Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
File: X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json)
Hash identifier: bNXFFLJgob4g91ibdGJlVHw+PQu+BCY1rjo+v03eSio=
Subject key identifier: 84:AC:12:65:A7:C5:69:BA:FE:BF:5D:42:80:C5:B0:F2:7F:ED:4C:8A
Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
Certificate issuer: /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Certificate serial: 0198D583B35F498CBCBD0C966B5EBFDE81FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
Manifest number: 0636
Signing time: Sat 23 Aug 2025 06:00:34 +0000
Manifest this update: Sat 23 Aug 2025 06:00:34 +0000
Manifest next update: Sun 24 Aug 2025 06:00:34 +0000
Files and hashes: 1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: C0Kc6DZjKj/Siw3JSfYDp3RED2zgzVIAhiyqn0Sh/MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b3:5f:49:8c:bc:bd:0c:96:6b:5e:bf:de:81:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Validity
Not Before: Aug 23 06:00:34 2025 GMT
Not After : Aug 24 06:00:34 2025 GMT
Subject: CN=84ac1265a7c569bafebf5d4280c5b0f27fed4c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:b2:16:fe:06:ad:48:39:46:76:8f:bc:bb:
28:de:25:ab:ff:d2:72:aa:c5:09:58:54:d3:6b:c0:
48:8b:b7:5f:de:48:32:6e:bd:44:20:a1:5e:ab:a7:
97:ab:29:d4:d0:c8:1a:8b:5f:15:b4:60:17:66:71:
90:88:5e:94:d2:54:7c:32:8a:44:1b:0e:df:87:8f:
0a:7e:a6:c7:17:7e:22:fd:b2:29:de:45:e8:fa:c6:
57:45:78:9b:5f:49:ca:fd:ea:8b:20:2b:0d:b3:06:
61:2a:63:41:f8:80:42:b5:76:24:e0:d4:1c:54:06:
97:72:d5:28:ec:8d:26:91:44:91:73:31:26:c4:94:
2b:4c:77:2d:4f:f6:53:74:21:9e:34:b1:0b:2c:20:
b8:1a:2b:00:69:9a:cb:88:e4:98:fc:a8:c9:3d:15:
c1:61:42:68:8b:c1:d4:85:6f:03:46:34:16:db:6a:
81:ec:d2:0c:5c:91:a2:14:02:b0:e0:b8:1c:bd:34:
fa:ca:9d:5e:b7:32:01:73:66:d8:2f:4e:43:16:ad:
bc:3b:6e:9f:58:b9:a2:0b:69:4e:03:c3:77:24:80:
8f:c4:f3:1e:ed:52:e6:95:c3:bf:ab:cf:ed:8b:c8:
c8:cd:dc:21:04:3f:61:ad:14:0f:fd:45:78:e5:06:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AC:12:65:A7:C5:69:BA:FE:BF:5D:42:80:C5:B0:F2:7F:ED:4C:8A
X509v3 Authority Key Identifier:
keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:36:00:9f:92:59:b7:3b:e5:e1:f6:6b:e5:5d:9e:e1:35:b2:
30:96:2a:17:11:36:f1:19:16:ad:5c:35:db:42:d2:4d:f9:a8:
ec:14:25:9b:ff:96:3a:39:b1:be:ab:f1:c1:6e:c6:3b:d4:48:
83:04:94:03:b6:4f:1b:4d:e5:59:45:8a:80:4e:d9:f2:73:a2:
f6:75:cc:87:86:24:92:6c:7f:fa:f5:59:46:ba:b4:40:e8:9f:
3d:9a:33:48:c4:58:96:3a:35:8f:23:98:69:11:c2:01:db:1e:
8c:c5:5c:76:0a:08:7a:d0:d4:51:43:58:e9:fc:e2:44:6e:52:
dd:ec:ea:29:e1:45:7f:bd:53:69:bb:25:cf:b8:72:3a:2e:66:
e0:fa:02:d9:90:be:0b:b6:3d:c3:0a:f0:07:cb:fc:70:27:53:
b3:3e:64:45:57:e0:b2:b8:14:61:70:30:d8:65:a3:56:62:13:
f5:ff:14:4d:3f:a3:a9:f5:0f:41:8b:88:bb:fa:6a:7c:de:a1:
c9:b7:1e:cc:bb:f8:3d:2d:36:07:37:79:9a:1d:8a:8b:8c:1b:
5f:32:ef:ab:31:ae:4e:35:10:7c:e1:4c:f0:54:28:a3:d7:38:
61:4e:67:80:b5:c3:d5:a8:9b:8d:f5:c2:6e:be:ff:55:c2:6c:
e7:0d:26:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:08:31 2025 by rpki-client