Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
File: 5LDTQqkyMznAd8XGreEJO1pADyQ.mft (raw, json)
Hash identifier: CH+/10H7eDfboC4u8ffYKt6LhoXsrfWt6SwoLvL8uLM=
Subject key identifier: 1A:E6:00:18:E0:5A:91:20:F7:55:4E:6A:5E:6D:37:6C:00:D3:62:74
Authority key identifier: E4:B0:D3:42:A9:32:33:39:C0:77:C5:C6:AD:E1:09:3B:5A:40:0F:24
Certificate issuer: /CN=e4b0d342a9323339c077c5c6ade1093b5a400f24
Certificate serial: 01974A0CCCDE2BCD131B834E4097381F76E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
Manifest number: 01E1
Signing time: Sat 07 Jun 2025 11:00:42 +0000
Manifest this update: Sat 07 Jun 2025 11:00:42 +0000
Manifest next update: Sun 08 Jun 2025 11:00:42 +0000
Files and hashes: 1: 5LDTQqkyMznAd8XGreEJO1pADyQ.crl (hash: 3XECV7+ZqizRiV6dBz8dQK9vFp7P2xcRctleJKbaBfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:cc:de:2b:cd:13:1b:83:4e:40:97:38:1f:76:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b0d342a9323339c077c5c6ade1093b5a400f24
Validity
Not Before: Jun 7 11:00:42 2025 GMT
Not After : Jun 8 11:00:42 2025 GMT
Subject: CN=1ae60018e05a9120f7554e6a5e6d376c00d36274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:9c:30:58:91:e5:be:10:04:b6:2e:43:da:
9b:86:9d:86:00:8d:ea:e8:d9:f2:b5:7c:e3:e3:30:
f6:25:59:bf:58:52:db:08:2c:bf:d7:dd:8a:5a:5b:
37:33:c0:f1:31:ee:e4:62:1e:2b:c5:e0:7b:a5:54:
6f:17:8f:5c:c0:38:9b:d9:39:2b:3e:a1:4b:c2:26:
34:2e:b3:c5:5f:88:1e:2e:66:05:62:99:f1:a9:8f:
d4:36:75:c9:ae:60:ce:7e:08:d0:0b:c6:31:3b:05:
d8:57:08:be:c1:59:a3:6a:ab:af:e6:b1:80:00:38:
88:f2:92:ee:16:28:b4:5e:6e:46:af:98:55:21:48:
91:3f:77:21:27:22:22:3b:88:4c:b0:d1:f8:54:7c:
cd:f5:1c:b0:9c:8e:ea:a3:98:4e:91:e9:84:ef:f9:
a8:ed:92:b2:6c:3f:24:f0:fb:91:14:b6:76:a1:db:
84:b4:82:55:0d:30:71:5e:b0:da:81:77:70:e6:52:
e0:0e:87:ca:d4:9f:14:90:6c:11:fb:31:91:69:a1:
9b:db:27:f8:d9:5c:be:60:c9:dc:1e:d2:79:ba:f2:
c4:9f:6e:60:32:8d:4b:71:db:46:8b:04:01:56:b4:
ff:cd:1a:dc:c4:52:73:08:7f:c1:06:46:4a:f0:fa:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E6:00:18:E0:5A:91:20:F7:55:4E:6A:5E:6D:37:6C:00:D3:62:74
X509v3 Authority Key Identifier:
keyid:E4:B0:D3:42:A9:32:33:39:C0:77:C5:C6:AD:E1:09:3B:5A:40:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a6:c3:48:55:87:53:2f:62:db:72:37:3c:3f:63:c7:cf:be:
56:d2:0e:18:f1:e0:70:ac:38:f0:dc:c7:4a:18:b1:74:26:54:
e3:49:fb:b7:06:72:8b:d3:2b:41:17:0e:75:40:e1:ee:56:7f:
b3:fe:22:52:4c:4e:ef:24:82:a2:cf:7c:a9:45:9d:32:60:51:
07:51:bc:d0:ec:6d:b5:f0:7a:d3:55:f1:b5:a6:e6:1b:aa:73:
bb:96:8a:3b:9a:9f:12:0f:0b:eb:c2:6a:e5:ec:c1:31:28:bc:
d2:80:ef:7a:b5:17:3b:c8:7e:f1:80:59:a3:81:eb:6b:4f:8d:
eb:48:f0:04:b4:46:a2:5a:65:fd:e1:2d:cb:51:eb:63:19:74:
f9:3a:ad:b8:ed:de:f7:f3:32:a2:4c:a5:58:e0:04:4c:4c:7e:
c1:6a:c3:6f:8d:d4:18:9f:01:f6:89:4a:c7:03:be:43:52:b9:
6a:ad:09:a2:ff:88:56:e0:83:43:61:44:1b:2d:8d:15:68:57:
ac:c6:09:12:71:ce:4a:35:5b:b5:9d:f4:94:23:fe:4e:b7:9d:
67:5b:3d:f9:89:52:f0:c3:3e:14:8c:d0:69:2b:57:77:b7:64:
c4:fd:66:26:0d:07:a7:6b:be:0c:ac:07:15:68:5b:89:41:44:
98:d8:17:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:00 2025 by rpki-client