Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier: HhqhBFcDuSmauCnK4/Ly4km4SVv1dRTkj79q6+LwcUc=
Subject key identifier: CE:D1:8F:CB:62:86:1D:98:49:CD:25:E9:EF:2C:D3:D8:94:C0:84:9C
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial: 01976D3E78570427BB19D95FE07721C3527A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number: 07C1
Signing time: Sat 14 Jun 2025 07:01:39 +0000
Manifest this update: Sat 14 Jun 2025 07:01:39 +0000
Manifest next update: Sun 15 Jun 2025 07:01:39 +0000
Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: sKLLKudmwOaUzCT9Iq2w2ghMNOkim1OdU99jeiadO4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:78:57:04:27:bb:19:d9:5f:e0:77:21:c3:52:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Validity
Not Before: Jun 14 07:01:39 2025 GMT
Not After : Jun 15 07:01:39 2025 GMT
Subject: CN=ced18fcb62861d9849cd25e9ef2cd3d894c0849c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:0b:31:34:e8:13:14:13:aa:df:96:69:40:
ba:c9:28:ba:fb:b8:6e:42:37:75:a1:94:4c:40:d4:
80:6b:2d:62:35:b2:f5:86:6b:4a:6b:d0:b0:c2:6a:
55:bb:87:76:4e:ee:77:72:e8:e1:75:20:a2:07:9b:
4b:b1:8f:bd:72:3c:a1:21:1d:42:6a:4e:93:25:3c:
bf:77:eb:3d:36:f7:9b:ba:77:14:99:f4:12:67:bf:
4d:a1:30:fd:af:c3:17:9d:c0:1e:e1:46:c5:c8:30:
88:38:d5:e0:2c:28:76:3a:ba:92:37:d4:04:5d:a0:
20:3a:6b:b1:46:b1:45:52:1f:9a:7d:a6:12:92:44:
e0:f1:9b:c0:93:04:23:56:20:fa:fd:6c:6d:b6:ce:
1d:c2:d3:ac:9b:2e:0b:34:31:cd:cc:ff:41:de:3d:
8c:0a:d4:e2:04:21:b5:e9:42:5e:97:be:4f:a2:5f:
1b:89:ba:7f:8c:02:ec:6e:fc:1a:2d:ab:5e:ab:ec:
1a:16:3a:c2:c6:ba:1f:c2:db:27:f4:f2:eb:cf:b6:
22:40:b8:0c:8d:8e:11:05:aa:ba:60:7e:cb:a0:6f:
91:f6:ab:cc:dd:04:df:49:ea:29:08:bb:3c:21:4b:
99:7c:c9:5a:f1:bc:ee:82:41:93:cf:c5:ce:ea:3f:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D1:8F:CB:62:86:1D:98:49:CD:25:E9:EF:2C:D3:D8:94:C0:84:9C
X509v3 Authority Key Identifier:
keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1b:d4:fb:75:72:4c:12:29:f1:61:0d:ae:6e:b1:09:11:b1:
b5:e6:34:40:eb:48:f4:54:7c:35:dc:88:9b:da:37:12:87:24:
e9:bd:c1:b2:1c:4c:2e:0c:a8:23:33:86:62:59:34:a2:50:17:
89:67:7b:49:86:b1:21:72:37:d3:f3:d3:45:df:70:f3:f2:0c:
fa:b6:bb:00:31:77:72:c2:bf:6e:e1:46:63:29:28:71:24:25:
0b:15:f3:8d:9a:50:7a:36:b1:db:ed:2b:20:26:b6:86:4f:c8:
11:3e:00:44:3c:2a:43:4b:af:e1:05:98:6c:66:1d:aa:c1:22:
f9:0a:db:78:e8:ba:29:6b:57:62:a9:7b:e4:dd:81:c6:dc:40:
a4:05:d8:bc:e2:a1:ba:2b:1b:0a:57:21:2c:1d:d7:44:ab:37:
48:98:ca:f5:4c:30:29:8e:47:96:6f:fe:04:bd:b7:13:9d:50:
d3:56:65:02:d6:4f:59:da:be:17:56:65:0b:60:6e:a6:c5:3e:
42:03:8c:3d:6d:8f:bc:e4:4c:b3:39:d6:46:f2:3c:ae:9e:18:
04:f7:9b:8f:ca:3e:57:af:16:b7:2d:f8:73:85:9a:a1:42:e7:
8f:73:fc:50:05:7d:e8:b5:6a:3e:b0:df:40:58:7a:a6:c5:39:
eb:0b:28:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:28:07 2025 by rpki-client