Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier: yxshRP6BLsc9O9qxt6fd7Q9B1kSadHRooQfDvubXku8=
Subject key identifier: 1B:53:E5:37:D7:33:7C:56:37:30:D6:8B:30:C8:63:8D:94:33:42:8D
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial: 0199239FE9B36F025920D45617657244435E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number: 08A4
Signing time: Sun 07 Sep 2025 10:01:46 +0000
Manifest this update: Sun 07 Sep 2025 10:01:46 +0000
Manifest next update: Mon 08 Sep 2025 10:01:46 +0000
Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: xp2o4xxZNABIeb7GVh6mn19wqkbqB0T/6K5LrunZeqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:e9:b3:6f:02:59:20:d4:56:17:65:72:44:43:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Validity
Not Before: Sep 7 10:01:46 2025 GMT
Not After : Sep 8 10:01:46 2025 GMT
Subject: CN=1b53e537d7337c563730d68b30c8638d9433428d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:87:36:7d:55:25:64:3a:f3:fc:03:66:d6:
48:68:09:b8:c8:d3:8f:31:c6:0a:62:b3:e6:0f:a1:
cf:41:1c:8d:b0:4a:e4:56:fc:be:c1:a3:01:5a:34:
7e:e5:4d:07:bf:d1:5f:45:e0:95:7a:cf:81:01:4f:
70:79:9d:22:ab:aa:1f:2b:b7:61:80:a9:25:20:a3:
4b:71:8c:bf:5b:12:d3:d9:6b:36:45:e9:2f:d3:4d:
f8:28:68:87:1b:f0:9c:56:b3:b1:32:18:4e:e0:df:
05:90:44:33:43:8c:7b:84:56:46:93:61:14:ee:0c:
37:3c:52:d6:44:d1:14:f2:9c:c1:78:d0:9b:9b:53:
69:79:f3:2b:72:14:04:cf:49:0e:80:bf:ab:ae:77:
ff:a5:67:34:7b:3e:21:54:e1:b5:06:bc:e3:ec:57:
8e:05:ac:da:28:b2:b4:9f:fd:9d:3a:dd:8b:97:60:
68:9a:a2:87:d9:0d:90:fe:90:3c:7a:fe:fb:58:ab:
a1:b0:10:1e:76:d7:09:02:f4:46:9a:74:a4:ed:09:
8e:b9:28:da:4f:03:27:35:97:28:d1:5b:66:79:dd:
aa:43:32:3d:7f:c4:2e:b3:42:bf:1e:a2:c3:5b:30:
3d:36:3e:d6:ab:98:67:c7:29:33:08:25:8b:69:36:
d3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:53:E5:37:D7:33:7C:56:37:30:D6:8B:30:C8:63:8D:94:33:42:8D
X509v3 Authority Key Identifier:
keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2c:02:62:3c:dd:c5:3a:db:68:b8:6b:e2:a3:92:ae:a7:25:
fa:8e:eb:a6:6e:c8:35:9b:94:79:06:35:50:24:5f:c4:2f:c3:
a5:77:f1:73:cd:7c:ad:90:84:ad:45:92:3e:48:17:df:ff:d8:
a7:30:b1:e8:dd:30:a9:a8:3f:15:81:d8:e1:3a:0b:a5:53:00:
12:fe:ee:8b:5a:7a:5f:f6:16:7a:f1:2f:8e:11:a6:87:5e:cf:
f5:b5:45:a1:8c:27:87:d6:7d:2e:b1:a7:2f:90:91:1c:3d:74:
ac:d6:c4:b2:b0:40:16:80:17:83:e8:95:be:3f:d4:c9:7b:69:
05:33:81:d1:99:cf:c7:ec:e6:6f:c5:8f:f2:d5:6b:2c:7e:af:
83:72:b3:a8:d0:d1:11:38:ae:b9:80:ec:ff:f7:b0:f7:c1:76:
7e:c4:54:dd:ab:6c:f2:42:26:7d:19:46:80:5c:f0:e6:c0:aa:
37:7a:bf:42:a6:fb:b9:35:37:7d:1c:3b:7a:88:79:4d:49:b7:
ba:fc:01:5e:68:81:40:05:b7:69:19:ae:c7:ef:15:b3:51:22:
a4:25:f9:41:92:18:33:ad:c7:2c:8b:42:10:1f:b1:db:a5:de:
73:0c:b5:65:63:c4:4c:c0:4f:83:ac:36:bb:f0:1f:4c:08:1a:
68:b4:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:16 2025 by rpki-client