Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
File: 5jEQtJQcMhHihW_w6K39FXgqyXM.mft (raw, json)
Hash identifier: +WiGjsw4WAUzMB/kSsg6U++yY+AtodilVbFW6Wvj2aQ=
Subject key identifier: 50:56:7E:E8:D0:D0:57:E0:5E:83:46:22:43:92:E3:9A:80:43:B4:1F
Authority key identifier: E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
Certificate issuer: /CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Certificate serial: 019752346F2F4639885874D92B3C11734B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
Manifest number: 0CE1
Signing time: Mon 09 Jun 2025 01:00:57 +0000
Manifest this update: Mon 09 Jun 2025 01:00:57 +0000
Manifest next update: Tue 10 Jun 2025 01:00:57 +0000
Files and hashes: 1: 5jEQtJQcMhHihW_w6K39FXgqyXM.crl (hash: tzoozKUIPRpgnoguGDMHzPcUTyj/WLvPpEN/V4hWjj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:6f:2f:46:39:88:58:74:d9:2b:3c:11:73:4b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63110b4941c3211e2856ff0e8adfd15782ac973
Validity
Not Before: Jun 9 01:00:57 2025 GMT
Not After : Jun 10 01:00:57 2025 GMT
Subject: CN=50567ee8d0d057e05e8346224392e39a8043b41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:f5:c4:a2:1b:b6:88:c8:d6:9d:6e:e7:e3:
e0:8c:c8:fd:30:16:b0:ff:b3:31:5b:43:cc:c1:92:
fb:75:b9:38:9d:fe:3a:8c:13:f5:09:9b:98:51:17:
88:5f:6d:bd:69:3e:3a:ff:9c:e1:f0:fa:c9:08:29:
bd:50:13:74:f3:33:c9:ca:cb:0f:1b:85:a0:54:1f:
79:81:36:5c:bc:cf:90:16:05:ef:d2:5e:00:90:55:
5f:30:4a:91:c6:b3:32:d0:19:07:49:db:bf:e0:7d:
bd:ad:91:78:5c:87:f0:ac:10:05:1e:de:aa:5e:b8:
f8:38:fc:56:c2:60:73:24:9d:73:be:54:e7:77:c3:
3a:01:ec:07:a7:d2:66:4e:80:d7:2e:65:f1:6e:80:
f1:fe:24:83:a2:f1:07:54:9e:7a:fc:52:22:db:01:
21:84:e6:aa:72:e7:ba:f7:95:ee:36:d0:9c:7e:6b:
76:f3:54:56:65:fa:d9:8e:6f:cc:7e:72:b4:50:88:
e8:87:73:f6:ee:20:62:d6:94:4c:40:55:ee:a5:f1:
5c:06:c8:22:96:1d:6b:c0:24:53:6e:41:d7:cd:53:
ff:78:4f:0d:22:9c:6f:f1:7b:0c:56:6a:5b:7f:0b:
91:c2:f3:11:8f:d1:15:97:1f:19:f3:63:fc:19:49:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:56:7E:E8:D0:D0:57:E0:5E:83:46:22:43:92:E3:9A:80:43:B4:1F
X509v3 Authority Key Identifier:
keyid:E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:34:06:49:57:9c:20:a8:03:13:a0:89:a9:f4:86:1d:6c:13:
bc:ec:cd:0c:4c:89:5d:3b:6e:ea:52:60:c7:2d:bd:b2:95:d1:
ca:c3:e0:11:fe:5c:66:6f:68:9c:54:f9:95:76:2e:3b:87:0e:
aa:2c:4d:38:07:82:41:e5:3a:9b:01:df:05:f0:da:bf:13:86:
99:87:f0:3d:bf:f3:cb:fe:9b:47:81:7c:14:37:81:7d:e2:7f:
40:52:a0:ba:b4:3c:75:9d:0c:33:ed:4f:94:fe:68:f9:35:d4:
12:e0:4d:60:27:82:33:ec:7b:ee:80:02:60:e8:77:a6:30:3a:
f7:ae:99:d1:94:52:eb:3b:b4:47:5a:a9:2c:11:ed:c6:d8:be:
12:04:22:c8:bd:d9:6f:b5:1a:70:a5:be:25:12:3e:11:e7:2b:
2f:4f:fa:b0:a1:71:12:68:89:63:a8:67:08:2f:7a:35:24:ce:
2b:5c:6e:2f:17:26:8b:ba:b9:75:0d:6d:29:b6:87:c2:6f:d4:
7a:6f:0a:a1:da:83:cd:6c:30:11:2a:ff:47:5d:14:d8:84:1f:
ad:68:7a:17:ac:1d:13:33:3e:7e:2c:56:4a:c7:b7:8f:b9:03:
12:83:a3:37:32:7e:82:be:a7:0f:ac:9e:e5:49:ae:74:81:41:
c0:c8:de:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:27:11 2025 by rpki-client