Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: ymJq+7hQonvKiU2MaBXGLUProqvGgJqxIJDQGjfFyow=
Subject key identifier: 02:E6:B6:F4:28:9E:37:6F:ED:1D:31:3F:2A:45:93:20:6C:9E:BC:06
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 019768BBC46ADC2B42AD092E3239E02D8432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0AAF
Signing time: Fri 13 Jun 2025 10:00:25 +0000
Manifest this update: Fri 13 Jun 2025 10:00:25 +0000
Manifest next update: Sat 14 Jun 2025 10:00:25 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: hDZ1jCgKLzIniB5S8CHZa8HAffKLmRMxhBsMddJJxwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:c4:6a:dc:2b:42:ad:09:2e:32:39:e0:2d:84:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Jun 13 10:00:25 2025 GMT
Not After : Jun 14 10:00:25 2025 GMT
Subject: CN=02e6b6f4289e376fed1d313f2a4593206c9ebc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:81:39:e6:18:87:d6:4e:77:28:43:78:e6:
55:26:df:37:2f:b4:86:4f:75:b2:58:6e:ab:d3:0a:
36:fd:3b:87:34:a4:0f:ec:7a:10:19:a8:d3:7e:92:
8f:9a:5b:c1:a0:ee:98:f2:99:2d:4e:c1:02:c5:05:
26:4e:82:08:fd:ba:32:a6:a6:d9:2a:01:d0:f6:1b:
38:98:c1:10:20:82:b1:d2:7d:f7:b4:88:16:9c:c0:
35:40:3f:54:e7:19:1b:2e:08:31:bd:9e:81:60:5d:
63:40:0b:9c:a6:50:60:c9:91:76:72:cf:fd:45:11:
9d:29:22:e3:a9:82:e6:c8:06:2e:4b:d5:a5:c5:ca:
2a:d3:9a:78:c6:0d:9b:ea:ce:be:c7:6b:cc:96:0b:
bc:c7:84:2d:ba:2e:d5:d3:a7:19:77:c3:e7:05:7c:
4a:06:01:b1:08:27:ac:c4:d6:05:60:30:ce:9a:5b:
fe:ac:d8:82:3e:21:90:60:e6:1b:ec:72:b5:64:08:
ab:12:53:42:56:43:45:10:73:0e:63:78:aa:90:e7:
72:0a:c5:79:33:01:13:cf:cc:d6:5d:ab:57:1c:e8:
19:ec:c2:b3:76:cc:18:cf:17:a6:25:ba:c2:c8:a8:
6e:bb:89:25:db:fc:04:15:aa:b5:01:7c:a5:6b:7c:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E6:B6:F4:28:9E:37:6F:ED:1D:31:3F:2A:45:93:20:6C:9E:BC:06
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f9:d3:1f:22:05:55:7c:3b:53:1c:ab:55:48:e9:ff:9e:6d:
e2:2d:1f:29:1c:78:3b:13:dc:4d:fb:9a:72:fe:6f:d5:d2:8e:
07:ad:cc:64:d0:1e:b3:c5:46:08:c2:7d:6e:25:d5:bd:89:01:
7a:be:6d:5f:14:74:35:d7:27:ec:a0:d3:10:8c:ca:b2:da:76:
7f:86:39:cb:23:02:f1:29:ed:54:f4:4c:cd:38:9e:c3:04:6f:
70:e6:1b:0d:09:8e:fc:12:f4:bd:d1:d7:b4:4e:cd:e9:b4:53:
8b:c4:52:75:e6:38:e9:2b:8a:12:03:8c:21:c5:be:75:25:2d:
48:5a:4a:f4:23:a7:6f:04:32:e7:7e:84:bb:08:c6:55:d5:3f:
86:2a:05:d7:79:73:41:8a:01:7f:95:23:45:5c:aa:16:f9:04:
31:1a:1e:ed:6d:c6:80:c8:5f:8f:20:df:c9:e8:d0:13:54:d4:
b5:df:77:ff:ae:fd:5b:f9:fa:54:6a:7d:db:81:10:3c:ab:04:
ac:05:a4:14:b5:f0:cc:e3:2e:e1:a8:82:c1:8a:e5:69:06:4a:
0f:36:45:c2:bd:25:0b:a9:0b:62:ee:78:45:c9:85:be:a9:be:
12:f3:96:90:2a:04:e5:b4:15:1c:2f:bb:ee:62:f2:07:bb:bf:
79:cd:17:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:59 2025 by rpki-client