Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
File: 5cePoZk9RRL-JDa4ztqL_JKdZX0.mft (raw, json)
Hash identifier: ehVmqL2gPUZyZh3LKQEHQjQBVSUBLU2F7rbqQPB8Ls4=
Subject key identifier: A6:7D:BA:9D:91:DC:BD:D4:24:96:C3:2C:5A:BF:7F:7B:DA:21:DC:75
Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
Certificate issuer: /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Certificate serial: 01976B85F804EA93CBD8E3AECD18124428C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
Manifest number: 08CE
Signing time: Fri 13 Jun 2025 23:00:31 +0000
Manifest this update: Fri 13 Jun 2025 23:00:31 +0000
Manifest next update: Sat 14 Jun 2025 23:00:31 +0000
Files and hashes: 1: 5cePoZk9RRL-JDa4ztqL_JKdZX0.crl (hash: ypqbkqXj6G32vRNbJIUHlRFWhit6YIBDjlg/uGLwZLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:85:f8:04:ea:93:cb:d8:e3:ae:cd:18:12:44:28:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Validity
Not Before: Jun 13 23:00:31 2025 GMT
Not After : Jun 14 23:00:31 2025 GMT
Subject: CN=a67dba9d91dcbdd42496c32c5abf7f7bda21dc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:7b:1c:46:bc:77:3e:fa:c2:c7:83:27:2a:
99:43:b4:59:7d:5c:ad:c8:b6:99:8e:27:18:8d:5b:
b4:2c:cf:57:d2:83:59:ca:84:ca:a1:e7:38:82:f6:
5a:8d:25:2f:d3:db:f6:13:f5:d6:ff:ed:a3:87:c1:
18:37:7c:e0:84:c8:89:23:01:52:c5:9c:6b:54:63:
a5:b0:04:1d:b3:48:95:91:9c:81:28:17:ff:45:47:
f6:87:a9:ac:b6:cd:37:fd:a9:b8:bc:f9:95:f3:f1:
cd:8f:95:2e:da:fb:17:6e:08:7c:a5:fc:7c:09:b3:
e3:7e:4f:22:7f:c9:3a:a8:c6:33:19:f8:f6:43:be:
bd:68:84:0e:e9:6b:6d:89:9f:48:c5:58:9a:a4:df:
5c:8d:eb:f6:c4:3f:af:7a:bb:7c:44:1d:d2:31:40:
a1:4a:24:52:23:f5:d4:96:1e:25:3e:b8:e4:0e:4e:
07:38:d1:7d:4e:61:1f:2f:f6:5f:e1:cb:5c:f3:c3:
fa:31:c1:ea:70:f2:5f:8e:16:dc:27:4e:89:b3:4e:
3f:25:71:e3:e4:2b:ed:56:df:9d:83:d3:34:6a:e8:
c7:ae:b9:89:b1:72:05:fd:9f:71:36:66:6a:5e:45:
37:f2:eb:97:ce:58:cc:31:49:8a:32:d6:ef:81:08:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7D:BA:9D:91:DC:BD:D4:24:96:C3:2C:5A:BF:7F:7B:DA:21:DC:75
X509v3 Authority Key Identifier:
keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:fa:25:04:28:4f:b5:f6:ab:55:12:d3:8b:d6:fb:b7:08:32:
42:ba:4e:2f:ef:bf:02:ed:ba:89:81:f7:da:46:e1:a8:de:47:
da:f0:97:09:11:0d:3e:96:9b:1d:ac:fc:51:a7:e1:f8:7c:b8:
06:d8:9e:82:ce:00:d9:9d:a4:2d:aa:1b:ac:b6:bf:84:72:62:
9f:e6:64:11:b0:2c:69:1a:be:9c:c2:2a:9c:0c:46:2e:2d:ed:
70:db:a6:e7:19:23:46:ca:52:42:9f:c8:dc:95:c7:ca:c4:1c:
d7:e5:79:0a:a2:3b:59:eb:2c:88:f2:1f:63:cf:14:dd:d9:89:
bc:74:0c:07:1d:ac:a9:9e:22:14:c9:c3:e7:79:4c:bd:c3:48:
08:95:eb:66:fb:b8:c2:3a:69:2d:1f:a5:b5:53:29:7c:9b:98:
c9:82:c9:0f:90:d7:81:7a:70:3d:96:54:d9:29:44:d9:d6:39:
80:b6:1b:99:1c:76:db:97:2a:03:9b:a1:59:90:b4:28:96:2b:
ee:4c:b6:40:5e:74:b1:31:83:16:b8:a4:db:77:17:9c:4b:95:
77:84:2f:b3:13:81:02:e5:15:22:52:54:67:e1:1a:f0:75:9b:
e5:40:25:92:88:35:4d:af:7f:0a:d7:1c:02:23:22:aa:b6:34:
b5:e5:63:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:49 2025 by rpki-client