Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
File: 5qi5LUxZf2wET3clKFSPnJEpoNM.mft (raw, json)
Hash identifier: kGZfvU3DNIUu/9mkG7BRF2aviqlXvfmowwOks8RfygQ=
Subject key identifier: 18:AB:05:EE:DC:72:DD:7E:72:3B:7E:20:9A:D3:5A:04:45:D6:CF:5A
Authority key identifier: E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
Certificate issuer: /CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Certificate serial: 0197470BF65E30DBAD78697E45DDCB7E47A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
Manifest number: 1259
Signing time: Fri 06 Jun 2025 21:00:55 +0000
Manifest this update: Fri 06 Jun 2025 21:00:55 +0000
Manifest next update: Sat 07 Jun 2025 21:00:55 +0000
Files and hashes: 1: 5qi5LUxZf2wET3clKFSPnJEpoNM.crl (hash: tDUABLL/BYpftqxIIsu27gmMKsFhSYPI8hlQ27wTRmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:f6:5e:30:db:ad:78:69:7e:45:dd:cb:7e:47:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Validity
Not Before: Jun 6 21:00:55 2025 GMT
Not After : Jun 7 21:00:55 2025 GMT
Subject: CN=18ab05eedc72dd7e723b7e209ad35a0445d6cf5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:4a:3b:02:26:23:9e:9b:30:af:eb:5e:68:
43:76:85:47:0a:c1:25:9f:8d:42:09:8a:b9:ee:fd:
4e:a5:cc:fd:af:18:bc:d4:29:35:79:5e:5b:fc:58:
8d:33:9b:14:be:cb:d3:e5:06:31:bf:f1:0e:38:35:
20:82:84:3e:e2:6a:a4:f9:2e:c5:9f:2c:41:38:82:
56:16:bd:82:2b:43:75:bd:67:20:eb:c7:ba:e9:8a:
9c:18:47:2f:9e:b2:29:2d:b5:25:57:ed:e9:e6:a7:
d9:5a:20:fa:97:e5:a5:4e:7b:1b:5c:b7:71:78:c5:
3f:6b:cb:9d:5d:53:03:7f:9e:f3:a0:f7:f3:46:bd:
1b:25:3d:5f:d0:39:59:13:ef:cf:2c:c8:20:90:c9:
d0:91:f4:3b:bc:ba:f3:e9:74:ac:a8:75:0b:84:cd:
1f:fc:d5:f4:53:20:b4:32:0d:c8:ca:09:40:d4:0b:
43:06:01:aa:57:78:37:1a:ef:bd:fe:03:e8:56:12:
74:0b:0d:f1:27:e4:b4:29:e3:d0:94:54:f0:3a:6f:
3f:a4:5b:88:45:2d:a9:5c:42:b1:4a:51:ad:8c:0a:
2a:01:f2:21:3c:c7:a3:2f:42:77:0f:9f:d4:95:8e:
9d:34:78:20:8e:83:d5:e7:c3:f2:69:1c:76:79:37:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AB:05:EE:DC:72:DD:7E:72:3B:7E:20:9A:D3:5A:04:45:D6:CF:5A
X509v3 Authority Key Identifier:
keyid:E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7f:48:74:71:13:28:60:54:d0:0c:f0:6c:47:97:74:5b:10:
fd:2a:3c:b0:21:6f:44:c6:49:63:03:b0:8e:5a:c1:ba:ef:b5:
9d:3a:eb:09:bc:a4:77:0d:2e:b2:0f:11:ef:81:be:01:01:25:
1f:7a:c6:9b:02:68:a1:a1:3f:e0:16:b6:05:22:79:ef:66:73:
0f:0e:e6:b5:a5:30:b5:40:5b:f6:0c:d9:ef:00:67:63:c7:c9:
0b:13:16:c5:6a:53:19:fe:fa:ad:8a:33:63:85:7f:27:d1:2f:
f5:b3:51:98:e8:bf:43:bc:a7:76:09:26:ec:d3:ff:ed:36:49:
b6:d3:58:be:bf:e2:d5:37:d0:d5:77:6b:ca:19:e8:8f:e9:31:
82:81:83:34:72:89:41:9c:94:e8:97:1c:0d:ab:63:b0:cd:b9:
25:f6:08:d0:31:b3:32:65:ac:6b:b5:51:0d:3b:87:b7:34:2d:
79:05:39:92:64:02:b6:55:c5:f7:87:3f:d6:69:b2:e0:5d:5f:
c0:3b:89:f8:b8:38:07:f2:6c:a8:d6:58:ba:4c:3c:03:e8:dd:
e7:f1:c9:6f:b6:b0:cf:31:7b:89:a4:f1:e1:15:90:6c:a6:b3:
25:6d:80:55:e6:2c:20:ad:63:02:cf:74:53:74:a2:d8:0e:82:
db:9b:74:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:40 2025 by rpki-client