Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
File: F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft (raw, json)
Hash identifier: ngcOBWGa4ZKIsMOFBw2TahkRTyNvvBbt4b28G+wcNGU=
Subject key identifier: A3:6B:85:E4:08:96:1B:09:4F:FF:CB:4B:68:A1:BB:AB:A5:13:3C:A8
Authority key identifier: 17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72
Certificate issuer: /CN=1792582aa0b18d6073592f121a6e563fec424672
Certificate serial: 0197B77C9B3887CC69DF1586BE28D918FCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
Manifest number: 0654
Signing time: Sat 28 Jun 2025 17:01:26 +0000
Manifest this update: Sat 28 Jun 2025 17:01:26 +0000
Manifest next update: Sun 29 Jun 2025 17:01:26 +0000
Files and hashes: 1: F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl (hash: i7sJec5EvhLE+i9yZAfBhXq8CIHHPlIjSOp2KWqXhJM=)
2: X1Hk6Afe1QrSetXg0Fl8YXsPzIQ.roa (hash: XOR8QJ4EQ0MnwLrp2DnXgyEFhnN9pPQ9poUD3LAPUHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:9b:38:87:cc:69:df:15:86:be:28:d9:18:fc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1792582aa0b18d6073592f121a6e563fec424672
Validity
Not Before: Jun 28 17:01:26 2025 GMT
Not After : Jun 29 17:01:26 2025 GMT
Subject: CN=a36b85e408961b094fffcb4b68a1bbaba5133ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:dd:e1:15:2b:9c:1f:cd:38:b7:78:b7:13:
fb:cf:d5:f7:b2:cc:eb:f4:65:3a:49:28:65:60:cc:
1d:b4:0b:78:c2:22:ae:8b:86:92:71:8b:2c:26:20:
28:2f:87:bc:55:07:e1:6c:8d:7a:cd:69:9a:0e:66:
12:b0:cf:73:2f:90:89:b3:0e:d5:80:48:e7:27:ce:
34:71:f9:d9:68:b1:7c:60:8e:2c:bc:bc:7b:97:43:
69:e5:f7:77:10:9d:ae:31:9e:d4:bd:67:57:f4:18:
e3:54:20:9f:19:59:2e:e4:9f:78:4e:5e:91:91:10:
d2:53:02:82:4a:f5:15:7f:65:b4:3a:04:c1:cf:20:
3c:94:64:7c:83:f3:b0:42:4e:21:f9:82:4f:9b:a4:
86:51:4e:66:95:7f:55:0d:37:86:7f:cf:c4:66:0c:
3f:6b:1e:57:7d:c4:ac:5f:32:76:52:39:9e:e2:31:
94:c9:63:2a:9c:80:e9:51:32:5d:5f:92:f0:82:af:
ed:69:e8:4c:d0:5b:fc:1c:a6:f3:e8:45:12:29:07:
30:af:92:20:45:0a:c8:09:a7:bf:29:10:fa:5e:3a:
8c:3b:5d:95:a2:54:db:6f:8b:75:fa:ad:9a:58:7d:
9c:a5:5d:33:ff:b4:14:90:31:20:33:6c:93:1d:74:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6B:85:E4:08:96:1B:09:4F:FF:CB:4B:68:A1:BB:AB:A5:13:3C:A8
X509v3 Authority Key Identifier:
keyid:17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:39:28:70:fb:3b:0f:33:48:71:6d:9b:36:da:86:5b:20:43:
1f:85:f2:40:20:ca:48:1e:27:2a:f2:3b:fe:5b:ff:b3:92:01:
4a:97:29:ce:ef:c2:91:37:7b:01:db:ad:f4:9c:aa:a5:78:38:
3d:f5:f4:ca:5f:16:23:90:dc:39:30:39:e9:ee:47:d3:10:df:
67:60:41:a7:3b:f2:bf:ab:8a:e1:57:2e:5e:d9:9f:52:31:97:
f9:d5:8e:c8:05:41:91:52:79:ce:71:30:35:a9:4c:fa:51:f3:
e8:a7:d8:3f:ba:79:89:28:57:6c:55:fc:c7:0b:7b:75:5d:f2:
ed:69:71:ac:f0:2b:84:1a:77:98:df:a9:86:8a:fb:27:44:50:
ba:21:9a:12:38:47:a5:2f:91:13:28:47:36:f5:50:87:f3:01:
c4:33:39:61:63:0b:1f:5e:0b:c1:da:2a:97:bc:1d:5d:93:7d:
05:c2:13:b6:08:db:0d:39:00:68:06:d5:6d:78:2a:c9:dd:3d:
55:c7:8e:bd:70:c4:a3:2f:1c:47:c7:bf:80:00:e6:fa:f7:84:
43:82:e8:0c:6d:d2:a5:06:0b:e3:9c:ff:28:d8:20:06:8d:9e:
67:69:9e:6f:6f:bf:94:b7:1a:99:5a:00:fd:fa:75:77:2a:27:
d9:0f:73:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:24 2025 by rpki-client