Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
File: A5D0YbjFGyArIQDfLMQzD2kiGME.mft (raw, json)
Hash identifier: rrNE1n0dGst6TNO4Ia6uWl0nt5DyQWnMgePgj3MJkJU=
Subject key identifier: AE:A2:B5:24:9D:BE:D6:FE:28:2E:5B:B5:81:DB:A2:FE:8C:99:BD:B3
Authority key identifier: 03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
Certificate issuer: /CN=0390f461b8c51b202b2100df2cc4330f692218c1
Certificate serial: 0197B5FBAD9B50E5728F815D94AEE52FF9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
Manifest number: 1542
Signing time: Sat 28 Jun 2025 10:00:59 +0000
Manifest this update: Sat 28 Jun 2025 10:00:59 +0000
Manifest next update: Sun 29 Jun 2025 10:00:59 +0000
Files and hashes: 1: A5D0YbjFGyArIQDfLMQzD2kiGME.crl (hash: Il+oQAI6nkomwIXRJX0HRXKwegGuTSxpWLcoOZE0pJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:ad:9b:50:e5:72:8f:81:5d:94:ae:e5:2f:f9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0390f461b8c51b202b2100df2cc4330f692218c1
Validity
Not Before: Jun 28 10:00:59 2025 GMT
Not After : Jun 29 10:00:59 2025 GMT
Subject: CN=aea2b5249dbed6fe282e5bb581dba2fe8c99bdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:02:57:76:57:9d:a1:2b:ce:b1:9a:c2:bf:
a7:72:45:69:a8:29:63:e5:85:4a:5e:ef:33:10:9f:
d0:a2:e2:90:da:4d:f7:3c:2e:ae:ab:83:86:f7:fa:
6f:93:16:d7:68:32:32:46:96:3a:be:ca:20:f6:c6:
1e:97:9e:ca:7b:02:49:94:ea:a2:83:12:60:68:13:
e7:e3:e2:f2:e6:d8:a3:41:b2:24:53:95:5a:7f:52:
e9:f5:40:24:7b:7a:49:e6:b4:a9:1c:59:19:26:a2:
a5:7f:d6:1b:ec:84:7d:c1:db:d6:13:52:fa:44:48:
e8:c6:66:51:91:8f:29:36:59:fa:93:f1:d0:e6:1b:
85:82:7f:c8:28:9a:ab:24:00:f3:83:2e:30:78:f6:
76:7b:ca:50:7b:8c:14:f3:5e:d5:80:10:31:cd:1a:
e1:f8:c5:06:c9:04:06:83:21:9f:f6:0e:2f:a7:2b:
d0:70:69:4c:09:da:9d:56:41:30:ab:f7:fc:ce:8f:
1b:fa:3a:b1:2a:0c:74:4f:34:f1:8c:fa:70:0e:3d:
33:1c:2f:1c:03:9c:e9:ef:c1:fd:52:55:bb:06:36:
e0:ab:0f:79:6d:e1:49:f8:a3:ef:c1:13:25:3b:c9:
85:4c:e6:58:e2:41:d2:32:93:9b:84:6e:53:42:90:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A2:B5:24:9D:BE:D6:FE:28:2E:5B:B5:81:DB:A2:FE:8C:99:BD:B3
X509v3 Authority Key Identifier:
keyid:03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3f:9a:2b:a2:2d:8c:1e:b8:2e:1e:42:cd:2a:7d:f0:64:2e:
bf:36:28:d0:f2:61:1b:eb:80:5a:61:2b:00:37:39:c4:bb:5f:
3d:74:a3:49:95:22:9a:1d:b9:76:16:5e:15:1b:3b:87:a4:a5:
bd:d2:92:eb:91:be:38:18:81:65:3c:9e:25:eb:22:36:de:5d:
fc:43:17:95:16:ee:87:0a:e9:ea:03:00:7c:cf:08:dd:3a:7e:
79:48:e2:74:77:fe:2e:ec:5c:5f:4a:4d:2e:0a:6d:3f:91:2f:
bf:ae:78:fe:79:74:6f:f0:ed:50:9f:0d:92:e8:ba:6a:c9:dd:
a4:0f:5c:e8:3f:78:38:04:81:41:ae:08:8a:a8:9d:a0:08:04:
e3:8b:36:4e:f2:d5:21:02:bf:9c:9a:80:1d:34:01:20:8f:fc:
6e:7c:81:a7:ad:f9:89:22:6c:19:a1:30:fc:69:b9:1f:34:32:
26:22:56:af:5b:56:99:5d:e2:ec:3e:1b:ac:e9:65:3c:8c:67:
c9:13:28:19:fc:f6:66:43:70:6a:ec:b9:73:92:04:44:23:54:
f5:1b:67:f2:de:09:d8:a7:04:a3:97:09:13:7f:47:f0:6f:12:
f2:b2:4f:46:3c:bb:58:d7:0a:3f:87:67:ad:fe:7c:05:9b:89:
5f:9e:6a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:37 2025 by rpki-client