Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
File: 5cePoZk9RRL-JDa4ztqL_JKdZX0.mft (raw, json)
Hash identifier: sDqpHnAGSCKdTv4fFwKwXI9VkfcblzVL0mBvhc4o4HA=
Subject key identifier: 0A:87:26:8C:34:B9:66:8C:D2:41:37:FE:EF:31:99:1B:D8:91:23:73
Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
Certificate issuer: /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Certificate serial: 019874193B78CB368029FE9080150F73879A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
Manifest number: 0957
Signing time: Mon 04 Aug 2025 08:01:07 +0000
Manifest this update: Mon 04 Aug 2025 08:01:07 +0000
Manifest next update: Tue 05 Aug 2025 08:01:07 +0000
Files and hashes: 1: 5cePoZk9RRL-JDa4ztqL_JKdZX0.crl (hash: WdJliugGmWHXdWNkr80+x6m9e/iLUBzVVBFkF9GHB8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:3b:78:cb:36:80:29:fe:90:80:15:0f:73:87:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Validity
Not Before: Aug 4 08:01:07 2025 GMT
Not After : Aug 5 08:01:07 2025 GMT
Subject: CN=0a87268c34b9668cd24137feef31991bd8912373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:85:1f:48:74:a1:89:90:a1:e7:63:fd:5a:39:
44:19:5d:8b:c0:eb:25:ca:d9:d0:2e:e8:2f:f1:e7:
47:e1:8d:13:1b:53:9c:4b:49:69:b0:a3:88:06:91:
9c:99:af:84:49:3b:67:4c:a3:95:c1:4b:f6:82:db:
6f:88:00:37:0c:93:c4:c7:1b:61:f2:0e:74:ee:c1:
c3:d2:13:6f:e7:64:95:a7:18:42:8a:ce:1a:f2:c7:
f0:4d:75:5b:bf:97:0b:25:43:55:6d:d1:0f:d8:a8:
6a:5b:69:0f:7e:b7:0c:93:bf:a0:13:57:63:b3:1e:
24:fc:4c:6b:70:a9:e5:09:00:bc:47:2f:54:6c:fc:
99:b1:7b:1e:c7:dc:df:2f:5b:72:c5:88:e7:6e:f9:
2d:03:df:bb:ef:14:77:d0:9b:c1:13:e1:f8:b4:f9:
a8:39:af:ae:c3:24:56:19:cd:d0:3d:06:e5:30:26:
42:48:88:cb:75:b7:db:ff:b7:9d:4d:a5:a2:38:1b:
53:28:d1:43:ea:50:84:a2:2a:da:25:9a:b1:a8:6f:
35:d2:1e:88:0c:23:53:d6:8c:a2:20:5b:e3:9d:10:
60:44:29:b6:4b:21:77:4a:52:db:8d:b4:20:d0:99:
02:72:f4:a2:7b:fd:5c:3b:07:a0:89:4a:44:e6:66:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:87:26:8C:34:B9:66:8C:D2:41:37:FE:EF:31:99:1B:D8:91:23:73
X509v3 Authority Key Identifier:
keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:11:15:56:09:cf:a3:0d:29:00:40:19:ad:91:31:37:96:b3:
0f:4c:1f:3b:90:1c:9e:ca:8e:63:62:b9:58:47:ed:0c:cc:6d:
c3:6d:3d:67:5d:9d:be:43:d9:8e:30:0e:9a:5d:1a:0f:d4:e2:
f6:43:5d:63:b3:d8:8e:2d:f4:ab:45:0a:a5:e0:be:a9:3a:f6:
cb:48:83:8f:64:34:c6:7a:00:4d:fd:27:aa:05:f9:de:1a:c8:
c5:05:ef:f0:18:06:ca:a2:c8:c8:0d:27:71:24:5e:06:8c:16:
eb:7d:df:46:49:e2:c5:11:13:5e:94:0a:0b:fc:4d:66:84:1d:
63:df:f9:66:ec:39:7b:c5:45:6f:c8:fe:5c:a5:f6:63:85:2c:
56:13:b7:89:0f:04:7b:48:c3:ad:63:35:4a:fb:62:d0:79:50:
6a:e6:d8:a1:26:bb:3a:39:57:62:8d:ce:b9:e2:ab:e7:b0:7f:
41:52:7c:9a:3a:0d:d9:80:3b:92:bd:f8:18:db:c0:81:fd:c8:
18:92:d2:e6:e5:bd:b5:0f:df:6f:ec:07:1f:56:71:28:dc:67:
96:94:65:e0:dd:02:23:bf:b4:fd:45:ab:01:5f:7a:cd:e5:94:
c9:8f:a8:9c:ad:88:8f:46:b0:80:8b:25:6c:dd:98:74:2c:bf:
c9:0d:5f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:15 2025 by rpki-client