Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
File: 5cePoZk9RRL-JDa4ztqL_JKdZX0.mft (raw, json)
Hash identifier: PHCFUd4cEJ2njzuyO2Kl5uZE+laga+GjMkO5ZrccAbA=
Subject key identifier: AE:D0:FF:6D:9B:75:1D:DF:75:0E:5E:C7:5A:06:A7:63:CD:A6:10:57
Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
Certificate issuer: /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Certificate serial: 01974AB168F85E5CFB5A270040A8C37BA37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
Manifest number: 08BD
Signing time: Sat 07 Jun 2025 14:00:29 +0000
Manifest this update: Sat 07 Jun 2025 14:00:29 +0000
Manifest next update: Sun 08 Jun 2025 14:00:29 +0000
Files and hashes: 1: 5cePoZk9RRL-JDa4ztqL_JKdZX0.crl (hash: JIEXN/nzW1DCXQkbEZF8BEZtrI8oa/Hh0CRZigXD5+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:68:f8:5e:5c:fb:5a:27:00:40:a8:c3:7b:a3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Validity
Not Before: Jun 7 14:00:29 2025 GMT
Not After : Jun 8 14:00:29 2025 GMT
Subject: CN=aed0ff6d9b751ddf750e5ec75a06a763cda61057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3b:a1:6e:2f:81:83:ef:50:5e:f7:31:8a:46:
7b:68:fe:5c:c8:4a:19:ff:d6:be:f3:be:20:1a:c8:
98:40:58:90:61:8d:8b:03:72:70:88:d5:85:2e:8d:
27:77:f8:ea:f1:c6:de:9c:f5:b6:cb:63:36:68:d9:
db:9a:30:81:a6:42:24:6f:e6:79:98:b2:3a:f5:b8:
87:41:11:48:b2:5c:66:8c:34:a4:9e:5b:31:e3:4f:
b7:40:09:24:ab:dd:7c:0d:cd:4e:99:b0:fc:46:5f:
1e:5c:75:54:bb:38:e6:be:07:41:ae:b9:2b:dd:3a:
fd:83:32:95:f4:5d:2c:50:ed:b6:d2:28:cd:3c:62:
a5:a2:cc:5e:f3:3d:34:9b:0a:2e:09:c5:59:76:b1:
91:f5:d9:e7:bf:df:60:d0:cf:0c:2f:1b:37:7c:3e:
44:89:fe:92:18:b3:6e:7b:59:9d:40:86:9c:00:95:
39:b5:e9:92:d6:44:0d:48:7d:bc:76:8b:44:72:1d:
a3:15:72:2e:e5:28:3e:70:e0:8d:b0:4b:d0:c9:c1:
46:c3:5d:39:5c:aa:57:83:60:51:ea:3d:6f:3a:71:
90:ce:2e:42:24:43:65:65:c0:51:70:b1:c2:52:29:
98:d5:b8:3f:0a:df:49:33:3c:5b:1c:b3:d2:b1:da:
f6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D0:FF:6D:9B:75:1D:DF:75:0E:5E:C7:5A:06:A7:63:CD:A6:10:57
X509v3 Authority Key Identifier:
keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a0:18:9f:54:0f:21:62:ca:18:ff:b4:17:a6:c0:82:11:69:
59:c9:62:b2:00:f4:d0:c9:db:81:8c:6f:64:31:f2:1b:f4:d4:
24:5c:0a:47:75:24:f1:69:2b:a0:a4:ad:6f:a7:16:46:2a:73:
56:5f:e1:21:4e:44:52:80:5c:7c:f2:f2:49:88:07:41:9b:6f:
e6:fc:00:22:f6:fb:4e:81:cb:59:e4:1f:5e:2b:60:ce:ef:68:
42:04:b6:6d:83:c8:84:dc:a5:64:8f:bd:ad:00:38:94:84:54:
ad:ab:b8:c6:6c:55:3a:0b:cd:e2:92:55:7a:b4:cb:29:85:81:
1e:6b:63:96:c9:f6:2a:4d:b3:a4:8c:b3:5d:23:6d:76:01:89:
1f:0b:a8:da:25:bd:69:a0:69:3a:33:24:49:ee:a6:44:e6:aa:
67:d4:64:09:ff:6a:ee:6e:7f:55:e1:38:0a:b8:c0:58:64:32:
85:9c:39:60:2a:ae:c5:d7:54:56:8e:af:e3:0e:3f:5e:dd:9a:
bd:78:6c:a9:48:99:5e:e6:2e:91:57:af:c8:e1:15:79:50:96:
e7:83:7a:1c:df:bf:c6:b6:97:1c:e8:e2:c5:b7:4d:e3:9c:3b:
82:ed:99:26:78:6c:08:a0:46:f0:d5:6b:64:b7:2e:6c:de:25:
aa:6e:06:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:30:38 2025 by rpki-client