38:4e:f6:da:2a:24:57:eb:5f:45:d3:8c:97:b7:22:fe:41:
77:74:85:ce:99:ef:6c:6b:71:b8:0b:d2:6c:67:7a:ec:93:e4:
9f:85:5a:6d:96:9c:3d:3b:dc:3b:28:e6:57:af:dc:92:ac:1a:
ba:c6:3c:65:ee:a6:3d:34:98:64:5d:11:f2:e7:61:63:a4:5b:
a3:56:ca:dd:04:d7:e9:09:cb:94:6c:3f:c5:62:44:1c:b8:7d:
69:bd:78:72:74:a3:e3:16:0a:c4:dc:5d:95:7d:88:68:f7:21:
e4:05:9d:c2:72:72:9d:eb:18:68:9b:39:6e:1e:52:3b:d3:b4:
87:b5:ff:f6:44:fc:ec:8e:f5:4c:fa:88:ff:d5:97:cd:57:76:
56:3e:d8:60:4e:e6:13:03:42:df:22:00:50:5a:e8:f7:ee:84:
b0:33:67:da:57:6b:17:5b:ea:7e:c6:07:a3:75:70:3e:55:9a:
2d:94:4c:bb:d1:40:5c:3f:7e:42:0b:40:b3:99:e5:f9:3a:80:
59:46:c2:28:ef:11:81:94:26:ef:c9:d6:0c:8c:eb:7c:ea:ae:
9b:2c:dc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:40:35 2025 by rpki-client