
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
File: 5cePoZk9RRL-JDa4ztqL_JKdZX0.mft (raw, json)
Hash identifier: itm6haUYjNrMKlwBkVkPyjOgj7WSJ/rK6vbYuDGIE4I=
Subject key identifier: 23:EC:72:88:C8:20:20:74:7E:EA:EC:2E:A8:03:49:CC:D9:D5:79:82
Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
Certificate issuer: /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Certificate serial: 0198499BDB018B6E9CB49F955753EF436413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
Manifest number: 0941
Signing time: Sun 27 Jul 2025 02:00:07 +0000
Manifest this update: Sun 27 Jul 2025 02:00:07 +0000
Manifest next update: Mon 28 Jul 2025 02:00:07 +0000
Files and hashes: 1: 5cePoZk9RRL-JDa4ztqL_JKdZX0.crl (hash: Xt/0mLWLtPyRC3Qm6wouNHBHXuNlk1vFPOaE8QzW2Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:db:01:8b:6e:9c:b4:9f:95:57:53:ef:43:64:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Validity
Not Before: Jul 27 02:00:07 2025 GMT
Not After : Jul 28 02:00:07 2025 GMT
Subject: CN=23ec7288c82020747eeaec2ea80349ccd9d57982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:f7:13:95:ed:f2:8b:5f:00:e5:f6:3b:db:
b7:32:94:a5:38:92:28:c6:a9:cb:30:13:e0:f0:66:
9f:97:e4:7a:f0:c5:6c:94:90:25:41:13:f5:75:4b:
4b:ca:eb:da:c2:5b:af:b9:ac:c6:8f:a2:78:68:db:
1d:89:c3:f7:72:54:a8:42:d7:01:47:a5:c6:fb:00:
f3:12:64:f4:a7:c3:2e:53:1e:e1:b0:9f:0e:0b:a4:
cd:dc:c7:45:85:6c:25:48:08:30:b6:87:e7:aa:d5:
7d:30:77:c2:14:24:b7:9a:8b:d5:83:34:3f:7e:ed:
3c:b8:cc:5d:fd:a4:b6:f5:35:35:b5:f5:8a:b0:9f:
4b:5f:7b:62:86:b9:fe:c2:d7:05:1d:f5:68:9b:81:
11:09:06:f7:40:db:64:56:29:14:d4:12:d1:25:47:
cc:db:4f:de:45:44:f3:46:57:51:ea:aa:8a:6e:28:
ce:e1:1b:04:74:80:1e:8d:15:5e:7a:d5:9f:73:c4:
b8:ec:98:be:7f:47:ed:07:52:b7:dd:87:4e:6f:63:
2b:16:c6:26:c2:3e:37:a9:39:fc:e1:fe:99:8c:ae:
6a:8e:66:dc:30:1c:c9:c6:bd:13:13:d2:80:76:5d:
83:0a:d1:53:3e:4f:6c:3e:0b:16:a2:9e:e7:c9:cd:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EC:72:88:C8:20:20:74:7E:EA:EC:2E:A8:03:49:CC:D9:D5:79:82
X509v3 Authority Key Identifier:
keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5b:c7:d7:b5:22:47:f7:1b:bb:2c:e4:d9:64:e2:e7:82:97:
ce:aa:e4:c1:1a:b3:aa:5d:41:8a:ff:d3:38:54:07:93:54:78:
10:7d:a2:f2:05:24:0d:02:7b:76:83:3e:a6:cc:2e:3d:eb:5e:
22:c2:13:45:d4:d3:8d:e9:c3:2b:e5:aa:c4:cf:35:69:0d:0f:
fb:5c:1f:40:01:e6:50:55:f2:8c:f9:c3:58:13:37:f4:3c:aa:
89:6d:86:38:84:48:99:6d:5f:80:64:ef:b4:24:b7:80:af:da:
56:f2:90:79:21:07:3d:c2:02:51:0b:90:7d:60:d1:09:f6:af:
39:ba:23:2c:81:b6:20:a3:5e:7c:ea:9a:b1:3c:b0:1a:22:ba:
ec:69:24:1e:94:a6:e7:0e:c7:e9:87:21:a3:71:74:8a:bb:69:
83:3d:64:4d:31:10:63:ab:9f:05:0a:d4:fd:98:ae:89:4d:18:
c0:36:32:d7:cb:ba:1f:aa:0b:a9:38:62:47:da:b4:fb:cc:b4:
c3:7b:78:25:46:90:15:17:ee:99:ec:6a:b3:da:1e:3c:53:64:
8c:9a:ab:47:88:f6:b6:86:80:63:a3:99:36:05:f2:e5:a0:27:
bc:c9:e9:c4:a6:4e:4a:d3:12:2d:d7:c0:b5:91:03:0f:29:7d:
f9:93:66:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:30 2025 by rpki-client