Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
File: p5ROOKJ1k6RvXEoqli9YO49r5GA.mft (raw, json)
Hash identifier: LgJbntnsMxNYNTn9ro3tknh2NJiq8VAi3v4qoKRA680=
Subject key identifier: 17:84:5C:6E:24:A9:06:E1:97:8D:40:54:56:32:23:0F:43:F4:33:06
Authority key identifier: A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
Certificate issuer: /CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Certificate serial: 0198496553FE6E17AE4259237C516C656A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
Manifest number: 11EE
Signing time: Sun 27 Jul 2025 01:00:34 +0000
Manifest this update: Sun 27 Jul 2025 01:00:34 +0000
Manifest next update: Mon 28 Jul 2025 01:00:34 +0000
Files and hashes: 1: p5ROOKJ1k6RvXEoqli9YO49r5GA.crl (hash: tGvBN/AytjdRSlXo6dx2bt2pKLJ1ZUlebynJeUzP4w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:53:fe:6e:17:ae:42:59:23:7c:51:6c:65:6a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Validity
Not Before: Jul 27 01:00:34 2025 GMT
Not After : Jul 28 01:00:34 2025 GMT
Subject: CN=17845c6e24a906e1978d40545632230f43f43306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d2:37:8e:a9:06:8f:82:88:6d:f8:0f:a0:43:
ee:3c:0c:ae:c9:fb:9c:c7:59:1b:86:a5:3d:57:78:
2e:33:f6:71:4c:24:67:e2:76:ab:63:54:42:01:15:
90:bd:b7:da:14:00:41:85:28:c5:cc:41:c9:cf:5a:
86:e2:85:61:b3:c5:78:98:72:ee:fa:8e:2e:bf:f9:
f7:fa:0b:44:a7:85:df:bc:65:56:f6:35:30:ef:45:
4f:b4:2a:eb:95:da:8c:c4:50:24:d0:6a:b2:e8:2d:
3e:58:72:a1:2d:ae:3d:f4:f7:91:5d:30:78:fa:ea:
b7:11:7c:71:ae:a8:5f:a4:13:30:62:be:b1:4a:b3:
0a:8c:08:0d:18:9a:a5:ae:32:05:3b:ff:38:34:e6:
f0:0e:3c:f8:ee:69:b5:22:36:28:2c:49:39:55:f4:
df:9d:0c:43:e4:2d:a6:8c:0b:1b:37:c3:d7:71:85:
d4:a0:db:bd:b3:58:fe:0e:1b:33:e1:5a:ac:42:52:
a3:48:2c:cb:d5:df:bd:5a:1c:59:99:24:11:43:e0:
b5:20:df:c8:a6:b2:b4:08:a7:a1:1f:c8:6b:03:3c:
9d:c7:3e:a4:0c:d1:73:d4:06:58:a9:6b:ff:6e:81:
21:0f:9b:ef:a1:23:59:d1:64:0d:5d:6b:9b:db:ca:
41:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:84:5C:6E:24:A9:06:E1:97:8D:40:54:56:32:23:0F:43:F4:33:06
X509v3 Authority Key Identifier:
keyid:A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d9:b2:e9:1a:14:81:b9:e9:33:a9:e2:a2:23:14:f9:8b:ef:
8a:07:3a:64:e7:f2:d0:52:fe:f5:1e:26:f6:b6:81:42:1e:2e:
db:9c:84:fc:6f:72:ea:b4:40:92:01:7f:de:57:d7:92:c7:13:
a9:c3:79:88:4f:14:43:70:a0:fd:b7:59:c3:04:da:f9:ef:fb:
5c:a2:c2:cf:e7:3b:70:ca:e4:04:9a:27:7f:13:6b:95:fb:cc:
91:af:10:42:6f:34:83:d8:f1:ac:a7:c7:8e:3c:91:6f:1b:66:
1c:43:10:12:50:60:01:67:04:e9:bf:cc:60:53:8f:3f:a8:c4:
7c:80:34:e9:a5:66:5f:55:0f:2c:e0:4f:99:86:92:4f:f6:1a:
4b:98:15:ec:ec:0d:da:0d:cc:4b:4d:cc:3e:4a:c6:a9:28:4b:
40:c3:cc:5a:3e:f1:33:99:1f:8f:a9:e1:1a:58:28:07:a9:99:
c7:2e:fa:3c:03:22:44:fa:23:98:22:cb:c6:4d:87:96:54:ed:
25:fc:5b:99:d3:51:4f:9f:4b:c9:25:3f:ce:ed:bf:6f:dc:f4:
bc:14:7a:da:f8:ad:c9:54:05:13:5f:64:a4:5e:38:2b:2e:70:
17:70:a2:e5:ad:e8:cc:55:94:08:1b:b6:2e:4b:22:fe:9d:09:
57:b8:31:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:53 2025 by rpki-client