Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
File: X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json)
Hash identifier: 8lJkB9Jbp1hrZp6g/Ah6GJh9Nd7VklbHC8mbIby04cI=
Subject key identifier: A6:22:3E:14:6D:8C:E4:33:08:66:48:86:9F:E1:2E:DF:0C:AA:62:9D
Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
Certificate issuer: /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Certificate serial: 0196545C6B30E92A3B84A28BCEF89D783398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
Manifest number: 04EA
Signing time: Sun 20 Apr 2025 18:01:04 +0000
Manifest this update: Sun 20 Apr 2025 18:01:04 +0000
Manifest next update: Mon 21 Apr 2025 18:01:04 +0000
Files and hashes: 1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: /pNddpqAskqlyKocub+xFC4/iNDpl784WZsG8WadsNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:6b:30:e9:2a:3b:84:a2:8b:ce:f8:9d:78:33:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Validity
Not Before: Apr 20 18:01:04 2025 GMT
Not After : Apr 21 18:01:04 2025 GMT
Subject: CN=a6223e146d8ce433086648869fe12edf0caa629d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:11:cc:0a:a9:64:a7:f9:87:a8:88:97:db:
c2:09:11:55:ca:75:f5:72:cc:28:9c:1c:72:00:70:
3f:47:17:46:61:33:28:75:49:d3:b0:0b:41:a5:cb:
8e:5a:21:1d:fb:e8:8d:ab:29:c1:1b:3f:fb:1c:fd:
56:69:5d:56:f4:41:eb:a5:30:1b:bc:ca:a7:2d:f1:
56:fb:c7:51:f4:41:7f:f2:bb:32:28:4b:dc:69:e7:
bc:d7:ca:c7:b6:77:6c:d3:0a:71:14:82:a6:d9:d3:
f4:31:47:2e:8c:4d:ad:f0:f4:b9:e5:2f:c7:f8:41:
18:82:a3:6b:27:32:d9:2d:cf:fa:08:6d:23:31:5c:
4b:be:21:1f:f9:05:da:78:6f:e3:ac:76:a9:2e:d6:
0e:15:9d:b2:2b:d5:8c:73:75:69:79:46:6e:ff:92:
b2:50:d8:dc:f0:cb:4c:55:af:d5:f5:4c:5e:a6:7b:
31:ec:74:ce:7c:52:84:a2:57:b3:d2:91:e2:a5:b3:
8e:62:2b:dc:2c:af:48:12:e9:98:f3:ff:07:e3:1a:
4d:11:8a:a2:08:f4:bd:aa:f7:b8:bd:2b:f8:0a:82:
8a:8e:25:36:7c:62:ee:22:54:67:96:9d:11:8e:8b:
06:3c:96:f6:43:b9:ea:b8:f8:50:25:8c:0e:3e:77:
75:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:22:3E:14:6D:8C:E4:33:08:66:48:86:9F:E1:2E:DF:0C:AA:62:9D
X509v3 Authority Key Identifier:
keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4a:7b:38:19:b6:03:27:cf:33:ab:32:55:ea:fe:f3:7a:3f:
23:a3:a5:4b:14:49:b4:dc:c4:d3:3a:9c:fa:19:43:82:b4:2a:
e8:e2:51:f6:69:1b:6a:f6:dc:21:84:d3:59:0f:4d:fa:f5:77:
fa:d2:fd:aa:27:39:7b:6c:02:cc:91:e1:c7:f4:b8:69:fd:e8:
8a:84:c4:3a:12:2d:d1:0d:63:80:c1:f7:08:21:1f:00:fd:ba:
02:0f:ab:32:57:be:0d:9f:da:d5:b4:fd:e5:43:b8:cf:50:67:
c7:09:80:b1:f1:74:bb:44:6b:c2:ee:ae:5f:cf:4a:28:db:05:
3b:c3:8f:e3:75:d8:a9:32:bc:10:e9:2b:3e:a7:f4:b5:fd:85:
21:b4:7d:90:e0:d7:2d:e6:3e:47:8c:70:f1:02:ed:51:7f:0e:
1e:3d:56:01:18:13:a4:2a:0a:dd:20:e4:67:b8:dc:81:eb:76:
d9:2d:d4:65:3e:f6:a6:1a:28:0d:f0:5d:0e:37:f9:e3:18:78:
e2:94:f8:3a:ec:dc:d8:8a:87:3f:65:01:69:32:7c:aa:20:8d:
30:74:c9:9d:43:5f:79:f2:b0:06:34:d4:53:4b:e8:0d:6b:94:
2c:49:eb:2b:50:7b:26:a3:57:e2:2d:e4:b3:ff:b1:2c:5c:2c:
ee:14:99:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:58:31 2025 by rpki-client