Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File: 5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier: 0aXvCZ1RlFUpTMN+KpfjB25/3/9GF5TssRPMaP9fMt8=
Subject key identifier: 35:93:83:55:A4:8A:A0:61:AF:2B:74:A7:DB:44:B4:E0:98:32:13:5D
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer: /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial: 0198462D46CA0DA49FCF341B9E14C6C77363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number: 0C41
Signing time: Sat 26 Jul 2025 10:00:29 +0000
Manifest this update: Sat 26 Jul 2025 10:00:29 +0000
Manifest next update: Sun 27 Jul 2025 10:00:29 +0000
Files and hashes: 1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: RGqpWYJ2nAwhdqgj7NECpXiuOYqrRymh+dC5ERfpIwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:46:ca:0d:a4:9f:cf:34:1b:9e:14:c6:c7:73:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Validity
Not Before: Jul 26 10:00:29 2025 GMT
Not After : Jul 27 10:00:29 2025 GMT
Subject: CN=35938355a48aa061af2b74a7db44b4e09832135d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:4f:2c:4e:14:21:77:72:34:ad:88:f4:c7:
cf:bc:e5:67:cc:ea:1a:81:74:cc:07:f7:34:d6:7d:
7c:97:86:62:a6:f8:55:ff:6c:9e:d0:f5:9d:c4:c6:
f4:8f:ac:0e:62:fa:ec:b6:1a:9e:57:72:2c:16:a1:
b9:0d:cd:cb:08:66:72:1b:dc:3c:3f:b4:ab:ec:af:
ba:9f:2b:9d:ff:c1:ae:d9:78:61:21:2f:35:cf:23:
51:87:4d:0c:9d:28:e1:de:33:3a:cf:48:29:8d:7f:
e5:57:1e:4e:ab:37:28:ea:2c:f1:c7:6b:a9:ab:8e:
b0:ca:c2:4e:2b:7b:b5:3e:00:6b:89:a4:52:de:ea:
8b:de:dc:49:da:10:28:b0:b4:eb:11:bd:8f:31:32:
b6:4c:16:de:1b:bb:75:7b:0a:5e:6e:0e:7a:a8:9f:
f2:8a:52:14:03:b4:b0:f7:cf:02:f3:23:22:fb:b3:
25:24:d7:85:a0:7d:7a:26:a5:85:86:9a:cf:21:29:
59:01:6a:92:35:20:41:7d:31:29:62:56:1d:f1:9e:
97:41:8b:1a:94:c2:d6:67:37:c0:ab:2b:2b:61:41:
a7:b3:a1:ac:03:30:85:06:cc:f6:72:a2:10:f4:5a:
5b:32:ba:1d:cb:02:84:6c:69:6b:43:10:5b:3c:7d:
fb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:93:83:55:A4:8A:A0:61:AF:2B:74:A7:DB:44:B4:E0:98:32:13:5D
X509v3 Authority Key Identifier:
keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fa:a6:00:99:d7:55:d5:90:cd:a1:b7:b3:04:6f:ab:79:56:
20:5f:53:8c:fa:35:97:78:20:5d:df:5f:76:ef:c0:aa:26:6e:
13:af:5c:a3:61:8d:e5:f6:1e:e7:f1:73:63:6b:7a:d3:d6:c1:
44:19:8d:af:91:8e:20:47:ff:84:af:90:17:50:49:8d:3b:69:
ba:ad:33:57:82:3c:27:7b:27:ef:6b:6a:bf:01:4a:95:3c:f1:
1a:b6:dd:0f:8e:8d:6a:f4:4e:c6:d9:5b:f2:6a:88:2b:e7:55:
cf:a4:58:22:85:26:eb:74:9a:4b:35:2e:54:91:50:25:eb:30:
d3:f2:22:9c:46:8c:7b:dd:d6:f5:18:87:12:39:c6:32:80:ef:
bf:71:cc:ba:d7:e1:66:48:25:df:57:72:b5:e7:48:8d:d6:53:
f7:e7:b8:da:28:43:d4:1d:e8:df:8c:1f:71:b5:6e:7e:fc:cd:
69:57:24:4b:df:4f:95:01:bd:7f:57:5a:80:07:99:14:c4:06:
d3:58:28:64:0b:11:6f:14:b1:a6:4b:35:bf:23:c5:48:3c:6f:
bd:0d:eb:94:5d:8d:c7:6c:d4:1a:7f:db:ac:68:f5:a2:af:05:
2f:62:1a:6a:c6:02:f9:0f:24:8b:30:e4:74:3f:98:a8:e6:8b:
03:8a:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:52:27 2025 by rpki-client