Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
File: 5qi5LUxZf2wET3clKFSPnJEpoNM.mft (raw, json)
Hash identifier: iaSUqkisxv6AnVGlgys9fPGJDVEobtipdNtocynIQCs=
Subject key identifier: 12:E8:F2:2E:EB:FA:54:CD:6A:7D:CD:BD:06:C9:95:BC:99:80:58:F4
Authority key identifier: E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
Certificate issuer: /CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Certificate serial: 019849D36B92575681BF85C6A04E5210FD69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
Manifest number: 12DF
Signing time: Sun 27 Jul 2025 03:00:49 +0000
Manifest this update: Sun 27 Jul 2025 03:00:49 +0000
Manifest next update: Mon 28 Jul 2025 03:00:49 +0000
Files and hashes: 1: 5qi5LUxZf2wET3clKFSPnJEpoNM.crl (hash: S6OINVf3gNR2Hp8NdoJNGsXKj09QiqYTQJFoRKariuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:6b:92:57:56:81:bf:85:c6:a0:4e:52:10:fd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Validity
Not Before: Jul 27 03:00:49 2025 GMT
Not After : Jul 28 03:00:49 2025 GMT
Subject: CN=12e8f22eebfa54cd6a7dcdbd06c995bc998058f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:ea:3a:1b:bd:c2:33:5d:8d:53:82:ef:9c:
b9:2b:0c:6d:be:8c:21:64:5b:bd:b0:a0:2e:76:a6:
69:8b:32:b4:89:c0:36:4e:a8:64:62:17:09:ab:2f:
7b:24:5c:a7:a0:fb:dd:35:26:d1:c4:8a:90:23:46:
18:f4:60:39:36:75:21:64:a7:a6:ad:58:82:56:dc:
ef:52:82:68:60:d8:ab:f5:05:ed:7c:76:ad:f5:e8:
6a:62:8e:ed:db:92:f0:25:07:6a:00:33:f1:16:d0:
d7:eb:c9:df:21:b3:b1:c1:c4:11:a4:9b:db:0b:39:
6f:12:d6:e6:30:bf:e5:06:c7:5d:08:ba:c2:d6:de:
b0:14:0c:53:5d:aa:e1:0b:1a:8a:73:e5:70:eb:c4:
6a:46:4a:6f:a4:ba:17:d3:86:28:2c:4b:53:8f:f1:
08:5b:91:0f:b1:9c:31:1f:06:2a:cc:a4:10:83:7b:
42:a8:2f:fd:68:f0:19:e0:6e:63:17:9d:2e:cd:e3:
85:e9:54:76:67:9d:22:fc:75:d3:c8:17:5c:7e:a2:
b2:cd:e0:9c:aa:6c:56:8e:d2:6d:0c:cb:b3:3c:ea:
52:da:31:96:cc:57:b2:91:6f:ab:62:ac:7e:f2:bd:
48:e8:2e:d7:b1:7e:13:20:88:a7:68:11:0b:30:ea:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E8:F2:2E:EB:FA:54:CD:6A:7D:CD:BD:06:C9:95:BC:99:80:58:F4
X509v3 Authority Key Identifier:
keyid:E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e9:f9:8d:9a:04:5d:f5:31:41:1f:bf:d8:65:3e:a9:c8:aa:
79:16:a5:c8:d5:92:2f:f3:51:d6:11:ac:ab:70:50:bb:da:99:
d3:7a:d2:0a:54:aa:4e:4f:67:95:bd:2b:f1:9a:14:dd:77:cd:
fe:68:be:3e:41:67:4a:f5:a4:18:20:c2:74:06:09:36:9d:f4:
29:ee:df:fd:84:a6:4a:af:38:b8:71:a1:88:ff:a7:36:0e:9c:
4b:52:7e:c8:42:a7:80:f6:28:2f:e9:30:e9:50:39:69:09:b4:
8f:8f:fb:8c:cd:a3:4c:85:24:75:ca:59:38:8c:56:91:4c:bd:
4f:2b:1d:fe:ac:59:f6:98:2e:c1:84:44:e7:a4:35:f0:da:39:
89:3f:0c:77:e3:a7:2e:c2:38:e3:70:0a:41:a6:e3:60:2a:7e:
ae:50:66:24:9b:39:ab:c9:68:f1:41:d3:f5:c8:60:bd:46:eb:
6c:57:da:4f:5c:28:cf:6d:0a:3e:f4:85:0f:d7:06:b7:88:bb:
e3:7f:ec:02:cc:ac:5a:28:ce:4f:f1:9e:63:35:ff:de:62:84:
f4:73:9a:87:e4:31:87:99:cb:ba:9b:63:db:87:7c:75:72:46:
d9:bf:f6:89:4d:9c:f8:15:d3:72:ad:fe:5a:58:66:57:e5:7d:
46:53:ce:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:13:25 2025 by rpki-client