
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
File: 5-aiybui7N1AdLMVN1mDXoI6uOQ.mft (raw, json)
Hash identifier: +Llic9BXQ2suwxvccIP0lRlUvE2Mq4b+a8mdE5K/wvY=
Subject key identifier: BC:5D:BD:DC:AC:BC:46:35:6A:7E:CB:52:F9:E7:84:50:B3:BF:54:DD
Authority key identifier: E7:E6:A2:C9:BB:A2:EC:DD:40:74:B3:15:37:59:83:5E:82:3A:B8:E4
Certificate issuer: /CN=e7e6a2c9bba2ecdd4074b3153759835e823ab8e4
Certificate serial: 01974A7B97EE9786360525119F26A1DCB866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
Manifest number: 0C5D
Signing time: Sat 07 Jun 2025 13:01:42 +0000
Manifest this update: Sat 07 Jun 2025 13:01:42 +0000
Manifest next update: Sun 08 Jun 2025 13:01:42 +0000
Files and hashes: 1: 5-aiybui7N1AdLMVN1mDXoI6uOQ.crl (hash: JIVElm7E1JTdIfCghvEnK5gjiWjpbGUS1qMKZkGvYQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:97:ee:97:86:36:05:25:11:9f:26:a1:dc:b8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e6a2c9bba2ecdd4074b3153759835e823ab8e4
Validity
Not Before: Jun 7 13:01:42 2025 GMT
Not After : Jun 8 13:01:42 2025 GMT
Subject: CN=bc5dbddcacbc46356a7ecb52f9e78450b3bf54dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fe:b5:dd:fd:7e:55:35:73:81:81:c1:3e:04:
d9:89:18:eb:d0:2c:16:ea:7a:18:18:26:26:53:c3:
41:c5:2f:80:6d:0b:58:59:a0:ed:5f:92:80:b8:cb:
0e:d6:5b:37:1a:b5:94:cf:74:94:ce:76:63:bf:58:
1f:21:71:ff:d5:93:df:39:9b:3a:c2:93:cc:c6:5f:
94:36:d5:02:5b:70:df:1e:ce:69:d2:94:f5:63:22:
d5:ad:3b:bd:49:80:f8:3e:fc:63:c8:3f:43:9a:56:
9c:1a:5d:7d:a1:e4:aa:d0:25:83:0c:ed:04:f2:1c:
8d:51:95:08:bc:b4:4e:d4:69:6e:af:59:d7:56:f5:
89:da:bb:26:e5:40:50:16:e8:b0:81:48:7e:7c:fd:
a0:39:8d:44:d9:ea:3f:5d:a2:92:f9:8f:b0:e5:e2:
cc:3d:8f:be:a9:7f:b4:53:35:0a:01:24:ed:e5:d8:
5b:e9:71:58:09:a6:55:8c:38:6a:3e:04:b7:54:32:
16:39:85:32:eb:88:90:d0:58:4d:18:5b:25:47:16:
5e:e3:42:53:12:1a:b2:f7:1b:d6:a6:91:31:1b:24:
a1:10:91:21:02:38:46:15:88:4c:a0:78:a7:f3:2c:
63:0b:22:39:4a:45:3e:44:4f:46:47:10:27:70:72:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5D:BD:DC:AC:BC:46:35:6A:7E:CB:52:F9:E7:84:50:B3:BF:54:DD
X509v3 Authority Key Identifier:
keyid:E7:E6:A2:C9:BB:A2:EC:DD:40:74:B3:15:37:59:83:5E:82:3A:B8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c4:bb:e8:71:4c:b4:26:2f:8c:a5:c4:31:92:cc:a4:cd:07:
27:bc:8c:1e:86:4a:53:4e:ca:d2:64:7a:ec:8c:ff:22:70:b9:
7b:7e:75:7f:7f:4d:19:7d:ff:03:45:97:2d:a3:49:93:8b:82:
76:bd:0b:98:ab:54:11:d8:3e:b6:d3:e4:0a:8f:f6:5b:1a:38:
66:f4:3a:fc:17:79:a6:7b:a0:66:51:2a:a9:93:b7:37:89:7b:
52:4d:93:49:06:d6:ad:d0:43:75:a9:cb:d0:3a:bd:89:09:a0:
5e:8c:f1:82:4a:a4:0e:ea:13:28:5f:6b:d0:34:90:53:f5:18:
fb:cc:d9:bf:c4:b3:b6:fc:b5:1b:cc:88:d1:be:f9:e0:fd:1e:
13:bd:01:1e:f7:90:51:fe:ea:8e:07:1b:a3:04:c5:eb:9c:9a:
ef:78:01:c4:8a:f0:df:5c:56:9f:06:8f:15:b8:44:ac:11:dc:
c4:9a:1a:d9:f5:d4:ce:60:28:d5:ce:3d:59:11:bf:ad:94:5b:
55:0c:04:76:f2:1c:41:83:98:ec:45:b4:21:86:4b:2a:d0:ef:
a7:1a:1f:d8:6c:9b:3a:a3:f0:c6:25:11:31:a3:51:e8:3c:be:
51:fd:ad:df:3b:ca:c7:58:2e:87:03:46:fd:75:a1:65:34:49:
08:b3:0a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:29:50 2025 by rpki-client