Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
File: cA5JDhDqN72DSWKGM7WIVmHmegI.mft (raw, json)
Hash identifier: 5TxO0Wlu4d4d5PTTm802Gog7Df7Mp2/nKHKOyKZO9BA=
Subject key identifier: B2:89:8C:1A:D3:50:47:CE:77:C9:AB:A6:99:1B:90:FC:8B:30:DA:68
Authority key identifier: 70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
Certificate issuer: /CN=700e490e10ea37bd8349628633b5885661e67a02
Certificate serial: 01974A7B5CBFFD9CD9D479CC464E3126DDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
Manifest number: 87
Signing time: Sat 07 Jun 2025 13:01:28 +0000
Manifest this update: Sat 07 Jun 2025 13:01:28 +0000
Manifest next update: Sun 08 Jun 2025 13:01:28 +0000
Files and hashes: 1: cA5JDhDqN72DSWKGM7WIVmHmegI.crl (hash: tr6DcmZzO7yp5gzaWjwdk3U7x48VjQldeePLZNiQFLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:5c:bf:fd:9c:d9:d4:79:cc:46:4e:31:26:dd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700e490e10ea37bd8349628633b5885661e67a02
Validity
Not Before: Jun 7 13:01:28 2025 GMT
Not After : Jun 8 13:01:28 2025 GMT
Subject: CN=b2898c1ad35047ce77c9aba6991b90fc8b30da68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:d5:ce:75:78:25:74:74:f9:8c:0f:72:50:
2e:c7:35:9d:ae:08:48:dd:cf:30:ca:ca:0f:4d:8f:
61:b7:59:b8:04:8d:a8:83:70:64:a4:13:7d:bb:a6:
d1:92:c4:8a:84:20:03:11:66:c0:e8:b6:c0:17:29:
0e:9a:6e:1b:a2:23:be:ff:af:03:12:f0:03:92:79:
37:d6:ac:b4:c3:d5:de:c7:5c:5d:64:4a:a9:a8:e9:
75:57:a7:c8:70:bc:a4:71:24:d8:8a:92:70:e1:d0:
fe:a7:8a:41:bf:f4:2c:14:51:ff:36:64:1d:f1:2c:
9e:46:9f:90:ef:89:fa:77:85:44:b9:5b:c4:e1:cc:
97:a3:62:28:04:ec:11:53:f6:a2:f6:f4:1e:01:6a:
84:db:9b:77:f4:a9:c5:69:df:7a:82:85:39:36:73:
e2:a7:13:c4:91:bf:c7:bb:6a:db:9f:53:b5:c2:8c:
20:81:a0:9f:e1:73:12:8b:75:ca:db:c6:ad:6b:95:
2e:e0:87:a7:4f:d3:37:6e:31:a8:1a:25:cf:7d:a6:
f7:46:b5:83:a1:20:0e:3c:3e:a3:a5:d0:5b:00:0b:
3d:49:36:5d:52:91:9f:3c:ae:1f:c2:db:48:34:b1:
f4:b7:3e:29:3c:78:a5:76:df:78:d2:c9:bf:3e:6d:
66:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:89:8C:1A:D3:50:47:CE:77:C9:AB:A6:99:1B:90:FC:8B:30:DA:68
X509v3 Authority Key Identifier:
keyid:70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:26:21:2c:b2:8e:7f:8d:09:f9:1a:cd:87:e7:77:36:02:28:
66:39:c7:13:a1:7c:93:95:e3:a4:14:a9:c0:94:0e:a9:64:8a:
2f:eb:36:a9:bd:4d:26:4f:4a:b6:aa:cc:2e:ad:8b:5d:be:ad:
48:ed:22:d6:b6:7d:e5:8a:de:0c:d5:b3:41:e6:e3:5c:4e:df:
bb:0a:f5:91:4b:41:97:d9:60:0a:72:2e:c5:e5:c9:64:d5:72:
a5:96:f1:4a:30:19:e3:11:da:c4:25:f4:32:db:b2:2d:ed:02:
52:96:c3:3d:9c:ef:f7:89:35:cc:70:31:cb:00:55:72:4d:63:
eb:15:1b:fe:59:35:a2:9f:2b:0f:6d:3c:6e:12:23:31:2a:5c:
d2:13:8f:8d:f4:03:ff:4e:28:7d:6a:c7:73:ea:4e:97:a7:c2:
4e:5f:6e:e9:2c:55:28:c4:00:1c:da:7c:40:d8:aa:f1:73:71:
dd:29:a3:29:28:52:fa:9d:8d:bd:ce:c5:ff:90:33:a0:43:81:
12:81:8b:ea:67:00:e2:4e:3b:c5:a9:b1:74:1c:29:56:73:b4:
9d:5f:79:3f:c5:1e:bf:0b:c3:17:20:1d:5e:59:78:63:b3:95:
58:a5:71:f4:03:53:71:5d:0d:fd:fc:df:5b:f6:4c:a0:f9:77:
e8:cf:8d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:45:31 2025 by rpki-client