Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
File: 5OIv9yeFHntJFhTwetExVxQcwwk.mft (raw, json)
Hash identifier: iEQO45vNbaao1rHZbGSLMBaRDBhlrIPhI9uWnYSIJvc=
Subject key identifier: D2:C6:3B:6B:08:85:9A:56:D1:A6:C6:A0:3A:C4:8A:C1:6E:99:42:6C
Authority key identifier: E4:E2:2F:F7:27:85:1E:7B:49:16:14:F0:7A:D1:31:57:14:1C:C3:09
Certificate issuer: /CN=e4e22ff727851e7b491614f07ad13157141cc309
Certificate serial: 01974D44C98F5041908495BF45F329BB3905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
Manifest number: 142D
Signing time: Sun 08 Jun 2025 02:00:43 +0000
Manifest this update: Sun 08 Jun 2025 02:00:43 +0000
Manifest next update: Mon 09 Jun 2025 02:00:43 +0000
Files and hashes: 1: 5OIv9yeFHntJFhTwetExVxQcwwk.crl (hash: lVHnM/johM6ct485Q065WxYsgl1HUyKBiwO66ZEuaNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:c9:8f:50:41:90:84:95:bf:45:f3:29:bb:39:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e22ff727851e7b491614f07ad13157141cc309
Validity
Not Before: Jun 8 02:00:43 2025 GMT
Not After : Jun 9 02:00:43 2025 GMT
Subject: CN=d2c63b6b08859a56d1a6c6a03ac48ac16e99426c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:96:0a:b1:5c:f7:fb:db:d8:51:25:57:37:
e3:2c:27:59:57:00:83:17:4f:e7:3f:cb:91:8b:45:
be:41:1f:f9:99:77:85:b4:e4:c1:60:1c:d9:9a:49:
31:35:fc:c6:4d:4b:b1:e8:e1:a4:21:8d:80:98:02:
c1:70:24:3f:9e:1d:90:b0:9e:5b:a8:8e:ce:78:b3:
88:36:35:25:76:1e:50:75:a4:91:33:f1:c2:a3:da:
66:b4:d4:21:85:fc:cc:30:d5:1b:10:7c:f3:c4:16:
a9:8b:5b:5d:5b:26:02:f5:83:8b:6e:3b:2b:c0:8e:
74:b8:5b:70:e2:80:ac:29:30:56:78:05:b0:39:74:
44:6f:f1:f9:d0:e3:49:f9:58:18:55:85:61:34:48:
54:74:3d:76:c2:55:15:50:31:d1:48:cc:15:9a:ae:
85:4e:33:b9:f7:b2:5f:30:8e:e9:ca:4e:c9:c9:73:
59:37:41:e8:f8:c6:5f:97:0e:7e:61:4a:a7:49:d4:
83:39:65:3a:ef:27:cc:c9:2f:5c:75:6b:58:e0:0a:
a8:d9:85:cc:06:04:cd:48:93:f4:ce:5b:ae:5b:7a:
c4:a2:93:59:fe:3b:89:2f:89:fa:fc:04:2a:38:07:
41:cf:6d:1b:5c:94:d2:53:b5:d2:0e:ff:78:b3:f0:
d3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C6:3B:6B:08:85:9A:56:D1:A6:C6:A0:3A:C4:8A:C1:6E:99:42:6C
X509v3 Authority Key Identifier:
keyid:E4:E2:2F:F7:27:85:1E:7B:49:16:14:F0:7A:D1:31:57:14:1C:C3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4f:4f:33:eb:a0:fb:c8:57:da:15:ad:7b:d9:06:16:b3:9c:
54:8f:91:92:99:7c:3e:c6:75:41:d3:77:e8:da:a0:c2:65:6f:
ea:56:26:9a:ad:12:d5:85:8a:6b:d9:34:78:84:38:03:14:7b:
d8:47:15:73:be:e6:84:d3:39:d1:ff:47:9b:84:6a:17:ef:10:
d2:bc:35:05:8b:1d:d6:89:c2:0f:b5:b7:69:d6:41:32:81:f2:
88:dd:e1:dd:fe:4f:62:af:c7:b6:51:ff:9e:bd:13:83:11:81:
c9:cf:1d:4c:85:a2:a4:b1:5d:7f:15:e1:1b:89:06:c1:ea:db:
bf:0f:95:3d:e8:ec:a3:58:8f:5e:df:43:7e:d5:3c:e1:69:ba:
26:5b:ee:d9:5a:bd:fc:ad:77:3b:e3:6f:ed:eb:5a:db:4d:86:
92:d0:d1:2d:4e:6b:9e:ae:db:a4:b6:c3:5b:f3:f1:6f:fd:92:
a9:90:5b:fb:fc:f7:a8:7b:7b:a6:72:05:20:cc:e4:1f:c4:6b:
47:49:cd:f8:7e:69:5d:0d:6f:d2:e7:a1:c7:9f:e8:db:94:38:
bb:7f:c6:0f:a2:1c:1a:b7:64:5e:db:c3:8d:f1:d2:dd:92:d3:
67:28:6c:7f:c5:ce:39:d7:f6:ac:09:71:4c:c7:a0:a2:45:18:
45:77:07:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:40:57 2025 by rpki-client