Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
File: 5UHTgH6p2K1130eFWJlQnubzKCA.mft (raw, json)
Hash identifier: PS/s/7E9p2wjiiky7yxcz3PB1nOoT/trXLN+6xBa38A=
Subject key identifier: D4:D2:66:AC:42:5F:48:49:A2:BA:AF:FA:DC:4D:F1:48:96:39:EE:40
Authority key identifier: E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
Certificate issuer: /CN=e541d3807ea9d8ad75df47855899509ee6f32820
Certificate serial: 019769CE9DD74DB6A899BA4F86BCC50D3654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
Manifest number: D9
Signing time: Fri 13 Jun 2025 15:00:37 +0000
Manifest this update: Fri 13 Jun 2025 15:00:37 +0000
Manifest next update: Sat 14 Jun 2025 15:00:37 +0000
Files and hashes: 1: 5UHTgH6p2K1130eFWJlQnubzKCA.crl (hash: bXTzo5vWX3h5WQ6I7kGZN/w3ArQntom32kahaQqsO/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:9d:d7:4d:b6:a8:99:ba:4f:86:bc:c5:0d:36:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541d3807ea9d8ad75df47855899509ee6f32820
Validity
Not Before: Jun 13 15:00:37 2025 GMT
Not After : Jun 14 15:00:37 2025 GMT
Subject: CN=d4d266ac425f4849a2baaffadc4df1489639ee40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:5b:87:e2:55:e8:85:5d:9e:c1:4e:7d:9c:
0d:40:8a:ed:85:dd:b0:ec:43:d3:c0:38:ee:9f:77:
98:b9:61:18:7e:d9:42:18:8e:af:2f:3c:b1:25:e0:
20:c8:fd:2d:e0:c3:b9:25:2f:4d:3c:ac:b5:76:f3:
a2:e1:cd:31:ae:4f:59:03:20:db:2f:d2:e2:f2:ec:
c6:71:f2:d3:3e:e6:ac:65:18:79:53:10:7d:63:5c:
a8:f1:ef:33:75:30:57:a1:3e:fc:26:60:8c:96:1a:
82:8d:a1:07:08:dc:b1:21:d4:0d:54:bf:6b:a9:a6:
6f:43:64:e1:64:d9:26:dd:5f:57:89:bd:dc:4e:d6:
44:32:47:95:7d:f9:1c:bb:ee:23:30:92:0d:f9:c9:
0a:80:de:1c:d4:04:15:c4:ce:39:a0:37:d5:df:02:
12:6d:84:44:30:58:14:69:43:42:3e:7d:01:a2:78:
d9:7f:f9:4a:89:27:ca:56:49:6c:21:69:d3:e9:7a:
c4:cd:50:dc:49:f4:d1:25:47:14:a3:8d:51:57:bf:
1c:44:42:2e:9b:f4:af:04:92:62:f0:61:21:be:27:
20:10:db:79:1c:ea:ca:36:de:f6:21:db:de:19:d2:
c9:e5:ad:17:50:a3:d0:fd:26:9c:98:1e:f9:8a:2b:
73:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D2:66:AC:42:5F:48:49:A2:BA:AF:FA:DC:4D:F1:48:96:39:EE:40
X509v3 Authority Key Identifier:
keyid:E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c1:ca:a6:4c:00:24:a6:c1:e0:e9:06:c0:52:ae:90:dc:0b:
59:45:fb:fa:a4:2f:1a:b4:0e:15:c0:09:05:97:fb:94:8f:d8:
a3:17:4c:4c:0e:ea:ec:05:d8:89:08:05:e1:ff:4a:b8:65:6a:
82:87:5e:fb:c6:66:9c:53:63:9e:76:ac:39:4e:df:60:27:ec:
50:cc:6b:35:86:5d:91:80:54:a2:fc:5c:9e:45:ff:25:76:6d:
61:09:ca:25:89:50:dd:f2:9c:f1:d5:d5:50:13:1b:85:b1:ed:
5f:15:6a:53:95:28:15:71:0f:da:2f:16:21:8b:6d:77:02:4d:
6d:11:65:e3:67:ae:69:55:31:73:ee:f5:21:f7:29:d5:63:ba:
2b:b0:c9:c7:ef:c2:a8:62:ed:8f:36:11:54:ea:ca:c3:0a:4c:
cd:0f:4c:d1:d2:53:8e:62:92:13:3a:b8:cc:be:cc:b0:12:c7:
25:0a:24:d6:ad:51:69:ec:cf:0e:82:3e:7b:2a:d0:b1:97:0c:
06:45:3a:92:08:54:09:08:12:f3:cb:38:dc:82:8f:78:cc:40:
cb:f1:79:68:69:71:d5:61:c7:81:8f:27:99:1b:a4:e9:52:cd:
c4:de:46:45:50:de:e4:bc:0c:d9:28:70:b0:92:a1:f4:34:89:
7b:1e:85:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:38 2025 by rpki-client