Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
File: 5b-MGBsoDj0oKNobJHe5ECNVlVo.mft (raw, json)
Hash identifier: /Ue0JcV97AimQ02cunW0MX5vD+N+s1RT6u5I6zB6s/Q=
Subject key identifier: 90:5B:8F:C0:34:16:65:DE:4B:82:74:AD:FA:C0:C1:32:D5:7D:BD:99
Authority key identifier: E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A
Certificate issuer: /CN=e5bf8c181b280e3d2828da1b2477b9102355955a
Certificate serial: 0197CC15EB583583264C714725C77A00EA53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
Manifest number: 14A7
Signing time: Wed 02 Jul 2025 17:01:17 +0000
Manifest this update: Wed 02 Jul 2025 17:01:17 +0000
Manifest next update: Thu 03 Jul 2025 17:01:17 +0000
Files and hashes: 1: 5b-MGBsoDj0oKNobJHe5ECNVlVo.crl (hash: QAelEgydVU/TPwQhKwf5DMUShXNaZi+paN1puIMhEjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:15:eb:58:35:83:26:4c:71:47:25:c7:7a:00:ea:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf8c181b280e3d2828da1b2477b9102355955a
Validity
Not Before: Jul 2 17:01:17 2025 GMT
Not After : Jul 3 17:01:17 2025 GMT
Subject: CN=905b8fc0341665de4b8274adfac0c132d57dbd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:41:51:34:c0:34:26:77:ff:fd:49:92:c4:
6a:ee:04:8d:7b:d9:7d:fe:02:f7:1f:c3:53:78:d2:
80:27:67:89:31:5f:f1:3a:84:32:3e:1d:49:85:1e:
6c:db:58:52:58:3c:8c:78:d5:08:63:0b:24:45:e9:
02:1c:1f:c5:7a:cd:dc:a2:96:7b:19:71:e0:96:dd:
52:f0:a3:39:f2:5a:2f:64:7a:b3:58:99:7f:74:74:
16:ad:1e:82:c2:3a:ec:ee:92:bc:80:d0:e2:ae:6f:
59:5e:f0:af:3e:71:d0:a4:0d:52:35:3d:c9:b4:2a:
9f:8e:f4:a8:3b:4a:d5:9b:06:f8:e7:48:38:28:0d:
c1:eb:0a:64:f0:64:54:a8:63:15:e7:6d:c8:0c:b1:
7b:00:94:fb:e2:b2:c0:7d:65:ed:ec:71:e4:2a:b2:
c6:39:35:b9:45:b7:51:b6:de:99:15:86:e3:8b:56:
9f:7e:cc:0a:bc:80:ba:a4:7c:b1:08:b8:59:56:98:
19:b1:9d:ff:1f:47:27:c2:01:ff:0f:e1:b1:eb:e1:
98:52:a4:99:c6:3e:1c:bc:9a:c4:dc:77:46:7a:ad:
a9:d6:02:2e:2d:da:00:3a:f3:ed:e0:f6:27:a2:fa:
34:be:fe:16:ae:18:fc:aa:75:d2:74:b8:87:cc:0d:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5B:8F:C0:34:16:65:DE:4B:82:74:AD:FA:C0:C1:32:D5:7D:BD:99
X509v3 Authority Key Identifier:
keyid:E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8c:a7:fa:ef:12:07:61:ff:ae:a1:12:fd:52:91:a1:dd:47:
18:9e:40:85:d9:5d:f9:3f:ac:89:06:18:b2:b6:8c:77:6d:4b:
1e:c7:a3:1b:17:89:3b:b7:a3:74:78:18:7c:ed:00:34:8c:00:
bd:ba:89:7a:4f:65:ee:75:dd:e7:dc:66:ed:bf:43:fe:44:8e:
f5:4d:b0:e2:05:a0:8b:15:17:9b:70:eb:bd:86:d6:79:0a:c1:
d0:ac:8f:e6:20:27:8d:ef:70:c3:af:42:b5:8a:ff:92:a4:e8:
1d:6f:a7:58:37:77:45:5f:b6:f0:d8:20:b3:42:f8:5d:c4:28:
26:b6:11:a8:07:2a:41:29:be:08:4b:9e:03:d9:0a:3a:8d:d1:
98:e7:23:d2:9f:b5:10:34:aa:8e:96:74:6b:26:1b:e2:da:fa:
9f:62:2e:fa:ed:0a:ad:2c:24:3b:c4:7b:1b:d4:e5:bd:43:d2:
38:97:73:88:a8:fb:7b:dd:ad:b5:fc:73:a6:89:ae:c6:d0:5c:
08:d5:09:fe:07:a1:8d:8d:0d:e9:2c:5d:13:b9:3a:14:29:79:
4c:74:2c:52:df:67:b1:04:6d:b9:59:15:2c:98:fc:c8:b2:47:
77:82:b7:32:06:09:06:dd:62:fd:bd:52:af:82:5a:a3:fd:47:
3f:87:ac:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:00:00 2025 by rpki-client