Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
File: 5llE5PrhnBWib8tfJzL_G6I9NU0.mft (raw, json)
Hash identifier: lAQQpMnFlzlmxiT9F0s9NKINDWbGzZpw+UulcJkuxws=
Subject key identifier: D5:18:64:DC:CA:69:6A:0F:93:85:C4:DB:2D:7F:CA:15:94:93:87:60
Authority key identifier: E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
Certificate issuer: /CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Certificate serial: 01977753224F393B1B8892C6FD190EA2257E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
Manifest number: 0253
Signing time: Mon 16 Jun 2025 06:00:26 +0000
Manifest this update: Mon 16 Jun 2025 06:00:26 +0000
Manifest next update: Tue 17 Jun 2025 06:00:26 +0000
Files and hashes: 1: 5llE5PrhnBWib8tfJzL_G6I9NU0.crl (hash: QKw4i9AwmrxgJzGz3AD4pj6csd8hW53FSFIHDxry/bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:22:4f:39:3b:1b:88:92:c6:fd:19:0e:a2:25:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Validity
Not Before: Jun 16 06:00:26 2025 GMT
Not After : Jun 17 06:00:26 2025 GMT
Subject: CN=d51864dcca696a0f9385c4db2d7fca1594938760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:71:72:63:5b:73:42:10:68:21:76:bc:34:
7e:fc:e8:f2:e9:96:04:73:41:d0:9c:75:35:2d:51:
ac:49:dc:bc:06:b4:90:7f:32:5b:b3:44:29:5a:45:
cc:fe:f6:89:91:e7:3d:d6:1d:0d:ef:bd:a3:96:56:
58:43:42:7c:32:5f:19:6d:ad:c1:ee:54:5c:7d:13:
9d:fe:d7:a6:64:1a:31:a2:d9:6b:33:ee:34:7f:df:
44:cc:2a:fa:8e:2c:0e:6c:c3:49:9b:69:35:be:a6:
40:9b:1d:64:04:c7:96:bf:b3:6a:58:da:9c:ab:05:
a0:26:af:f3:73:f1:f1:99:2a:c1:6b:b1:cf:77:01:
23:51:83:61:3f:41:8b:87:82:e2:51:cb:cd:6a:4c:
aa:ac:a0:34:59:dc:fa:be:3e:bb:e9:7e:68:60:0f:
c7:fe:f4:c8:1c:df:a3:85:6b:3e:55:6d:d9:ae:ce:
0e:63:83:50:04:2f:ea:6d:39:9f:3e:47:0c:d0:4b:
b0:ad:c7:ba:e4:b3:83:7b:29:e8:65:8d:40:de:8e:
b8:e8:5f:ab:ae:20:05:cc:4e:de:65:bd:48:c3:d4:
bc:d1:5f:70:63:9a:22:06:e2:44:0c:ce:d8:d6:0f:
55:5d:4a:ea:d8:88:4e:c2:b2:38:83:79:8d:dc:62:
65:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:18:64:DC:CA:69:6A:0F:93:85:C4:DB:2D:7F:CA:15:94:93:87:60
X509v3 Authority Key Identifier:
keyid:E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b3:cc:b7:50:31:96:e6:88:27:13:50:7d:81:d8:a2:eb:ac:
85:51:eb:0e:97:63:93:7c:72:17:41:a6:8f:6d:fc:c4:e4:d9:
81:c9:54:9a:9f:da:0c:c2:76:af:92:4c:45:a9:2e:54:a8:da:
99:a2:b5:d6:6a:2d:8e:af:ef:bc:1f:d2:64:18:ab:1e:06:8f:
2e:24:3b:a7:72:1e:4a:04:8c:94:0b:f8:98:bd:4d:d3:55:61:
83:35:f8:8e:df:0b:69:e7:9a:b6:88:8b:60:5f:11:f8:33:1e:
fc:1f:cd:0d:0d:92:6d:43:0c:81:78:78:97:31:2a:40:fc:31:
42:42:9b:d5:fd:1d:d3:8a:8e:09:11:2d:0e:39:71:a5:29:c2:
8d:78:58:a8:6f:90:bd:c5:15:bf:f0:6b:d7:4e:d6:cd:22:44:
b2:12:ec:1a:56:53:53:96:24:6b:a4:6d:a8:04:54:4f:ea:ac:
ba:5f:2d:70:10:78:b9:7b:db:48:04:6a:1b:6e:d7:16:cf:04:
bf:84:15:89:d7:39:82:84:68:97:84:80:f6:69:ba:c3:04:54:
cd:17:16:d8:18:03:1e:90:d4:45:f5:51:a3:c7:1e:d0:35:7c:
56:f0:bf:61:bf:49:40:ef:47:96:a1:a4:2f:82:c8:fd:22:16:
61:8e:e5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:52:12 2025 by rpki-client