Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
File: F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft (raw, json)
Hash identifier: AtuQ+oH0u/zMQzVd8Pkd9Fk8A4PPoUJ1/Dv6pqp8SXs=
Subject key identifier: 67:2B:1F:C4:FB:A8:3D:14:D2:5D:D6:BF:D3:F7:33:E9:C9:7F:EE:DE
Authority key identifier: 17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72
Certificate issuer: /CN=1792582aa0b18d6073592f121a6e563fec424672
Certificate serial: 0196BE5C792802D4EE5813D8F5D9C959E0F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
Manifest number: 05D3
Signing time: Sun 11 May 2025 08:00:53 +0000
Manifest this update: Sun 11 May 2025 08:00:53 +0000
Manifest next update: Mon 12 May 2025 08:00:53 +0000
Files and hashes: 1: F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl (hash: grZR0h+taYKSCJemDLyF+cHTpqllM4R+WZ639p8lZes=)
2: X1Hk6Afe1QrSetXg0Fl8YXsPzIQ.roa (hash: XOR8QJ4EQ0MnwLrp2DnXgyEFhnN9pPQ9poUD3LAPUHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:79:28:02:d4:ee:58:13:d8:f5:d9:c9:59:e0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1792582aa0b18d6073592f121a6e563fec424672
Validity
Not Before: May 11 08:00:53 2025 GMT
Not After : May 12 08:00:53 2025 GMT
Subject: CN=672b1fc4fba83d14d25dd6bfd3f733e9c97feede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ef:cd:13:a8:9b:e6:b9:ca:b8:13:76:77:25:
f3:93:c0:6f:48:a1:3a:d4:0e:db:6c:89:03:ea:ab:
f4:11:ac:0f:7e:a4:2b:5b:7b:e1:a0:e7:67:16:0a:
87:24:cf:21:81:6e:eb:6a:59:af:1c:29:b9:05:31:
d6:37:7d:f5:78:d0:d0:2c:c6:0b:df:a4:47:83:de:
82:27:c3:ef:31:8e:5a:74:c9:de:71:28:e2:65:4b:
58:d8:e2:77:c8:8d:9b:63:1a:be:59:95:2a:9f:14:
f9:30:ef:f2:b0:38:6d:f3:5c:b1:20:9d:03:4e:7d:
02:f8:18:9c:9b:1f:da:7b:27:9a:88:ef:9b:f1:ef:
47:bd:17:29:a0:35:7c:62:6a:52:a6:4d:3e:e3:36:
d6:c1:43:7e:ed:a1:11:2f:8b:a9:84:bc:97:36:75:
40:97:85:cf:58:1b:a3:80:3c:50:27:06:1d:98:ef:
ba:95:e1:47:c7:a7:7c:fe:ed:95:05:73:23:0e:0e:
30:76:54:bb:66:e5:7c:7e:56:f1:cf:70:35:d7:ee:
18:cd:e4:36:26:45:2d:27:ae:9d:d5:4b:2d:8f:0d:
94:81:43:7c:79:fc:fc:f8:4d:8a:97:2b:e9:2d:a4:
d3:35:f2:6d:77:2e:8a:8a:2f:25:4f:ba:a4:16:fd:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2B:1F:C4:FB:A8:3D:14:D2:5D:D6:BF:D3:F7:33:E9:C9:7F:EE:DE
X509v3 Authority Key Identifier:
keyid:17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7b:b8:c1:ed:ec:e7:1f:73:a4:b7:a8:e3:62:72:0d:dd:ef:
2a:85:47:db:aa:34:8a:44:5d:f0:cd:4a:b0:8a:cb:00:e6:be:
ea:ec:2d:af:fe:b7:f9:e3:8b:ff:f7:b1:15:1e:ae:85:66:a0:
df:ab:3e:ff:9d:44:22:ed:5f:a8:45:04:91:4e:23:f9:60:ac:
d8:e4:54:cd:36:43:1b:76:bc:9a:0b:ca:1a:80:20:a6:5e:9f:
8d:88:0a:b3:06:f2:96:1d:91:48:18:cf:8c:e8:24:6e:77:62:
10:b6:21:f2:fb:57:35:74:fb:46:0f:e5:eb:dc:26:17:4e:2a:
ab:d9:da:8c:ce:58:44:83:59:84:22:ee:71:50:0a:28:68:03:
73:cd:0e:b9:29:6b:f4:e0:12:53:fd:58:50:b3:53:ea:ff:1e:
c8:13:1a:0f:42:36:2d:8d:8b:5c:48:74:2a:90:58:7a:5c:7c:
e1:3f:13:e2:f0:c4:7b:b3:03:6d:e4:66:d8:4e:df:db:8d:b5:
27:f6:fc:85:0c:7a:ca:d4:15:71:18:a9:80:bf:0e:25:a5:52:
e9:f6:84:05:5a:25:05:49:48:9c:71:1a:85:62:a1:99:f3:8a:
9d:3f:16:7b:36:d8:bd:c9:b8:30:10:90:9a:7c:6d:3f:ae:6e:
1b:36:b7:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XHkoAtTuWBPY9dnJWeDzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTI1ODJhYTBiMThkNjA3MzU5MmYxMjFhNmU1NjNmZWM0
MjQ2NzIwHhcNMjUwNTExMDgwMDUzWhcNMjUwNTEyMDgwMDUzWjAzMTEwLwYDVQQD
Eyg2NzJiMWZjNGZiYTgzZDE0ZDI1ZGQ2YmZkM2Y3MzNlOWM5N2ZlZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye/NE6ib5rnKuBN2dyXzk8BvSKE6
1A7bbIkD6qv0EawPfqQrW3vhoOdnFgqHJM8hgW7ralmvHCm5BTHWN331eNDQLMYL
36RHg96CJ8PvMY5adMnecSjiZUtY2OJ3yI2bYxq+WZUqnxT5MO/ysDht81yxIJ0D
Tn0C+Bicmx/aeyeaiO+b8e9HvRcpoDV8YmpSpk0+4zbWwUN+7aERL4uphLyXNnVA
l4XPWBujgDxQJwYdmO+6leFHx6d8/u2VBXMjDg4wdlS7ZuV8flbxz3A11+4YzeQ2
JkUtJ66d1Ustjw2UgUN8efz8+E2KlyvpLaTTNfJtdy6Kii8lT7qkFv3mfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcrH8T7qD0U0l3Wv9P3M+nJf+7eMB8GA1UdIwQY
MBaAFBeSWCqgsY1gc1kvEhpuVj/sQkZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVKWUtxQ3hqV0J6V1M4U0dtNVdQLXhDUm5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yZDM2MDctYmU1OC00YTA1LTlkNjgt
ZTg0ZjNiNDkyN2FkLzEvRjVKWUtxQ3hqV0J6V1M4U0dtNVdQLXhDUm5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8yZDM2MDctYmU1OC00YTA1LTlkNjgtZTg0ZjNiNDkyN2Fk
LzEvRjVKWUtxQ3hqV0J6V1M4U0dtNVdQLXhDUm5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenu4we3s
5x9zpLeo42JyDd3vKoVH26o0ikRd8M1KsIrLAOa+6uwtr/63+eOL//exFR6uhWag
36s+/51EIu1fqEUEkU4j+WCs2ORUzTZDG3a8mgvKGoAgpl6fjYgKswbylh2RSBjP
jOgkbndiELYh8vtXNXT7Rg/l69wmF04qq9najM5YRINZhCLucVAKKGgDc80OuSlr
9OASU/1YULNT6v8eyBMaD0I2LY2LXEh0KpBYelx84T8T4vDEe7MDbeRm2E7f2421
J/b8hQx6ytQVcRipgL8OJaVS6faEBVolBUlInHEahWKhmfOKnT8WezbYvcm4MBCQ
mnxtP65uGza3mg==
-----END CERTIFICATE-----
Generated at Sun May 11 14:38:56 2025 by rpki-client