Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
File: A5D0YbjFGyArIQDfLMQzD2kiGME.mft (raw, json)
Hash identifier: 6A0nJiZ2F24F7+AY+QC/ODl3zImyql6kVq033bPbKoc=
Subject key identifier: 61:EE:22:33:47:F3:54:9F:BA:20:E6:C6:0A:62:5E:36:8E:8B:0F:1B
Authority key identifier: 03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
Certificate issuer: /CN=0390f461b8c51b202b2100df2cc4330f692218c1
Certificate serial: 019749D59DAB3F1BB5363CD30DF75CDE7A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
Manifest number: 150A
Signing time: Sat 07 Jun 2025 10:00:25 +0000
Manifest this update: Sat 07 Jun 2025 10:00:25 +0000
Manifest next update: Sun 08 Jun 2025 10:00:25 +0000
Files and hashes: 1: A5D0YbjFGyArIQDfLMQzD2kiGME.crl (hash: qZCr7dwNZfJik8g7SsCU7N3I/Zh4PcjGt9rGepoZ7ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:9d:ab:3f:1b:b5:36:3c:d3:0d:f7:5c:de:7a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0390f461b8c51b202b2100df2cc4330f692218c1
Validity
Not Before: Jun 7 10:00:25 2025 GMT
Not After : Jun 8 10:00:25 2025 GMT
Subject: CN=61ee223347f3549fba20e6c60a625e368e8b0f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:80:5f:65:97:bd:9b:57:b5:bb:1c:28:c0:
95:88:74:71:ea:95:0b:c7:62:55:82:17:12:10:e4:
03:da:b2:93:6b:b4:9b:11:d1:24:fb:e6:11:19:61:
ef:e0:c4:ab:08:99:c7:49:2e:cf:ee:fc:4d:d7:bd:
c9:08:c8:ee:e2:2a:63:64:68:d0:96:41:21:5e:54:
fe:e6:11:19:09:ce:e1:95:7b:72:87:7b:8a:42:ec:
26:a9:57:70:2a:ef:b7:4c:d8:82:b2:f1:02:fc:dd:
b3:64:94:b6:91:52:83:ca:67:63:51:3d:0e:b4:ee:
00:7f:f7:22:db:64:9b:73:55:4e:8d:fd:26:7d:bb:
2c:39:e3:01:f5:50:29:ec:c7:8d:46:18:3e:82:72:
53:01:14:33:cc:7a:f6:ca:25:5f:47:b0:44:1a:fa:
ce:d8:1c:e8:1c:7c:f3:a7:b4:f5:e5:fb:23:c6:7c:
e7:f3:b1:5e:73:75:f5:34:48:39:53:aa:cc:14:4f:
a1:77:62:eb:2c:1c:65:f7:0d:5c:5b:44:41:26:c6:
1e:25:18:10:5c:e4:44:25:2a:8d:40:63:e7:1e:4a:
15:2c:c7:a2:f4:5e:7a:11:f9:e5:9a:4e:99:6c:83:
c9:18:fa:37:2e:5a:07:f9:21:62:e9:e9:cc:d3:7c:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EE:22:33:47:F3:54:9F:BA:20:E6:C6:0A:62:5E:36:8E:8B:0F:1B
X509v3 Authority Key Identifier:
keyid:03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a1:00:5b:73:3b:d8:d3:9a:e3:9e:f0:f2:76:b0:98:26:ac:
e1:a6:49:2b:88:eb:7c:42:9f:c4:84:18:c9:28:e4:3d:62:b4:
e4:81:13:5d:91:cc:63:7d:04:5c:f8:91:78:c3:b4:6a:16:5e:
d6:f3:ec:59:ec:31:0b:02:eb:ba:82:b6:c3:d2:21:da:8c:7d:
a5:a7:f0:06:b3:2d:12:f1:09:0b:84:b7:70:74:8c:db:d6:09:
81:26:19:70:e2:70:f2:79:41:c0:cc:0a:3d:23:43:52:45:9d:
e6:f4:f8:11:1a:14:3c:cc:53:b6:d1:9b:d0:83:45:58:75:fa:
ae:9e:91:2d:d8:3b:bf:00:99:e7:67:e6:0e:44:54:a0:2d:85:
5e:d8:f5:63:ba:cc:b0:bf:ba:af:84:75:b2:b5:56:8a:69:2b:
84:0c:89:f5:14:78:29:0d:30:a9:78:c7:8f:f6:fb:5f:17:a1:
58:e0:8f:e4:8f:6c:0b:57:fc:18:f3:f8:33:ee:52:e5:68:da:
48:92:a0:a1:2c:9d:10:6f:92:d0:0b:20:26:53:a1:ea:9c:d5:
ea:6e:f5:c4:13:25:d8:32:8c:b2:ab:77:d7:6d:b4:32:c5:37:
9d:80:10:a4:1a:fd:ee:00:74:47:bd:98:05:5a:50:0a:99:00:
1a:26:fc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:30:15 2025 by rpki-client