Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: ciXe5RPpZg7EqxJqAeulL0vNohxkn+CkIOuXBzqqdFM=
Subject key identifier: 91:2B:19:CD:5E:29:69:0B:A0:B2:DA:01:28:C3:B9:FE:DB:B6:D5:A4
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 0198733DBC6C6017CC58ABDA0C4E07E20635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0B39
Signing time: Mon 04 Aug 2025 04:01:22 +0000
Manifest this update: Mon 04 Aug 2025 04:01:22 +0000
Manifest next update: Tue 05 Aug 2025 04:01:22 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: ep0Ub2utXzpXG+6VRrbQG/5QK8yR5aSZTdd3DzR6q/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:bc:6c:60:17:cc:58:ab:da:0c:4e:07:e2:06:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Aug 4 04:01:22 2025 GMT
Not After : Aug 5 04:01:22 2025 GMT
Subject: CN=912b19cd5e29690ba0b2da0128c3b9fedbb6d5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b0:60:57:7f:f5:b0:4b:54:53:7f:fe:24:24:
35:2b:7b:29:28:b1:ed:e7:55:b5:d6:d3:90:71:72:
ad:b4:87:c7:cc:ba:86:ed:23:b2:49:dc:cc:dd:d9:
9d:e3:10:09:f0:9d:cd:7e:93:3d:a4:06:b2:88:f0:
1e:62:f8:b5:84:37:5c:9c:78:9e:7a:3c:a1:f9:66:
e5:b7:97:10:a9:c8:f9:3e:d7:74:ec:15:08:8c:10:
af:73:0c:a8:bd:7b:0d:32:4f:a4:2b:aa:68:db:b5:
6e:0d:a5:af:3d:dd:60:76:1a:35:92:d4:1e:86:14:
56:cc:0c:0f:ca:5d:22:63:c3:78:55:30:57:49:68:
da:11:98:66:eb:66:0f:48:7a:41:24:a9:4a:42:59:
e7:38:ed:1f:f6:8b:80:a8:9b:6c:44:b2:75:f5:c0:
a0:99:69:89:b7:2f:ca:14:5e:94:96:ab:7b:c0:df:
ae:8c:7d:ff:3e:1d:de:5c:4d:cd:47:a2:f0:d3:9a:
b8:12:35:c4:83:98:65:e3:ef:59:20:37:2a:36:85:
4e:4e:5c:9d:85:d1:0b:cf:f4:3f:64:23:79:8e:43:
d1:a6:e5:93:0a:1b:b8:4c:d7:09:c5:94:ea:18:8b:
0f:b4:b5:d1:1c:73:00:bf:28:1d:54:5a:fc:1e:74:
a5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2B:19:CD:5E:29:69:0B:A0:B2:DA:01:28:C3:B9:FE:DB:B6:D5:A4
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a8:5c:82:59:1f:61:73:45:5e:d2:9d:0b:f7:af:6f:b0:37:
7d:5c:b1:b0:df:64:c3:04:ce:f3:80:64:ed:c2:62:da:0e:57:
1b:7e:c5:f6:c4:f8:f4:bd:0e:69:b9:c5:0f:07:b2:0d:6b:85:
20:bd:cd:3d:92:46:04:55:1b:28:bf:c6:5d:07:a3:6a:66:75:
36:1f:31:bb:60:a1:5c:37:53:16:cb:c5:4f:9c:3d:7b:41:71:
77:21:b9:e7:ac:f9:c1:fb:88:24:7a:16:ed:71:9e:7c:13:4a:
c2:29:0a:29:75:05:f0:87:33:de:a5:f4:aa:9f:9d:e0:77:a7:
1b:ad:35:8d:94:3b:43:fc:2b:b9:85:6d:bd:b2:50:c7:97:19:
68:96:f3:de:9c:ae:7b:a1:16:d8:fa:64:51:50:0e:44:88:ee:
ad:05:a7:2f:5a:b8:1a:5b:c7:e8:e9:23:fc:3a:41:c2:e2:a4:
db:f9:df:57:3d:d4:42:bd:20:cf:65:d5:1d:ba:81:bd:2f:71:
bd:a8:7f:ac:b0:55:b8:2c:c7:a6:59:ce:d5:42:62:e0:cd:ac:
9b:94:1f:5d:fa:ec:ac:17:bb:1b:ba:33:5e:f8:57:2b:8e:bd:
ba:6e:2b:83:d3:51:28:13:e5:46:25:2a:90:a3:95:60:c1:62:
46:e7:13:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:40 2025 by rpki-client