Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
File: 5kdeNHqvK1nU7oU6ilS05L03R-s.mft (raw, json)
Hash identifier: U++GDS/aRrEvuSE1oioqCUo6Xok1n4Iw2O50VsKM5gQ=
Subject key identifier: C5:B8:83:0A:A7:26:9A:FE:1D:DD:A9:6B:38:35:0D:B4:71:54:18:69
Authority key identifier: E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB
Certificate issuer: /CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb
Certificate serial: 019769977CC7ACA19A51CDBCDDC1BBC0C346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
Manifest number: D7
Signing time: Fri 13 Jun 2025 14:00:24 +0000
Manifest this update: Fri 13 Jun 2025 14:00:24 +0000
Manifest next update: Sat 14 Jun 2025 14:00:24 +0000
Files and hashes: 1: 5kdeNHqvK1nU7oU6ilS05L03R-s.crl (hash: 4F0LaRJNWbkCErD+ByfdB+YkD4IPQvZpcTc++17w1TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:7c:c7:ac:a1:9a:51:cd:bc:dd:c1:bb:c0:c3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb
Validity
Not Before: Jun 13 14:00:24 2025 GMT
Not After : Jun 14 14:00:24 2025 GMT
Subject: CN=c5b8830aa7269afe1ddda96b38350db471541869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:06:d9:41:5a:4b:42:29:83:b4:3b:be:2a:
2a:1d:6b:4e:71:b3:a0:15:0b:50:23:2c:ee:95:12:
3a:a1:b3:f1:03:29:4b:91:87:bf:0b:db:11:8f:43:
06:67:b9:a8:99:bf:69:7d:b9:39:39:76:1f:bf:54:
b6:0f:1a:36:c4:d7:e3:82:bb:23:64:21:f9:93:23:
77:eb:2c:6e:26:2a:38:0b:16:70:18:45:6b:ff:9f:
81:2c:f0:c8:35:aa:6e:cb:90:9c:b9:23:e8:ac:d2:
f5:86:7c:e0:34:d4:c1:0f:e8:ff:14:14:b3:ba:7c:
96:8f:62:dd:17:1c:55:e3:15:2b:e7:88:80:43:ed:
32:2a:ac:37:40:bf:f6:dd:c5:ed:f5:f2:13:88:26:
10:48:7f:db:89:35:8d:af:21:b4:c3:b7:5c:a8:ab:
c4:ca:b0:a8:a6:f8:01:5f:6e:15:0c:52:18:7e:8f:
74:14:ef:a9:de:5b:a8:42:2d:b6:d6:93:f2:ed:47:
1d:ca:75:f8:80:8e:1b:3e:58:9b:83:6a:4e:67:eb:
82:22:6f:57:e1:e9:e1:9d:1d:86:71:e5:ac:a7:77:
11:65:78:25:74:1f:f4:55:9e:25:88:46:63:56:3a:
cb:6d:0e:f5:c2:c9:44:ae:5b:e8:d6:27:68:4a:5e:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B8:83:0A:A7:26:9A:FE:1D:DD:A9:6B:38:35:0D:B4:71:54:18:69
X509v3 Authority Key Identifier:
keyid:E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:48:8e:7c:e4:09:20:05:b8:05:24:07:8f:d4:6b:16:f7:ce:
b3:ad:a1:b2:7e:11:dc:66:37:31:f9:17:b8:45:cb:fd:e2:ca:
29:1f:f1:08:0d:86:d4:dc:04:fc:2a:ff:d2:bb:09:70:e3:78:
8a:35:68:7f:98:c8:f7:a4:25:8a:8c:b8:6b:02:8e:7d:23:89:
25:86:fc:4d:93:ab:91:25:80:24:48:b5:08:67:9c:41:eb:58:
81:7c:3e:ba:fe:ca:29:f1:79:a0:33:51:0d:bc:0b:c9:d6:8b:
3c:95:bf:98:f1:49:d2:34:ed:98:ff:0e:c9:56:a9:5f:39:ce:
b3:ed:8e:90:0c:d4:62:d2:df:1d:b3:01:60:f9:e1:b5:ca:75:
98:28:2b:19:f8:21:99:4b:88:c8:bc:1a:8d:89:e2:00:95:7f:
75:eb:bf:9f:16:6d:06:6c:aa:a9:60:73:64:e8:5f:db:ca:b4:
97:ee:00:58:96:47:2a:a0:37:aa:95:c8:3a:57:e3:57:27:d9:
b2:c1:56:a7:bc:bb:5e:05:4c:45:1a:76:72:98:ef:25:c9:29:
e6:7c:fb:a0:aa:65:6d:38:3d:73:d9:43:8c:d9:7f:32:68:6e:
0d:dd:77:86:8c:20:b3:29:52:26:44:24:69:30:c4:16:2b:24:
ef:74:b5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:21 2025 by rpki-client