Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
File: V25aWVM8ptDwtIgH0Md-FWhgTl4.mft (raw, json)
Hash identifier: UYxPHlcQORj8yNp+DeQXwsmN9loDH/HOk3OpSfJir4A=
Subject key identifier: BD:05:BC:C7:16:CD:F0:8A:BD:D2:AF:6B:CE:B8:66:0B:02:B3:BE:7C
Authority key identifier: 57:6E:5A:59:53:3C:A6:D0:F0:B4:88:07:D0:C7:7E:15:68:60:4E:5E
Certificate issuer: /CN=576e5a59533ca6d0f0b48807d0c77e1568604e5e
Certificate serial: 01977188C62EE2896709454702AAD1523A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
Manifest number: 05D2
Signing time: Sun 15 Jun 2025 03:01:18 +0000
Manifest this update: Sun 15 Jun 2025 03:01:18 +0000
Manifest next update: Mon 16 Jun 2025 03:01:18 +0000
Files and hashes: 1: V25aWVM8ptDwtIgH0Md-FWhgTl4.crl (hash: olpobdWw44SkvgWs9Z1gmZCUinnQ/zRBIlqLj9bANi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:c6:2e:e2:89:67:09:45:47:02:aa:d1:52:3a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576e5a59533ca6d0f0b48807d0c77e1568604e5e
Validity
Not Before: Jun 15 03:01:18 2025 GMT
Not After : Jun 16 03:01:18 2025 GMT
Subject: CN=bd05bcc716cdf08abdd2af6bceb8660b02b3be7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:50:f7:0a:01:96:a7:d9:85:7f:58:c1:56:
0b:82:43:c3:ac:47:f6:33:15:64:82:b2:cc:94:28:
aa:3e:d2:e9:55:6e:f5:e4:2a:04:2c:43:02:60:a5:
7a:ee:76:61:bf:90:7b:79:ff:35:aa:e2:c6:29:6c:
aa:95:a5:8e:b7:28:bd:0e:4a:09:36:9d:1e:c6:d2:
5c:f5:fd:aa:a4:06:3c:e6:4b:77:dc:08:bf:76:10:
52:9e:89:13:0f:49:bc:80:de:0e:16:48:d0:5f:9e:
b2:05:20:84:1f:24:18:53:95:48:3c:a8:aa:60:89:
b2:31:15:b2:23:57:19:49:42:97:f4:0e:df:dc:5f:
1a:b1:b9:66:2f:1b:14:5a:10:da:78:60:65:fc:ae:
42:81:ad:ac:e0:56:ae:3f:6a:62:38:81:46:ae:10:
bf:38:2a:6b:d0:44:6b:b4:90:a9:79:02:80:9b:c4:
a8:85:50:6d:10:b2:1f:f7:1c:c6:b8:6e:d9:7a:6a:
7e:88:99:17:23:1f:7d:a6:bb:58:72:bb:6a:9a:7b:
72:7a:4a:1d:4d:29:0e:42:04:42:2d:f2:dc:39:0b:
03:ec:24:df:7a:e2:a4:fd:ab:4f:ce:5e:7b:43:f5:
0a:d0:77:db:f4:08:77:09:14:a2:29:7b:76:bb:1a:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:05:BC:C7:16:CD:F0:8A:BD:D2:AF:6B:CE:B8:66:0B:02:B3:BE:7C
X509v3 Authority Key Identifier:
keyid:57:6E:5A:59:53:3C:A6:D0:F0:B4:88:07:D0:C7:7E:15:68:60:4E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fd:82:26:22:9c:de:e0:0b:65:ab:f1:81:a1:e7:8a:a8:03:
ce:d7:68:e4:dd:1b:62:3a:5f:bd:4b:5c:bd:07:5c:b0:76:85:
4a:25:cf:ec:63:27:9b:98:94:83:70:a2:ec:9e:88:56:24:c8:
75:43:54:16:18:83:3c:f1:cb:3a:3f:88:95:10:55:f8:67:0f:
67:d0:b2:dd:56:12:27:50:51:b6:5e:eb:c4:f3:dd:0e:b4:aa:
8a:b0:b1:62:5d:ba:b1:81:6c:0d:67:2d:d2:fc:01:66:6c:cb:
9e:ef:60:fa:97:f1:37:1f:13:8e:5d:b8:66:31:45:7e:c7:9f:
a4:a3:7f:7f:83:ae:85:e5:41:87:cc:60:bc:7f:f7:7f:f0:90:
7e:96:fd:25:42:53:cd:ab:fb:2d:c2:e4:58:a8:e7:3d:55:73:
85:c1:25:35:d6:7b:98:ed:53:30:15:fb:d6:ed:f4:b8:ad:2a:
f9:2c:0b:56:10:d7:4d:31:83:73:81:23:96:87:c3:08:00:a8:
4c:05:93:d7:3c:9b:48:28:8e:d9:35:4c:af:79:71:27:31:e0:
a8:45:bf:12:c1:e1:b6:01:8b:7c:9a:cb:d3:32:62:ed:4c:34:
98:34:52:0e:57:a9:0e:89:a2:a8:f8:a2:f8:6f:f1:af:c6:46:
22:61:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:02:25 2025 by rpki-client