Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
File: X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json)
Hash identifier: nPL1sN7EW8s8A/8FeTAUZgC/TfUPAWKvErtaVs8TP9c=
Subject key identifier: 05:B3:2C:07:FC:26:2E:2F:4E:21:0F:17:53:5A:97:57:AC:43:12:B7
Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
Certificate issuer: /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Certificate serial: 0197B7B37C72F669B6219D591DD98AE48245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
Manifest number: 05A2
Signing time: Sat 28 Jun 2025 18:01:22 +0000
Manifest this update: Sat 28 Jun 2025 18:01:22 +0000
Manifest next update: Sun 29 Jun 2025 18:01:22 +0000
Files and hashes: 1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: Bv3ehiaWQ0Zx7qZHOmIjk13lGCwtNvusrBPrpwXwjGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7c:72:f6:69:b6:21:9d:59:1d:d9:8a:e4:82:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Validity
Not Before: Jun 28 18:01:22 2025 GMT
Not After : Jun 29 18:01:22 2025 GMT
Subject: CN=05b32c07fc262e2f4e210f17535a9757ac4312b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:b9:2a:de:db:cc:a0:34:92:77:57:1d:13:
e5:14:bd:f3:fe:ec:91:51:df:e0:ef:99:a3:02:ba:
df:d6:a4:23:d1:3c:fd:9f:1d:59:58:ba:ab:24:cc:
78:e5:0e:d3:1a:6c:bb:a6:ba:74:91:92:f6:f9:46:
92:1d:53:2e:ca:4b:3a:7a:fd:01:29:09:2f:e1:d1:
48:af:39:6e:ea:c9:83:49:94:19:5b:63:d6:12:98:
a7:a1:82:5e:d6:a6:74:eb:93:dc:3b:eb:66:2f:83:
63:ce:62:e7:c9:45:78:b9:0b:b0:a4:cf:f8:b7:a1:
4b:c2:46:0d:ed:e4:b2:3f:84:0d:e0:bd:a5:c3:9e:
df:a4:91:c8:00:77:6d:4a:36:5d:de:54:0b:be:95:
9c:88:ef:53:69:18:f3:d0:fe:cf:f4:a7:f3:73:2a:
6c:e3:8a:c7:c3:6c:aa:23:01:31:a3:4d:0c:6b:94:
d5:83:60:cc:24:a4:52:d1:8e:7a:96:1e:e1:4c:a5:
6f:4c:ee:b7:0d:35:84:15:4f:34:2e:b4:c6:9d:2a:
eb:0f:fb:79:d8:fe:1d:c7:10:d2:5c:15:4d:4a:ee:
93:c5:1b:20:75:b6:c2:65:0d:dd:07:6a:25:c3:70:
d2:56:c4:ac:3e:65:72:cb:55:38:9a:f1:bb:0b:ee:
de:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B3:2C:07:FC:26:2E:2F:4E:21:0F:17:53:5A:97:57:AC:43:12:B7
X509v3 Authority Key Identifier:
keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1b:4c:65:23:78:ce:d2:07:0e:76:0c:04:51:dd:b9:d2:d7:
59:d5:e6:b9:4e:85:76:64:98:5e:e0:0d:be:9f:27:2f:a0:70:
ca:d9:f4:e4:38:92:59:dc:09:25:f3:5f:f2:20:da:61:f6:dd:
0c:26:e9:f8:70:83:ce:dc:88:92:e5:31:4c:9a:c9:08:b1:7d:
90:73:bd:f3:19:21:a0:f1:83:b1:80:e4:29:4c:09:70:00:36:
36:a4:f2:fb:38:5a:42:5c:04:87:15:c6:ef:22:3d:3e:cd:ce:
06:c2:66:47:b5:4c:11:72:fb:19:65:f9:4e:64:e7:8e:d5:e3:
77:a7:ee:02:8d:ca:73:87:64:39:19:e0:02:19:df:0d:b5:27:
51:fc:d9:4c:c7:a7:cc:c2:7e:c6:ae:cf:97:a9:cc:53:33:cb:
c9:e0:4f:e9:f7:e2:5b:e4:e6:53:94:7b:3e:a1:e0:d3:23:02:
12:2b:e3:17:ff:91:f9:04:10:54:66:21:a9:47:48:33:fc:ea:
03:82:d1:3c:cd:b3:7f:33:ec:14:65:ee:11:36:4c:21:0f:64:
0f:9a:f1:e0:22:9e:de:ce:63:c9:ff:c9:d1:7e:e2:bf:f6:5a:
1f:38:9f:b4:48:8d:63:50:d4:5b:2d:8d:88:ba:b0:d8:f3:f5:
ed:d1:f9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:04 2025 by rpki-client