Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
File: t5im6ZG5VaKTURGf9312hksNOEo.mft (raw, json)
Hash identifier: ych2Of8Mzd/624XhEtBjk7zt86t9poYuMCYgiYNfLXc=
Subject key identifier: 2E:CE:E3:28:2A:32:A9:92:2D:AC:69:CD:8C:FC:92:19:F4:29:FD:76
Authority key identifier: B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
Certificate issuer: /CN=b798a6e991b955a29351119ff77d76864b0d384a
Certificate serial: 01988EED275852D9A4DEA82CDC4A873613B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
Manifest number: 0D48
Signing time: Sat 09 Aug 2025 13:02:43 +0000
Manifest this update: Sat 09 Aug 2025 13:02:43 +0000
Manifest next update: Sun 10 Aug 2025 13:02:43 +0000
Files and hashes: 1: t5im6ZG5VaKTURGf9312hksNOEo.crl (hash: m6gOTfVJzGGhSecyeFMjYXGLDFsjOZiGmTlt6DJwZ24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:27:58:52:d9:a4:de:a8:2c:dc:4a:87:36:13:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b798a6e991b955a29351119ff77d76864b0d384a
Validity
Not Before: Aug 9 13:02:43 2025 GMT
Not After : Aug 10 13:02:43 2025 GMT
Subject: CN=2ecee3282a32a9922dac69cd8cfc9219f429fd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:13:42:bf:9d:8e:99:f8:2e:2d:de:20:90:
2c:bb:16:d7:cd:e5:a9:d8:72:16:a7:8c:69:79:6e:
91:3b:56:7a:a8:e6:69:ae:6e:55:8e:6a:a8:d1:90:
e1:04:ac:00:c5:f5:fa:97:63:8e:e2:44:1f:a6:49:
93:6a:1b:e9:20:7f:83:8b:d4:c6:84:2b:fb:ea:4c:
18:93:fb:93:4f:61:61:90:8e:27:bb:a4:f8:d4:f5:
d5:20:99:48:0d:6e:f3:78:7e:30:9d:b3:39:47:5a:
5f:e4:04:44:b6:c2:c6:fa:38:df:02:65:c8:fb:9f:
d5:51:47:03:ab:1e:dd:ac:4b:8d:26:bf:1f:87:69:
12:86:9a:11:cd:d9:2a:8c:02:54:02:6e:ba:7e:07:
f2:a6:4e:56:dd:47:a1:15:7d:28:a3:d0:ac:4f:e1:
b6:a9:6b:a7:8c:7f:aa:77:5b:57:a9:0a:62:3a:ee:
76:ca:b9:01:48:e8:3a:d1:58:ce:1a:38:b6:bd:2c:
1a:84:25:7d:2c:9f:99:61:0d:62:b2:ca:c8:5b:a1:
4c:39:86:eb:b4:76:76:92:04:79:46:86:fc:f8:ca:
1d:d8:c9:c1:31:18:96:01:42:4a:5a:5b:d7:13:6f:
2e:1e:3f:24:71:4a:94:42:0f:70:d7:f7:d3:bc:98:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CE:E3:28:2A:32:A9:92:2D:AC:69:CD:8C:FC:92:19:F4:29:FD:76
X509v3 Authority Key Identifier:
keyid:B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:07:e9:cf:7f:08:68:82:05:c9:bc:4c:df:a4:a3:f2:2a:54:
20:83:f8:26:1b:5e:34:77:a0:d7:41:3e:44:72:aa:ee:f3:f6:
ef:dd:ab:b9:e2:5e:c0:17:cc:48:3b:93:1d:43:28:05:2f:87:
28:dc:c4:58:42:8b:f3:97:e6:09:34:e6:5a:31:6a:78:a7:94:
53:96:cf:5b:77:b5:c4:6a:f5:2b:9b:1d:d0:c4:6c:8f:19:3d:
f5:e8:73:99:ed:21:e6:f1:db:98:41:00:e9:cf:ea:85:29:56:
57:fd:a5:c5:cc:0c:d6:f0:ca:58:7c:7e:5c:d2:4e:df:a6:7f:
26:8a:1f:c3:62:e6:06:ea:33:3a:d9:11:26:83:5f:8d:d5:ee:
9c:1a:8b:bf:76:92:08:15:6c:98:59:ac:63:3d:78:c3:7d:66:
29:f3:01:de:4a:0a:3d:a4:ad:ad:a8:6b:2b:a5:07:62:de:07:
01:23:d4:1e:11:57:5a:7d:b4:a3:41:1f:56:13:e1:66:21:77:
20:df:51:aa:03:7a:37:e8:ab:b4:7b:93:ff:55:6b:c1:b0:19:
96:9d:52:66:f7:43:3d:7e:08:6c:51:2f:dc:1c:71:2a:3b:0f:
03:46:26:40:16:72:2a:c8:1e:a0:02:ed:b7:45:bd:bc:2a:b5:
6c:d5:aa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:26:51 2025 by rpki-client