Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
File: X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json)
Hash identifier: i/N+mWBUBXr8MgDP1F0Oh3OLU4FK7U7HC5e4PRKmnYE=
Subject key identifier: FB:CD:F8:C5:98:B6:66:CD:D9:AA:5D:86:4B:B5:6F:72:00:EF:30:7F
Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
Certificate issuer: /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Certificate serial: 0196AB43568FE4933A4A8A56D8FD6C188DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
Manifest number: 0517
Signing time: Wed 07 May 2025 15:00:38 +0000
Manifest this update: Wed 07 May 2025 15:00:38 +0000
Manifest next update: Thu 08 May 2025 15:00:38 +0000
Files and hashes: 1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: 623KklUtOn5XP9ythiTQV2AAB6i3uuEm+WpxsQTQe9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:43:56:8f:e4:93:3a:4a:8a:56:d8:fd:6c:18:8d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Validity
Not Before: May 7 15:00:38 2025 GMT
Not After : May 8 15:00:38 2025 GMT
Subject: CN=fbcdf8c598b666cdd9aa5d864bb56f7200ef307f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:30:3c:91:9c:71:8e:fd:f8:d6:53:88:8e:
7c:17:fd:5d:56:ce:e5:ab:f5:95:d2:21:ec:12:32:
e1:17:7a:56:8f:15:ef:f5:ac:57:06:66:a6:d0:29:
6d:90:d3:a4:d0:e6:00:5b:54:41:8b:df:ef:e3:60:
14:bb:26:5e:23:aa:f5:7d:62:1b:58:99:66:1f:de:
be:43:0d:55:f2:ce:f0:12:59:b6:ab:0f:01:79:2b:
64:d4:6a:b3:3d:07:87:85:7a:89:16:0a:0f:77:3f:
93:77:df:16:b2:67:db:18:17:ce:d5:20:fe:bd:77:
7e:f3:5a:a5:ad:8b:51:eb:70:42:28:3c:d6:de:b8:
0e:f3:08:65:05:41:18:77:0e:9c:fa:21:53:d9:1c:
8f:fc:32:bd:2d:a7:17:0e:75:7f:da:30:a6:cb:4a:
eb:58:44:2f:70:4b:aa:a3:b3:7d:b2:26:ad:c0:6e:
c3:1e:63:a1:37:10:bf:32:37:cc:f0:7e:18:34:86:
11:41:fe:69:24:99:09:e4:69:8b:53:f9:39:28:0c:
25:5d:f4:b9:12:dd:31:ff:da:3e:83:1f:b7:fd:f7:
cc:30:43:b0:ab:c6:6e:21:13:11:0f:64:55:9a:c8:
49:e3:06:fa:8c:4c:cc:1c:40:ce:c5:c2:b4:1d:b2:
48:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CD:F8:C5:98:B6:66:CD:D9:AA:5D:86:4B:B5:6F:72:00:EF:30:7F
X509v3 Authority Key Identifier:
keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6b:f6:f8:bb:a4:10:e5:ba:19:c0:d7:82:c7:e2:8d:c6:52:
18:b6:a6:f7:7c:b9:91:e4:a9:99:23:77:08:8f:0f:8a:97:51:
3a:76:97:1e:ae:f6:35:9d:e7:07:6c:39:9b:11:0e:20:b0:40:
51:c4:b5:7f:92:dc:b2:82:a6:30:30:1a:09:10:f6:63:36:2d:
13:c2:4a:f1:e0:26:67:99:e2:cc:0e:23:5f:55:21:82:02:56:
80:dd:9c:a9:bd:39:82:d5:48:9c:6d:5d:f2:47:58:c1:d3:d6:
88:67:f2:1c:26:7d:f0:6d:db:27:db:5f:db:03:a1:16:e4:0b:
5d:3a:ce:f1:e6:41:4a:a5:68:13:9d:33:f0:77:80:f7:fb:fc:
3b:03:4c:29:30:d0:92:fc:df:da:b7:2a:a6:2a:f4:46:86:16:
2d:dc:ea:bc:68:4e:70:f9:4e:08:8c:2c:16:89:c3:62:f4:df:
af:cb:87:f5:2f:c2:d3:eb:a1:fd:5e:a5:72:b5:f0:10:c7:63:
a0:3e:cc:6c:8a:54:52:e9:9f:05:1f:d1:46:d1:39:02:db:dc:
91:66:2c:d5:cb:2c:7c:c5:8e:c2:f6:e8:04:d5:32:a1:95:6f:
6d:cf:69:80:75:61:c0:42:9e:67:bf:7e:76:0b:2c:99:fa:eb:
bb:20:87:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:13:28 2025 by rpki-client