Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
File: c5ojygLNDwflNvtppcC5vqDaYKU.mft (raw, json)
Hash identifier: dldSlj1utWGcunfNo+bnHnLnMzwI1dpyW0Fj6nvDOro=
Subject key identifier: D5:08:CC:F6:B4:D0:EC:E5:78:7B:67:A9:E7:39:E8:99:57:39:88:E2
Authority key identifier: 73:9A:23:CA:02:CD:0F:07:E5:36:FB:69:A5:C0:B9:BE:A0:DA:60:A5
Certificate issuer: /CN=739a23ca02cd0f07e536fb69a5c0b9bea0da60a5
Certificate serial: 019769CF2FEFC4D460E9DA8087A2CE7D5CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
Manifest number: 0880
Signing time: Fri 13 Jun 2025 15:01:15 +0000
Manifest this update: Fri 13 Jun 2025 15:01:15 +0000
Manifest next update: Sat 14 Jun 2025 15:01:15 +0000
Files and hashes: 1: c5ojygLNDwflNvtppcC5vqDaYKU.crl (hash: o1Ac0Yp+txxcMT6bZ9Okb00psw3m9RuG4t99UKbShTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:2f:ef:c4:d4:60:e9:da:80:87:a2:ce:7d:5c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=739a23ca02cd0f07e536fb69a5c0b9bea0da60a5
Validity
Not Before: Jun 13 15:01:15 2025 GMT
Not After : Jun 14 15:01:15 2025 GMT
Subject: CN=d508ccf6b4d0ece5787b67a9e739e899573988e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f9:73:5d:e1:e0:25:95:c5:75:ec:df:fa:da:
f5:c6:aa:e7:1f:9b:bf:83:d0:ed:f6:9f:be:ee:5d:
43:e6:b7:08:84:a9:f1:bb:95:21:5d:0e:63:43:d0:
bc:07:93:01:fa:db:6a:9d:98:c3:37:03:ad:05:3f:
8e:2a:12:a4:01:8d:f1:0b:24:41:b1:02:2a:65:54:
06:a2:20:5c:de:37:e1:96:13:12:11:50:49:7d:82:
6d:7a:42:79:7f:d8:ce:10:e6:2b:d9:1d:0f:68:ee:
85:d6:60:2e:aa:23:3f:e7:9f:ec:51:8d:e0:0d:0e:
93:09:fd:37:f3:6d:a0:3e:af:e0:6a:6f:5d:b5:1e:
13:99:62:cf:27:00:12:7f:44:02:3a:00:46:c8:c4:
96:93:da:78:e3:1c:58:1b:8e:4d:c0:06:de:78:6f:
c6:6f:a0:36:c0:e9:cd:fd:f5:7b:03:2b:a2:4e:12:
ad:8b:f4:ee:b4:25:64:8b:5d:0e:e9:cc:5a:e8:6b:
0f:fa:6f:76:9b:2b:e8:55:f6:4e:81:14:21:4c:6e:
6f:95:04:54:94:9a:fc:0b:39:1f:b7:53:8a:76:58:
19:07:ce:39:26:ac:68:8d:36:c7:83:30:fa:73:60:
cf:ca:52:24:53:b4:5c:c3:43:5b:6e:b2:bf:33:5b:
73:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:08:CC:F6:B4:D0:EC:E5:78:7B:67:A9:E7:39:E8:99:57:39:88:E2
X509v3 Authority Key Identifier:
keyid:73:9A:23:CA:02:CD:0F:07:E5:36:FB:69:A5:C0:B9:BE:A0:DA:60:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:58:17:a0:a0:ba:25:cb:aa:ef:4f:40:4d:bc:7d:af:95:cd:
e6:90:b8:bc:14:3f:78:5d:5d:d9:44:25:25:a5:80:3d:e3:2a:
17:25:db:fe:3d:97:89:1e:2a:c5:18:fe:07:17:bf:e9:44:39:
5d:9b:66:16:59:fe:ba:5c:0f:99:92:b1:10:3c:70:91:d7:71:
7c:83:f5:fd:dd:36:53:ae:59:2b:ea:70:1f:63:06:60:78:81:
bd:77:4b:bc:5c:a3:d1:a7:c3:6d:b0:11:45:d1:ff:87:ec:eb:
7c:df:e7:cd:f0:79:98:0f:ec:cb:26:92:b9:32:6e:f5:e4:54:
11:b8:fd:4f:ae:e6:8e:2f:39:e3:d2:71:0b:98:9f:73:f4:2a:
b4:cf:2f:05:c8:e2:9d:83:fa:98:e7:68:77:df:e5:2f:bf:4c:
cc:4f:0f:66:5d:ec:58:d5:0e:3c:fd:a6:85:b6:dd:2b:c5:75:
4e:35:df:fa:d2:81:86:50:e7:d7:ab:63:59:16:54:a1:9a:ed:
e1:9b:ac:3f:b8:c6:4f:e1:4c:4b:6c:07:77:8b:82:be:74:16:
76:f5:ae:d6:82:cc:ff:79:f7:00:5c:e7:39:03:65:63:e9:38:
6b:07:ac:0b:21:5d:17:89:cc:97:15:6c:d0:40:a8:04:e2:f0:
1a:bb:0f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:27 2025 by rpki-client