Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
File: 5J_xmt1LshEp7ogjFL5zy3jM7bM.mft (raw, json)
Hash identifier: xIXfU1f0nS6yd5RTGlkkA57RRrCk+KaL7u7wYSqcsSs=
Subject key identifier: C9:DB:7F:AD:E4:A1:F6:47:94:03:AD:0B:71:11:45:89:8E:60:D5:22
Authority key identifier: E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
Certificate issuer: /CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Certificate serial: 0197B7B36F0B9093D12062F8E56831B2CD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
Manifest number: 06A7
Signing time: Sat 28 Jun 2025 18:01:19 +0000
Manifest this update: Sat 28 Jun 2025 18:01:19 +0000
Manifest next update: Sun 29 Jun 2025 18:01:19 +0000
Files and hashes: 1: 5J_xmt1LshEp7ogjFL5zy3jM7bM.crl (hash: aKsthaADHcVzblO0CfUOLTqk2SQrFwKFg1RmAhBXt60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:6f:0b:90:93:d1:20:62:f8:e5:68:31:b2:cd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Validity
Not Before: Jun 28 18:01:19 2025 GMT
Not After : Jun 29 18:01:19 2025 GMT
Subject: CN=c9db7fade4a1f6479403ad0b711145898e60d522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:3f:f7:ef:b3:b4:79:c8:33:83:34:97:c2:
ea:86:ef:ad:1f:78:13:36:a4:70:8c:7b:da:c5:9a:
81:06:43:b5:da:9a:e5:6c:15:7d:5f:a7:76:0b:01:
a4:b0:bf:eb:35:ff:33:63:35:cf:c7:ae:b7:59:d4:
0e:fa:33:d1:4a:08:3a:2f:98:83:09:b7:62:b1:02:
c2:90:60:53:15:bf:7f:e5:c5:d5:25:72:d1:61:40:
22:ad:38:5e:74:15:21:96:6d:cb:6f:d4:03:4b:6e:
07:08:f5:2b:69:4e:b1:31:91:f6:09:90:53:44:dc:
cf:0f:e3:18:3c:09:a1:be:2f:9d:5b:20:00:6c:25:
fe:db:78:af:80:42:b6:c9:25:7d:a7:d7:5a:bf:a5:
e1:43:83:de:ac:5e:ba:84:2a:59:98:28:89:04:07:
45:42:8a:04:43:ab:75:8b:aa:d3:63:22:b1:5c:0d:
a0:c1:ce:05:b4:5a:1f:94:f6:c8:05:81:80:a3:ff:
4a:be:e7:e2:70:27:2c:a2:6d:6f:8e:a8:5b:a4:a3:
e3:6d:a1:a7:b3:e7:6a:07:b4:1e:7c:10:ba:a4:cf:
e3:d9:ca:80:0e:72:39:c2:22:15:3f:9e:06:e8:ea:
fb:bf:d6:ff:ac:e5:8e:88:dc:89:af:a1:ab:83:8a:
af:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DB:7F:AD:E4:A1:F6:47:94:03:AD:0B:71:11:45:89:8E:60:D5:22
X509v3 Authority Key Identifier:
keyid:E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ab:c9:af:70:62:1a:e6:15:d7:16:d0:4d:ab:70:b7:ab:0f:
33:78:da:e1:a8:f0:93:9e:de:3c:04:73:d3:b3:26:97:68:3d:
a9:f6:0c:e4:63:52:4a:6c:18:0c:ec:36:8b:80:75:cd:8b:49:
21:a8:09:1e:2f:04:3f:f1:89:45:7e:66:1b:56:b9:a8:8b:75:
2c:fa:c7:a7:4d:36:3e:70:2d:f0:0b:46:02:d7:47:ce:02:69:
01:b9:97:3e:14:aa:d8:83:46:f0:c1:f8:e9:52:bf:d6:87:4f:
d5:5e:91:1b:aa:42:f8:38:c5:80:d7:fa:25:b8:68:52:10:aa:
eb:ea:db:0e:ac:84:ce:dc:af:a3:b9:c8:37:7b:ac:42:52:fc:
c7:39:95:45:3a:50:8d:da:e5:ef:60:b3:27:78:c2:75:26:6a:
48:a2:e9:59:6c:62:43:f8:a4:68:38:3a:71:44:7e:9d:8f:cd:
cf:14:f3:3f:b4:33:09:1d:50:7f:b2:e3:34:0c:e8:e9:bb:f8:
8f:c8:5b:47:6d:21:13:05:7b:ff:00:e0:14:3b:ed:53:2b:7b:
20:b1:b9:9d:2f:78:4f:55:69:d8:3f:56:9c:95:12:d6:1c:b6:
c0:06:6e:38:0f:3f:74:21:c4:bf:a3:47:11:1a:65:f0:f4:f1:
ad:63:64:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:31 2025 by rpki-client