Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
File: s5hg55nVMGYfFSE1RiKOmSmlPJw.mft (raw, json)
Hash identifier: 2jFkK+MfMR0NA8qD6J1YG87GrS3r3lPiRknlbTIz62I=
Subject key identifier: F3:D5:FB:86:70:9B:D2:23:D5:36:FD:C3:BB:DE:DC:41:29:2A:9D:AF
Authority key identifier: B3:98:60:E7:99:D5:30:66:1F:15:21:35:46:22:8E:99:29:A5:3C:9C
Certificate issuer: /CN=b39860e799d530661f15213546228e9929a53c9c
Certificate serial: 01976EBE3A6547B5CCD2CD86A15028E6EFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5hg55nVMGYfFSE1RiKOmSmlPJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
Manifest number: 0396
Signing time: Sat 14 Jun 2025 14:00:49 +0000
Manifest this update: Sat 14 Jun 2025 14:00:49 +0000
Manifest next update: Sun 15 Jun 2025 14:00:49 +0000
Files and hashes: 1: s5hg55nVMGYfFSE1RiKOmSmlPJw.crl (hash: CCZNpZegtNacbUbvYmgAxPVOdcFOSRch8pVLkdUsD54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5hg55nVMGYfFSE1RiKOmSmlPJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:3a:65:47:b5:cc:d2:cd:86:a1:50:28:e6:ef:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39860e799d530661f15213546228e9929a53c9c
Validity
Not Before: Jun 14 14:00:49 2025 GMT
Not After : Jun 15 14:00:49 2025 GMT
Subject: CN=f3d5fb86709bd223d536fdc3bbdedc41292a9daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:79:ee:89:32:17:7e:f8:a2:a3:3e:df:24:
f6:4c:d7:95:af:7c:0c:7a:c3:57:67:c8:09:9a:14:
83:ed:2b:16:b7:55:dc:b1:36:40:11:f1:97:1c:6d:
44:dc:e5:fe:3e:2d:e3:3e:67:bb:a8:ba:05:e4:71:
a9:8c:66:dd:de:89:b5:13:9f:82:ba:2b:ad:22:1b:
1a:00:36:46:ae:17:f4:d5:51:16:95:03:62:18:90:
7e:6e:6b:ce:f7:d1:59:e2:41:76:69:65:4a:2e:fd:
d9:30:e5:2b:12:88:b8:06:6b:87:91:94:b6:90:19:
6e:88:b7:00:1c:84:37:2b:27:39:8e:72:c8:ed:28:
56:d2:6a:7c:79:3c:28:23:73:a6:21:3d:28:cc:7b:
49:af:4d:55:a0:56:35:ed:c7:10:1c:55:65:8a:b9:
6c:f1:71:54:f3:9a:30:2f:e4:3a:c8:c3:79:6a:b9:
82:2b:6f:c5:cc:77:73:50:4a:06:9c:4f:d5:9e:5c:
66:41:21:2e:fd:5c:4f:c0:24:45:40:6a:a6:88:67:
ac:01:47:38:47:71:7b:c7:4f:ab:c9:cc:27:dd:61:
0f:fd:4e:7e:a8:8c:51:b5:31:e1:7c:8e:0d:f2:40:
42:68:c5:90:b9:3b:8d:79:3e:0e:21:f1:f2:cc:c4:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D5:FB:86:70:9B:D2:23:D5:36:FD:C3:BB:DE:DC:41:29:2A:9D:AF
X509v3 Authority Key Identifier:
keyid:B3:98:60:E7:99:D5:30:66:1F:15:21:35:46:22:8E:99:29:A5:3C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5hg55nVMGYfFSE1RiKOmSmlPJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:90:f4:6f:32:e5:dd:ff:0c:e9:87:0a:ed:d6:1a:04:d5:cd:
9a:2f:58:52:08:32:fb:a4:07:d4:51:9f:9b:0d:4a:a8:48:4f:
b2:06:7d:06:d2:26:66:f5:4a:60:0d:1f:6b:fc:8f:c3:2d:87:
67:39:bb:5e:6e:48:f3:6e:f0:7e:32:bd:bc:f1:7d:34:ec:28:
f3:12:96:3d:ae:d2:cf:35:6c:10:fb:51:7c:8c:ad:ac:ec:c8:
42:a7:2d:cb:3b:d2:50:70:88:c9:80:83:15:e2:a6:3d:df:9e:
83:64:f7:34:44:9d:66:61:d1:25:e4:35:23:54:31:eb:e4:7c:
97:0d:1a:61:c1:6e:ba:b0:83:15:33:e6:13:16:a0:01:cd:ec:
65:80:0c:70:99:44:80:bd:8f:6d:28:9c:69:b5:2b:ed:3f:fc:
b8:9e:f9:57:bb:5f:75:d4:95:5c:8d:9f:36:13:58:ac:a9:6e:
70:d3:96:1c:23:86:68:6e:b0:5a:15:6b:a6:2f:af:52:a5:4b:
ee:5e:6b:5f:5c:72:08:91:eb:c0:6e:80:d0:de:bc:eb:db:cc:
e6:97:dc:04:6e:52:5d:dd:65:f2:67:ed:cc:8c:66:4b:4d:50:
f0:c4:f7:fa:96:4c:fe:55:f0:73:da:93:dc:83:7c:9b:0e:06:
89:a5:52:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:33:32 2025 by rpki-client