Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
File: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft (raw, json)
Hash identifier: Za8MFWU2UBsHkwM7PYUvgfxNpTg3aI/cb+eNobs4kSE=
Subject key identifier: BE:13:59:09:5B:B3:D6:31:9C:E1:C2:46:4F:FD:23:2D:47:E6:30:DB
Authority key identifier: FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
Certificate issuer: /CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Certificate serial: 019748FA289AFF9605CD6C18B600E58ED0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 06:00:43 +0000
Manifest this update: Sat 07 Jun 2025 06:00:43 +0000
Manifest next update: Sun 08 Jun 2025 06:00:43 +0000
Files and hashes: 1: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl (hash: KKk/nfag7RnDVSRXu96k4oWpZ+mRjPmuGvD5tid6cLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:28:9a:ff:96:05:cd:6c:18:b6:00:e5:8e:d0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Validity
Not Before: Jun 7 06:00:43 2025 GMT
Not After : Jun 8 06:00:43 2025 GMT
Subject: CN=be1359095bb3d6319ce1c2464ffd232d47e630db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:ac:18:fd:24:cc:a7:1a:54:29:12:8b:2f:
a4:d7:00:71:2a:61:48:a9:2a:53:fb:dc:2b:e4:d3:
9f:cd:83:cd:d4:21:19:16:28:f5:fb:72:bb:4c:f2:
d7:5b:fd:e4:09:7e:8a:6b:25:97:b5:15:9f:f4:ee:
eb:c9:2e:6c:13:e9:7b:bd:da:37:1b:f0:33:f5:93:
89:73:d3:41:28:3c:9c:57:dc:f1:9c:57:21:1c:dd:
46:ce:e8:0b:fe:71:9d:bc:d4:ea:48:aa:b3:c8:0c:
6e:93:e1:de:7e:6e:54:8e:ec:e9:a6:d3:75:d4:4a:
34:ab:47:9a:be:df:d8:a0:3d:06:2c:f2:06:c2:d3:
27:e4:2f:be:fd:e9:8f:9b:05:aa:ec:68:68:11:ea:
f6:ac:bf:7c:90:7e:62:e3:f1:ac:92:41:ef:21:ed:
b3:0b:16:0a:71:d7:03:38:93:8b:b4:04:07:cc:e1:
3f:9c:b4:a0:03:47:54:5e:8f:19:3b:6c:e2:8e:75:
16:15:9f:b7:28:63:e2:d5:db:fe:77:3d:3c:fe:b6:
2a:82:37:0b:84:37:7b:97:93:ad:d6:79:82:a3:36:
3c:60:68:70:ef:da:31:16:42:28:27:ac:f2:20:fb:
7e:11:77:86:8c:52:34:d8:fb:cf:f4:8d:0e:bf:e9:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:13:59:09:5B:B3:D6:31:9C:E1:C2:46:4F:FD:23:2D:47:E6:30:DB
X509v3 Authority Key Identifier:
keyid:FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ac:40:b0:b0:ab:2b:61:ab:46:09:c3:dc:ff:87:f0:79:9c:
8a:35:fe:23:d5:01:ab:45:5f:f2:e3:0a:1c:11:50:c5:97:87:
62:7c:2e:e3:42:58:2f:2c:f2:70:26:7a:3e:0a:9d:72:c0:ce:
8e:65:2d:50:c7:4d:14:06:32:00:82:8b:d2:b2:aa:7e:ae:0c:
35:c0:47:75:e4:92:e2:e3:8b:f0:06:6c:ee:b2:f8:f4:29:c1:
9e:f0:60:14:87:0f:dd:05:2a:0a:3f:11:a8:1c:17:00:b9:f7:
6e:d5:63:dc:26:2d:32:73:c1:a1:c8:d8:b6:cc:df:e7:22:0a:
3c:23:73:e2:40:7d:35:22:c1:ea:ac:48:23:67:f5:e2:4f:4f:
ff:08:87:ff:f2:2f:e4:7f:8d:d5:14:28:0f:06:6f:14:8e:34:
e8:3d:ec:9a:b0:a4:15:f3:3c:ec:5b:d5:a3:cb:b1:0c:c8:13:
85:68:8f:f9:47:db:d6:27:66:7d:d9:a4:3d:25:e2:e1:53:a7:
80:a5:f5:fb:81:e5:46:a0:4b:1b:31:8b:7a:4d:b1:f1:01:76:
b6:39:8e:0c:0e:25:97:3b:54:3d:51:fb:5f:a9:91:c2:e1:39:
94:50:8a:73:58:ba:59:0c:ab:15:71:24:9e:4e:41:c1:c0:bb:
ee:08:8c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:25:24 2025 by rpki-client