Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File: 5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier: TQ4VNN5bgzdqqGX4PFnWxoGi8Y0dwo2J/0buGB6RMIw=
Subject key identifier: 0A:03:8B:7E:E3:67:2F:9B:F0:CD:22:8B:88:87:CE:24:4F:91:85:C5
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer: /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial: 0197B70E7285669A72407AA64E57607529AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number: 0BB3
Signing time: Sat 28 Jun 2025 15:01:06 +0000
Manifest this update: Sat 28 Jun 2025 15:01:06 +0000
Manifest next update: Sun 29 Jun 2025 15:01:06 +0000
Files and hashes: 1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: xPTurprrgwKvrbrWIZ2bjlULnneHUl9SJqvDeZcCg1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:72:85:66:9a:72:40:7a:a6:4e:57:60:75:29:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
Validity
Not Before: Jun 28 15:01:06 2025 GMT
Not After : Jun 29 15:01:06 2025 GMT
Subject: CN=0a038b7ee3672f9bf0cd228b8887ce244f9185c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:57:46:c1:02:78:94:ac:4d:e4:d3:68:1d:28:
95:31:40:47:2b:e5:d5:9a:49:c6:de:5f:d3:9f:ad:
d6:da:79:b5:13:2d:42:7c:c1:12:17:59:58:00:5c:
f8:13:27:21:76:9c:01:26:47:ad:a9:00:66:4f:79:
98:e7:f3:ea:48:17:11:95:d7:c7:bd:42:62:b6:64:
bf:7d:f7:66:2b:13:0d:18:46:cf:8e:69:80:28:ef:
73:92:62:85:55:a1:a6:10:38:62:c7:e0:20:52:e8:
90:df:4e:bc:23:01:2d:b2:f0:34:a5:be:7d:10:e9:
71:04:56:7f:87:ef:d2:1d:33:e8:d7:eb:1d:ca:a7:
96:54:78:8e:a0:fb:13:49:3f:b5:03:6c:ee:10:2b:
65:f1:93:d6:ec:9e:a1:92:05:d9:dc:a3:62:a6:83:
4f:5b:d2:88:3c:6d:5c:b2:40:87:62:5a:32:b8:a8:
56:a1:14:d6:2a:2a:9d:b6:cb:62:40:9b:21:fb:ec:
c6:88:40:90:1a:46:3f:53:08:c9:3c:10:d2:45:8a:
78:e8:06:2b:ac:cb:f1:a2:f1:d9:26:6e:76:7c:3f:
e0:2b:2d:22:fd:88:02:b3:7f:6f:af:dd:2e:18:b0:
8b:94:84:f1:f8:c7:15:52:80:40:6d:3d:6a:8e:4d:
f6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:03:8B:7E:E3:67:2F:9B:F0:CD:22:8B:88:87:CE:24:4F:91:85:C5
X509v3 Authority Key Identifier:
keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cf:ce:e7:b2:f9:15:c8:66:5d:97:4b:9f:69:98:bb:4a:a6:
01:ae:36:27:45:7b:ec:ee:5f:03:d6:6d:04:c3:ba:07:10:db:
70:e1:2e:08:7f:cb:39:f7:2a:61:c7:cc:66:28:ef:f6:01:74:
72:ba:16:81:c5:2f:34:ee:f6:99:b3:4c:04:7d:3d:ef:57:54:
c9:e7:c4:5b:b8:0f:09:b2:32:60:d6:cc:a7:18:11:9e:6f:94:
06:79:39:a3:50:94:30:7f:01:ab:7b:25:87:1a:0e:7d:91:46:
1e:ab:9d:f9:dd:cd:4a:fb:83:0a:27:02:fc:7c:0c:59:a9:4f:
6d:bb:d2:e9:d3:4f:ad:69:df:f5:cd:5d:c3:00:66:07:d4:e2:
bf:51:e9:31:aa:14:e2:0c:bb:c4:37:ec:a6:2f:b4:7b:34:25:
f0:67:f5:18:06:64:7e:1e:60:73:7c:20:95:9f:1a:74:64:5c:
de:fc:c0:a7:37:5b:f7:4a:c4:cc:2b:20:3b:32:72:ee:95:57:
c2:66:d3:a6:a1:c1:d2:8c:22:51:61:45:f3:f2:3c:e9:8c:0a:
bb:1a:08:59:1d:35:28:a2:2f:7c:e2:75:e9:fe:24:d1:5e:f3:
d7:9b:79:a3:0e:1f:be:fb:5a:6d:f6:b8:84:4f:f6:f3:f1:ad:
c6:d2:ad:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:26 2025 by rpki-client