Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
File: A5D0YbjFGyArIQDfLMQzD2kiGME.mft (raw, json)
Hash identifier: 7RqVcczxIvEWK6bTc7/KkW4sXfnTv2T8wXOG9XoprmA=
Subject key identifier: B2:A5:DB:2F:63:DB:6F:61:2C:21:5C:E9:8D:3E:84:7D:3C:7B:20:CA
Authority key identifier: 03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
Certificate issuer: /CN=0390f461b8c51b202b2100df2cc4330f692218c1
Certificate serial: 019768BBFF47B70933EBEC7BB8813BD7086A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
Manifest number: 151A
Signing time: Fri 13 Jun 2025 10:00:40 +0000
Manifest this update: Fri 13 Jun 2025 10:00:40 +0000
Manifest next update: Sat 14 Jun 2025 10:00:40 +0000
Files and hashes: 1: A5D0YbjFGyArIQDfLMQzD2kiGME.crl (hash: QfvW6efV6qrnq72O8VR9Xbh2+dquOjTiRti01dhQPxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:ff:47:b7:09:33:eb:ec:7b:b8:81:3b:d7:08:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0390f461b8c51b202b2100df2cc4330f692218c1
Validity
Not Before: Jun 13 10:00:40 2025 GMT
Not After : Jun 14 10:00:40 2025 GMT
Subject: CN=b2a5db2f63db6f612c215ce98d3e847d3c7b20ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:69:26:c7:50:06:9c:b1:82:46:63:59:bf:
fa:5c:47:79:4f:ce:a2:01:10:82:18:db:eb:3e:c7:
08:49:e3:a7:5d:6b:14:2e:ce:9f:c5:4c:91:fb:ba:
4f:22:78:0f:34:93:25:5f:1c:f0:ec:0b:da:19:06:
d5:c5:5b:5f:7b:ad:29:6a:7e:05:74:a3:12:7d:c3:
d3:b7:dc:ca:8c:48:0d:6a:b7:cd:26:37:30:1b:9c:
db:a3:03:a4:7c:15:65:ba:2c:01:0a:5d:e2:5b:77:
e0:44:c4:d1:77:21:e3:97:be:79:fd:eb:88:13:0d:
1d:fb:c5:59:3d:a1:de:d1:39:54:6d:b4:a4:29:08:
47:58:85:d3:77:e9:60:d9:39:8d:60:9d:a0:b2:d7:
4d:2b:8f:49:cb:d6:5d:02:8c:b2:a6:01:74:91:ef:
ce:f0:4f:66:dc:c8:08:25:db:0f:72:24:2c:55:96:
df:ec:f2:62:cd:ea:2a:2c:2b:14:cf:fe:d4:b2:5a:
09:de:9f:ae:05:11:ab:c6:10:af:47:b3:17:32:4a:
af:57:7f:14:4c:a0:31:58:d4:79:4e:ce:e8:ce:66:
c5:44:69:2a:da:38:5c:94:fb:57:d0:50:bb:f4:1d:
85:91:bc:9e:49:d0:10:90:15:a4:94:eb:76:ee:93:
51:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A5:DB:2F:63:DB:6F:61:2C:21:5C:E9:8D:3E:84:7D:3C:7B:20:CA
X509v3 Authority Key Identifier:
keyid:03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b0:05:71:13:83:b3:d4:c6:48:b4:da:f3:00:2a:08:45:2b:
45:b7:66:46:30:3d:20:5a:24:6d:aa:ed:c4:7e:a4:63:d9:42:
38:a4:f3:89:da:7f:8a:3e:46:a2:02:13:e1:d2:14:95:9d:2b:
ef:4c:c6:52:3f:91:93:69:4b:f4:9b:0c:73:a0:95:fe:c1:e0:
3e:c3:6b:10:c6:56:b5:c4:ff:5f:97:81:36:69:77:c1:80:24:
63:dd:a5:f6:2b:35:71:7c:a9:9f:f9:f2:f8:7e:c0:cb:9f:bc:
c0:25:c5:6c:75:c5:59:1a:b4:b5:41:50:18:02:da:99:01:e6:
e5:b9:c0:c5:68:70:18:a2:fa:65:37:3c:c4:27:fd:15:db:df:
2a:77:09:c3:79:6a:43:40:cc:60:e9:b4:fb:5f:d7:c9:61:e6:
c6:9f:e2:a1:e6:c6:ed:82:7e:2b:95:2d:a6:a7:64:94:a8:19:
2e:4b:20:ed:68:b9:b4:33:23:b5:37:3e:1d:a0:fd:8d:17:fa:
10:1e:cb:ae:7e:ce:0c:e9:c9:e6:7d:34:1f:38:ee:be:e3:c7:
74:da:bf:4a:c8:54:4e:26:54:eb:d4:04:1f:12:66:40:9a:be:
88:66:05:c3:cd:32:97:bf:34:01:ff:d4:b5:03:2e:cb:24:bd:
b0:56:4e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:34 2025 by rpki-client