Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.mft
File: 5pgECu2WLzBoge6mVTBA-5ptNMk.mft (raw, json)
Hash identifier: qqFguARvd/h/7k4elLoW0ZlwTSS24THJ2xWPqIjbry4=
Subject key identifier: C4:E6:B6:FC:01:BB:3A:C6:F5:82:AD:02:6F:CF:86:04:D3:C9:20:EF
Authority key identifier: E6:98:04:0A:ED:96:2F:30:68:81:EE:A6:55:30:40:FB:9A:6D:34:C9
Certificate issuer: /CN=e698040aed962f306881eea6553040fb9a6d34c9
Certificate serial: 019847E54A6EC70F33D708F05A62CBFE0122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pgECu2WLzBoge6mVTBA-5ptNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.mft
Manifest number: 04A4
Signing time: Sat 26 Jul 2025 18:01:05 +0000
Manifest this update: Sat 26 Jul 2025 18:01:05 +0000
Manifest next update: Sun 27 Jul 2025 18:01:05 +0000
Files and hashes: 1: 5pgECu2WLzBoge6mVTBA-5ptNMk.crl (hash: 8ddkzZs4smoHttn8QBhHl/gvMy/44LMHj5XZ33+6fZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pgECu2WLzBoge6mVTBA-5ptNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:4a:6e:c7:0f:33:d7:08:f0:5a:62:cb:fe:01:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e698040aed962f306881eea6553040fb9a6d34c9
Validity
Not Before: Jul 26 18:01:05 2025 GMT
Not After : Jul 27 18:01:05 2025 GMT
Subject: CN=c4e6b6fc01bb3ac6f582ad026fcf8604d3c920ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:04:25:aa:ec:4b:04:d8:5e:e1:60:a2:a2:
b7:f5:67:4a:a3:e8:23:a1:11:c8:0e:97:74:26:ed:
03:2c:d5:9d:7e:fe:12:4e:a4:d9:54:6a:6d:b3:0b:
e8:43:01:a6:8f:b5:77:2d:42:0c:8e:d7:b2:7b:55:
5c:b2:93:cf:c6:d0:ca:f1:92:2c:d3:ab:5c:80:2e:
a1:4b:39:99:b2:ec:2f:2e:7a:3b:92:12:10:97:22:
a6:b5:02:74:70:09:f1:0b:f0:d2:cd:be:d9:da:7c:
9d:71:9c:df:f9:a0:57:c2:dc:34:b7:fe:1e:02:d2:
ca:bb:6b:52:50:51:07:17:ba:c3:c1:67:6a:1b:8f:
6b:ee:b8:33:58:87:90:90:d4:2c:05:b9:7c:97:93:
a6:4e:1e:57:dd:0d:1a:3e:11:e2:fb:db:b1:dc:77:
29:b9:25:92:96:44:02:ea:f1:85:25:89:1b:cc:99:
be:47:7e:e7:0f:da:35:04:bf:4b:cd:d2:9c:c2:19:
c1:db:88:80:a3:46:9e:79:47:cd:1f:a7:97:5b:2d:
0d:47:17:70:8f:44:81:25:53:97:99:79:d9:df:dc:
4c:9f:a0:9a:4b:a2:aa:7d:07:e0:e7:d3:8e:87:ad:
b3:85:b6:14:94:7c:61:18:ba:d6:e1:56:8f:63:ce:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E6:B6:FC:01:BB:3A:C6:F5:82:AD:02:6F:CF:86:04:D3:C9:20:EF
X509v3 Authority Key Identifier:
keyid:E6:98:04:0A:ED:96:2F:30:68:81:EE:A6:55:30:40:FB:9A:6D:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pgECu2WLzBoge6mVTBA-5ptNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/52ebd9-7d5b-452a-8f4f-e23497393b8f/1/5pgECu2WLzBoge6mVTBA-5ptNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:22:26:20:cc:41:75:28:bb:05:c9:58:a1:cb:cd:27:b4:bb:
ce:63:b2:b9:66:81:ea:c9:ab:64:4f:21:f5:82:b3:cd:09:41:
7c:ca:fe:a3:56:6a:c6:93:2a:2b:f8:dd:57:c5:5f:34:8f:17:
3d:06:34:4a:73:32:26:85:7b:86:ce:76:a5:b5:13:ed:82:f6:
bc:ef:d6:70:52:69:a9:e3:e7:d7:7e:1b:13:5e:f3:f3:f5:c3:
3b:ad:47:24:53:df:cd:63:90:a1:e8:ab:42:cb:33:2c:d3:8f:
74:18:de:84:61:c6:de:1a:f4:55:fd:0e:be:46:aa:40:ec:79:
86:97:fa:7f:87:5a:2f:b2:22:e7:89:7c:94:80:43:10:52:d4:
4c:78:71:18:27:27:b9:a7:49:2e:a7:f3:f9:5b:0d:99:fe:f1:
8f:6c:d5:bf:fe:8f:c9:10:3d:de:e0:22:dc:96:02:14:24:9d:
2b:c3:60:84:82:a2:83:a3:46:77:ef:f9:3d:ed:8d:10:6b:58:
ec:3b:6c:50:8d:76:b4:cb:6c:62:23:9c:48:9a:9b:3c:c3:c7:
66:ce:67:bb:0c:19:ed:98:1f:a9:1c:be:40:44:22:92:60:5f:
1f:f1:fc:54:e4:5a:6d:e2:c5:3b:70:e5:45:df:f8:52:e6:4b:
e3:e9:a5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:24:44 2025 by rpki-client