Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
File: 1K5pV43Ol3ozqindV8oZD6aHd_o.mft (raw, json)
Hash identifier: GW0W0q4ApFu/QdARyyfNBdu+97R29rkpmDRWnZXCI1g=
Subject key identifier: AB:F1:E6:E1:0B:1E:28:FC:55:8A:18:0E:4D:AD:44:9E:64:62:B9:E6
Authority key identifier: D4:AE:69:57:8D:CE:97:7A:33:AA:29:DD:57:CA:19:0F:A6:87:77:FA
Certificate issuer: /CN=d4ae69578dce977a33aa29dd57ca190fa68777fa
Certificate serial: 01976D3DD60A1D5D333514CFBAAF9914818A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
Manifest number: 0C05
Signing time: Sat 14 Jun 2025 07:00:58 +0000
Manifest this update: Sat 14 Jun 2025 07:00:58 +0000
Manifest next update: Sun 15 Jun 2025 07:00:58 +0000
Files and hashes: 1: 1K5pV43Ol3ozqindV8oZD6aHd_o.crl (hash: B8xYDnVT4shOBG4XhxmQcIKtHBtp64hWjx8vabWCTyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:d6:0a:1d:5d:33:35:14:cf:ba:af:99:14:81:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ae69578dce977a33aa29dd57ca190fa68777fa
Validity
Not Before: Jun 14 07:00:58 2025 GMT
Not After : Jun 15 07:00:58 2025 GMT
Subject: CN=abf1e6e10b1e28fc558a180e4dad449e6462b9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:04:2b:12:4b:c6:5a:a3:c1:91:fb:e8:b0:2f:
db:e7:ca:ce:7d:cb:87:21:61:e9:4c:92:9c:f0:0c:
fa:6a:7a:39:6f:af:ab:14:1e:1b:b4:11:ff:71:50:
ef:ab:55:bd:9b:0e:d0:d7:2c:9f:a9:aa:45:93:96:
ac:03:54:2c:d0:aa:e2:fc:75:4c:8c:7f:6c:57:f8:
12:cf:a7:e1:30:74:81:e6:47:df:f3:0c:8b:75:21:
a7:c3:07:7e:48:64:bf:57:13:9d:3e:55:70:99:57:
40:25:91:3e:04:b0:01:46:a2:26:df:94:e7:d0:f5:
83:2e:fb:e8:ef:0a:e0:50:da:09:41:50:43:f3:46:
97:de:30:ff:57:81:1f:61:de:5b:40:79:87:8a:81:
11:99:16:e6:9f:c7:7e:0f:3e:f9:06:a6:11:bf:07:
78:e0:90:e9:33:86:dd:1e:ed:d8:28:eb:0b:6e:79:
77:d2:66:44:6e:ab:6c:77:c1:a0:a3:7c:7e:89:3b:
11:e7:b6:b2:9d:da:29:33:38:3d:69:24:ef:0e:4d:
8e:73:6a:2e:b4:ff:07:d9:df:20:79:ad:4c:57:78:
d5:8f:ea:62:ec:6c:29:76:45:18:45:ba:7f:c7:bb:
7b:90:9b:d5:14:96:93:cb:cf:13:e3:8f:6b:61:b9:
d3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F1:E6:E1:0B:1E:28:FC:55:8A:18:0E:4D:AD:44:9E:64:62:B9:E6
X509v3 Authority Key Identifier:
keyid:D4:AE:69:57:8D:CE:97:7A:33:AA:29:DD:57:CA:19:0F:A6:87:77:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b2:b9:f0:78:da:03:8d:3e:a7:c3:7c:d9:66:ff:b3:c0:87:
89:49:8e:75:c1:d6:0a:6e:2f:09:96:9a:eb:24:83:06:1c:5e:
10:09:4f:8e:70:11:35:19:1f:e4:9f:65:fa:d4:a3:75:e0:21:
e5:a6:34:05:f5:04:74:0b:8c:71:a6:2a:ce:01:dc:be:2f:90:
f7:f3:17:9e:a1:f2:bf:b4:1a:66:d9:f7:bb:d5:28:a4:c1:f9:
71:2f:e4:bf:8d:0d:39:65:e9:9f:64:c5:9e:0b:75:1b:4e:7e:
68:a8:e4:20:87:86:58:9b:c2:7d:e0:4a:25:bc:47:29:c2:67:
f9:77:c9:5d:17:c5:1e:7e:c9:17:ed:e3:45:72:76:f9:17:40:
ea:9d:19:31:50:bb:8e:69:f7:d1:7f:9b:27:cd:d1:05:b9:7e:
12:80:12:84:0e:6f:0e:80:78:b8:f1:eb:15:1c:62:38:85:ff:
7d:59:04:bc:b5:12:54:ee:65:81:29:60:fc:1d:6f:fa:39:ad:
7f:f2:27:20:ed:e3:b8:1c:55:a5:41:a3:6b:ad:ea:b7:c2:29:
e0:d0:74:16:ba:d9:88:04:94:d9:37:59:0e:e6:03:2e:a9:48:
54:df:f7:20:05:70:c7:15:12:e6:29:19:24:84:0d:42:ba:cd:
d7:71:0b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:49 2025 by rpki-client