Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File: 5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier: O6Pe6Gzhtjvx8CPzDqlskul+mHNOEvMLivhXQT8GuMs=
Subject key identifier: 75:25:35:D6:85:67:7A:F1:54:3B:5D:49:1F:E4:CC:A3:11:87:75:78
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer: /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial: 0198733CFDDF6C695DDFBB134D56B63C1A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 04:00:33 +0000
Manifest this update: Mon 04 Aug 2025 04:00:33 +0000
Manifest next update: Tue 05 Aug 2025 04:00:33 +0000
Files and hashes: 1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: djBpdCT8tXGe6ITXoEGKswu7w/I0dYd5rFEL/VMERYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3c:fd:df:6c:69:5d:df:bb:13:4d:56:b6:3c:1a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
Validity
Not Before: Aug 4 04:00:33 2025 GMT
Not After : Aug 5 04:00:33 2025 GMT
Subject: CN=752535d685677af1543b5d491fe4cca311877578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:02:b2:b5:e3:be:bc:7e:b3:5b:8b:ca:b0:
fd:a5:b5:ad:36:4b:24:7f:56:83:66:21:07:19:2a:
81:a1:1d:57:ea:6d:f5:d5:fe:a3:30:ed:0e:41:f6:
7b:b2:50:10:07:7d:86:fd:11:cc:9d:9c:b1:c4:37:
3b:4c:49:13:f7:f1:f5:35:18:69:73:29:8b:39:85:
d5:6a:1c:ce:f1:93:07:de:59:39:72:70:a1:47:65:
5e:2a:c9:af:be:78:3b:41:85:68:5d:e9:6a:62:10:
b1:ba:3c:68:71:65:fb:d4:b6:da:04:08:19:47:b7:
32:58:9b:27:e8:35:b9:b2:f4:5c:d2:ec:36:f8:fb:
a8:a2:b8:1b:c9:d4:f9:32:69:8b:ec:f3:a4:f4:dd:
bf:8e:cd:7f:2e:04:5d:01:8c:d3:3c:2e:0e:be:67:
19:ce:fc:04:12:ad:a9:24:a9:a6:55:62:48:2a:10:
4e:07:14:8f:d5:6e:eb:cb:6c:62:d6:27:95:93:ac:
eb:b7:40:9f:20:91:0f:eb:96:a1:d4:95:0d:75:b7:
bf:91:45:cd:75:15:66:8c:2f:14:b2:8d:49:e8:91:
f7:a2:95:53:4a:cc:61:54:82:3f:e3:54:f0:b4:d9:
b9:03:0b:0a:fe:2e:f7:76:9d:71:af:93:14:e1:82:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:25:35:D6:85:67:7A:F1:54:3B:5D:49:1F:E4:CC:A3:11:87:75:78
X509v3 Authority Key Identifier:
keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:1b:f1:1c:66:3e:64:72:e3:06:77:a8:2c:bf:25:4e:48:6d:
92:6e:10:6c:ce:85:d0:bb:53:34:5b:04:3f:e6:7e:04:f9:fc:
62:0b:f7:0b:b1:14:b1:e3:82:5b:e9:b2:9b:b3:f3:51:ed:2a:
d1:f1:bd:b0:13:bb:fa:47:d3:3c:6e:a5:39:c8:6d:f7:81:7e:
19:20:0e:f5:26:2b:a2:0b:4e:3e:6f:75:33:c8:ba:42:78:40:
c1:9d:c9:5b:cf:c8:a0:28:1a:f9:19:cb:25:18:dc:5b:6d:b1:
8d:1e:6a:e1:7e:52:b1:c2:99:39:39:66:32:67:4c:af:c0:c8:
1e:d4:ae:9e:82:46:cc:2f:cd:f6:c4:0e:d1:20:cf:a1:bc:4a:
55:97:bf:75:b5:60:37:71:f3:55:0f:b5:81:8d:f7:7a:d1:85:
e5:b8:f3:d5:7d:91:d8:47:b0:ab:73:34:0c:09:4a:83:53:47:
2d:41:a7:0c:cc:de:a6:93:0a:96:16:8b:c2:d0:8d:e3:6e:3f:
a2:6e:ef:00:ca:83:ab:da:20:e0:90:1d:13:e7:b0:7d:14:7d:
b0:0f:f5:a9:7e:c0:a6:58:19:35:6c:11:5b:1f:37:d4:d2:6d:
42:e2:c2:2a:86:dd:e6:5b:ca:25:60:32:d2:46:56:19:bf:46:
f0:e5:1e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:59 2025 by rpki-client