Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
File: 5OIv9yeFHntJFhTwetExVxQcwwk.mft (raw, json)
Hash identifier: S2tNuyowex9vMFa7xNqlgmm0YMG0THRCVWdvcKKhbyg=
Subject key identifier: F6:05:CC:55:16:29:E8:CC:8E:EC:BF:3F:33:FA:05:20:3C:AB:7D:8F
Authority key identifier: E4:E2:2F:F7:27:85:1E:7B:49:16:14:F0:7A:D1:31:57:14:1C:C3:09
Certificate issuer: /CN=e4e22ff727851e7b491614f07ad13157141cc309
Certificate serial: 0197B77C21633E1F3AE311C4382AFA1946A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
Manifest number: 1464
Signing time: Sat 28 Jun 2025 17:00:54 +0000
Manifest this update: Sat 28 Jun 2025 17:00:54 +0000
Manifest next update: Sun 29 Jun 2025 17:00:54 +0000
Files and hashes: 1: 5OIv9yeFHntJFhTwetExVxQcwwk.crl (hash: 44nuaWhvey+ENpt3Qj3uQe7f0YUROxJ1OvTji87OZYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:21:63:3e:1f:3a:e3:11:c4:38:2a:fa:19:46:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e22ff727851e7b491614f07ad13157141cc309
Validity
Not Before: Jun 28 17:00:54 2025 GMT
Not After : Jun 29 17:00:54 2025 GMT
Subject: CN=f605cc551629e8cc8eecbf3f33fa05203cab7d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:8f:3a:dc:bf:66:df:92:f5:27:de:91:59:
e7:cc:77:72:88:56:3c:55:71:47:09:38:dd:22:0d:
32:b0:7a:66:08:94:9c:bb:8f:4c:22:87:65:e3:9e:
93:35:04:a9:b6:47:29:04:26:37:3d:50:8e:69:1b:
f9:43:da:38:e4:8f:65:fe:a4:b8:09:fa:21:76:bc:
24:e2:7b:ef:72:95:18:95:c3:6a:72:44:de:3a:8d:
b6:2e:d2:53:4a:b4:a5:38:b0:0b:85:09:fb:ac:b6:
c7:23:02:97:02:ab:bc:25:e8:71:e7:6e:ae:88:5b:
fe:3c:b3:b6:a5:46:ff:10:42:9d:6d:e0:a5:ed:74:
25:5a:b3:a8:2f:61:27:53:ab:f1:3f:86:07:cf:da:
f7:d6:f4:3d:bd:29:b4:62:0e:6c:48:0c:74:09:60:
92:db:1c:a5:c0:91:03:e8:19:27:a7:bc:2b:5c:41:
99:d4:8b:26:23:a6:ae:74:d4:53:45:17:6e:9d:ed:
51:91:76:27:5b:64:0c:67:0f:96:71:41:ff:77:70:
35:56:df:44:ab:c9:3c:c5:a0:18:53:1a:02:8b:4f:
23:f0:9a:c9:7a:cb:4a:e1:a0:f2:05:16:31:de:30:
da:9d:ee:41:50:7d:e4:67:33:74:f2:0c:4a:d4:83:
58:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:05:CC:55:16:29:E8:CC:8E:EC:BF:3F:33:FA:05:20:3C:AB:7D:8F
X509v3 Authority Key Identifier:
keyid:E4:E2:2F:F7:27:85:1E:7B:49:16:14:F0:7A:D1:31:57:14:1C:C3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:41:4e:1e:35:ca:10:dd:96:66:8b:6f:6d:5e:3c:d0:8c:f1:
9f:83:ea:9f:b6:80:d2:6c:90:18:ad:d9:93:42:d3:87:4b:7d:
b5:52:e7:22:99:4c:e8:de:3a:bb:5d:e4:01:e1:53:50:f5:d2:
ae:85:1d:83:b7:79:34:ca:1d:11:21:6f:58:21:5d:69:97:d8:
22:9d:9a:0b:0c:c8:0c:48:a1:2d:1e:0f:08:38:83:7c:63:ba:
9a:7d:63:a5:ff:e4:73:f8:49:a1:8e:91:1c:6f:80:30:0a:e0:
c6:24:e4:e0:4c:82:88:ad:1c:de:eb:32:1d:19:ce:ff:47:97:
24:64:d2:44:43:b5:61:7c:f0:76:a1:00:70:86:56:39:0f:3e:
1f:1e:0b:c2:f5:bf:c8:e5:21:b8:3c:b5:a4:5b:1f:67:bc:07:
94:52:96:4f:70:89:01:0f:8e:e1:73:40:fb:4f:f9:1d:72:43:
d3:d6:73:41:76:08:6a:61:94:78:90:e6:71:7b:29:d2:c0:0b:
0d:56:1d:78:e0:4c:b1:0f:f6:85:44:22:07:bb:2d:c7:ea:de:
44:d2:9f:5c:d4:41:07:fd:8c:33:4a:ee:c7:69:ff:45:92:56:
31:05:9a:c6:49:88:36:df:24:71:e4:59:3a:ff:04:6f:28:36:
fb:1c:a5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:55 2025 by rpki-client