Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
File: t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft (raw, json)
Hash identifier: ikfKCncbWNcNblbg8+XB8BQvjOUu72SDWj6XLnpvGvU=
Subject key identifier: 07:DD:4D:6D:28:D5:1B:DB:E7:1E:15:A3:14:E6:29:A7:79:C6:EF:36
Authority key identifier: B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41
Certificate issuer: /CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
Certificate serial: 0197470BAD1A47D7BC9D31DBBD87C5B7AEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
Manifest number: 0C10
Signing time: Fri 06 Jun 2025 21:00:36 +0000
Manifest this update: Fri 06 Jun 2025 21:00:36 +0000
Manifest next update: Sat 07 Jun 2025 21:00:36 +0000
Files and hashes: 1: t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl (hash: BXtwyTgz0gm4bzzq8Xep7vXdsvNauoAJYFOq945kwrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:ad:1a:47:d7:bc:9d:31:db:bd:87:c5:b7:ae:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
Validity
Not Before: Jun 6 21:00:36 2025 GMT
Not After : Jun 7 21:00:36 2025 GMT
Subject: CN=07dd4d6d28d51bdbe71e15a314e629a779c6ef36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:e2:19:ab:fd:19:0a:84:98:ed:bf:28:40:
87:e2:fc:e9:bd:d3:d1:34:5d:9b:1b:98:0c:37:f3:
0e:9c:fe:d1:b8:8f:b5:8b:34:7c:f7:41:43:bd:b7:
37:94:b2:db:c1:0e:86:98:d6:c3:19:d6:6a:69:89:
b2:74:b7:e3:bd:7c:27:5f:75:14:4c:e6:94:7a:1e:
50:59:b2:c4:5d:f5:87:d6:a3:27:6c:a6:95:ad:2a:
c3:dc:af:9c:4d:d4:09:73:2c:90:a7:d7:7d:d6:b2:
af:49:13:7e:bf:24:00:1a:19:96:f8:79:9f:f5:19:
5d:43:f3:72:1f:b2:67:e6:7d:72:db:f7:f4:45:db:
fc:ed:25:b8:95:a8:4a:27:54:6d:13:35:8e:86:cf:
58:b3:93:46:26:53:2c:98:96:fb:62:1e:53:25:fb:
ca:d4:74:93:f7:b0:df:1d:15:6c:9f:26:3f:9e:22:
40:78:25:75:ec:f6:92:ec:49:8b:05:70:8c:c3:71:
da:f3:2c:27:dc:37:72:a5:27:72:87:77:70:f1:5e:
df:9f:19:52:cf:dc:97:e1:27:b0:07:5f:1f:7f:2d:
60:25:d4:b2:1f:2d:72:f7:e8:5e:c1:79:da:44:7f:
cd:28:88:32:e3:04:0e:ff:ef:be:86:51:3f:aa:61:
b3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DD:4D:6D:28:D5:1B:DB:E7:1E:15:A3:14:E6:29:A7:79:C6:EF:36
X509v3 Authority Key Identifier:
keyid:B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ff:40:56:02:f1:cb:f2:d7:ca:6b:b8:9b:51:23:49:10:a4:
88:8c:78:30:45:da:5c:82:1d:54:58:e7:3b:0b:26:2d:47:d3:
56:25:af:52:22:99:91:24:8a:e8:da:fc:02:2f:2b:8a:d5:02:
a7:17:73:dc:aa:e4:d9:f6:8a:f7:5b:a5:99:66:6e:4a:ff:62:
b8:83:b7:6b:27:5d:74:05:e5:bf:f9:f9:62:59:e4:ab:70:bb:
4f:02:d2:0d:b5:de:0e:06:cc:1f:59:9d:b7:52:b9:bb:b1:9a:
32:29:7b:07:e0:a2:e1:2f:eb:12:60:a0:38:70:00:c1:39:76:
6f:4f:41:b4:94:18:0f:b9:40:53:a3:9d:d9:e2:89:97:e7:74:
62:41:82:43:0c:29:2b:de:44:c6:6c:b3:74:ba:93:69:b7:4f:
1d:75:8a:9c:64:fd:ca:d5:2f:f5:2d:a9:5c:40:82:70:ad:c8:
b9:95:52:41:2b:38:e5:32:15:3e:4f:ae:ca:99:91:25:d2:ee:
e8:44:06:b9:ed:ea:0f:28:0a:8d:cb:67:12:11:2b:f8:6e:e4:
30:c4:25:3c:a1:8e:9f:7a:83:ef:50:41:ad:b6:00:4e:2e:00:
86:fd:07:c6:2a:0b:1c:f5:a0:25:bc:34:51:ab:df:d4:e8:68:
5c:38:b4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:30 2025 by rpki-client