Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
File: n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft (raw, json)
Hash identifier: dt+zHbNcWZBSb6PliuNfLAx5Sgkee2CfWlZCfRDOupI=
Subject key identifier: 1E:A5:29:DE:E4:4B:5C:41:CD:F7:16:51:FA:A1:48:AA:ED:84:55:9D
Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
Certificate issuer: /CN=9f971109d2ea569b33e90a38e0302cff167bd035
Certificate serial: 01974A7B70B505074A6E5504EEBE4E1397D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
Manifest number: 0A7D
Signing time: Sat 07 Jun 2025 13:01:33 +0000
Manifest this update: Sat 07 Jun 2025 13:01:33 +0000
Manifest next update: Sun 08 Jun 2025 13:01:33 +0000
Files and hashes: 1: n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl (hash: z5dxqjV6/lTARDFVG0DhtBlm9a18vwPDgZm3l4iXdmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:70:b5:05:07:4a:6e:55:04:ee:be:4e:13:97:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035
Validity
Not Before: Jun 7 13:01:33 2025 GMT
Not After : Jun 8 13:01:33 2025 GMT
Subject: CN=1ea529dee44b5c41cdf71651faa148aaed84559d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:03:e9:05:bc:db:b3:17:1f:ae:0e:95:76:
10:19:69:81:e7:17:b8:a7:e8:69:1b:22:05:bb:f5:
ec:d3:52:7e:fb:24:8f:00:53:5d:b5:4e:91:09:97:
a8:9d:7c:49:6a:91:8c:43:81:cd:02:72:f7:f9:95:
1f:0a:60:42:23:4d:93:d0:c4:32:8a:ac:e3:80:f2:
67:e3:74:6a:27:9e:f5:30:1b:f0:29:ba:f1:5e:8a:
37:ac:b0:ad:e0:d4:1e:de:8b:d0:89:ca:11:b3:19:
13:69:2a:55:3c:46:3e:a5:0b:62:20:50:8c:63:e1:
f3:ef:e2:62:07:09:f3:b4:0c:a2:a0:32:f1:65:ea:
9f:23:9c:fc:57:d3:11:97:e8:db:f4:57:bb:ef:14:
cb:3b:e8:c8:f4:7b:b3:94:c2:14:a9:94:8e:ec:f7:
d0:bd:77:fd:50:14:9d:08:d0:dd:c9:e0:5d:01:18:
26:aa:32:bf:e0:77:3f:82:f3:0f:a3:c3:69:ad:35:
55:f2:d0:57:d6:75:de:70:75:36:97:f1:7f:29:57:
1f:b4:7f:e4:e9:b0:d0:1c:ed:f6:1e:c1:ae:f8:58:
54:a3:b3:30:35:96:fc:91:8a:97:23:c3:0e:ec:bd:
64:0f:f6:a3:e5:14:35:40:a9:6f:e2:7b:9f:4c:e9:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A5:29:DE:E4:4B:5C:41:CD:F7:16:51:FA:A1:48:AA:ED:84:55:9D
X509v3 Authority Key Identifier:
keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a6:ff:3a:9d:11:bb:b7:74:4b:52:b5:0b:13:f7:0f:b5:be:
17:dd:ab:68:2e:96:a7:85:10:a7:72:97:f9:31:05:33:e3:23:
b5:3d:f4:d6:cf:e0:a8:b1:6b:7d:26:87:e2:b6:74:cd:0e:b5:
a0:a4:5a:05:f0:66:78:20:dd:5d:62:66:62:67:f1:96:b7:77:
bd:01:3d:6b:a5:31:57:18:dc:b1:f1:09:94:6c:49:13:4e:3b:
d5:e0:e2:5b:d3:98:28:32:7a:c4:0e:9c:bb:7c:13:17:6a:d6:
40:45:60:3a:f2:23:b8:53:61:ea:77:3c:c3:7e:cf:74:7d:f1:
7e:7f:68:66:12:ff:92:e1:01:3e:11:27:d0:2b:c9:15:8e:0a:
1e:1d:cd:d6:56:72:13:68:1b:78:65:8c:2c:c3:92:74:8e:3a:
ac:6a:9f:f5:d6:c2:a3:18:5b:5d:f0:90:60:cc:77:79:74:09:
4b:d9:76:11:55:cc:fd:42:76:e1:5d:94:b9:41:dc:cc:c2:c3:
ce:72:ec:d2:8f:b3:73:d8:04:dc:f2:07:59:e0:ef:bd:99:ac:
6e:60:40:93:cf:48:2c:ae:3e:50:d2:8c:f5:c4:aa:3f:af:4d:
c4:97:0a:a0:46:3d:77:c4:b3:7c:9d:15:1a:48:e0:7f:f3:00:
d5:75:d5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:05:28 2025 by rpki-client