Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
File: f5kYyrbx817xteWDyyg56bdIsVg.mft (raw, json)
Hash identifier: 2PKzlzXITGX/kCzXDnwFR1zhgUCO12OfIQfQZ7Dwwuw=
Subject key identifier: 05:FD:9C:FC:03:15:D5:F1:B9:E3:86:77:FB:EE:50:37:5B:76:E5:3F
Authority key identifier: 7F:99:18:CA:B6:F1:F3:5E:F1:B5:E5:83:CB:28:39:E9:B7:48:B1:58
Certificate issuer: /CN=7f9918cab6f1f35ef1b5e583cb2839e9b748b158
Certificate serial: 019655388A040C5AFEFF16C614B9D443F85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
Manifest number: 11D2
Signing time: Sun 20 Apr 2025 22:01:30 +0000
Manifest this update: Sun 20 Apr 2025 22:01:30 +0000
Manifest next update: Mon 21 Apr 2025 22:01:30 +0000
Files and hashes: 1: f5kYyrbx817xteWDyyg56bdIsVg.crl (hash: maqIKXzuvOgRiKPWC5KrXuvWZoRHMTxbbn6c23N2Bvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:8a:04:0c:5a:fe:ff:16:c6:14:b9:d4:43:f8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9918cab6f1f35ef1b5e583cb2839e9b748b158
Validity
Not Before: Apr 20 22:01:30 2025 GMT
Not After : Apr 21 22:01:30 2025 GMT
Subject: CN=05fd9cfc0315d5f1b9e38677fbee50375b76e53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:fc:2b:8d:73:e3:66:93:20:0a:53:95:64:
4b:99:e2:49:82:b4:bd:a9:24:fa:b1:1c:49:78:03:
f5:37:01:b2:9f:f2:b0:88:b7:d3:e3:09:96:d7:a1:
fd:da:e1:f5:f4:2a:b1:e7:cc:45:08:ff:1b:00:a5:
97:0f:30:82:89:6a:66:6b:d0:1a:96:73:32:d7:8e:
84:91:52:3b:90:ac:3a:92:2b:ab:a2:df:fd:b4:4c:
57:16:d1:9a:88:01:d0:a3:01:5d:74:8f:37:54:f0:
16:9b:e5:5e:c3:bd:00:b0:1f:7a:87:bb:fe:85:45:
a1:ca:34:f2:d5:43:dd:02:b7:16:bc:ee:62:a5:14:
24:0c:1b:7b:e7:10:f8:51:cb:2a:09:01:28:e1:af:
ab:24:0b:53:b6:93:1e:0f:22:d3:6c:8d:d9:9c:b0:
fc:16:72:fe:ed:3d:47:53:fa:3e:56:51:cc:ec:c5:
af:27:7c:dc:c6:e3:3f:b4:f9:ea:10:a8:d4:0d:bb:
a6:bb:6a:31:4d:2a:6c:43:43:5c:38:c3:80:2a:50:
32:41:a0:8e:b1:7c:40:38:c2:a1:c2:ca:59:c3:b2:
7f:c0:fd:df:0f:d5:7c:0f:f2:36:b4:7e:7a:40:bb:
75:95:04:58:5d:51:19:cb:6a:14:e4:9e:5f:8b:de:
17:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FD:9C:FC:03:15:D5:F1:B9:E3:86:77:FB:EE:50:37:5B:76:E5:3F
X509v3 Authority Key Identifier:
keyid:7F:99:18:CA:B6:F1:F3:5E:F1:B5:E5:83:CB:28:39:E9:B7:48:B1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f2:b7:66:bc:4e:13:b3:e1:a8:11:bd:d0:09:79:26:76:d5:
61:66:cd:38:8a:6e:a2:df:45:f3:c1:8b:cb:6c:56:5a:61:3a:
d8:1d:62:fa:d2:7d:64:13:21:6f:3d:ef:c9:93:da:3a:44:aa:
c5:5b:4e:1a:a2:9a:1d:e2:5c:a1:f5:4b:2f:fe:43:68:d8:e2:
10:9c:f6:ee:32:cc:8c:0b:55:5e:2e:e5:cb:33:4d:10:a0:b6:
8b:85:a3:7a:c7:7d:d2:e3:7a:14:bc:16:26:f9:3e:8f:ca:52:
d2:ea:dc:b8:f8:18:e6:ae:ba:7d:11:49:28:b5:f1:80:b1:1a:
6d:34:29:8d:5f:0f:58:ee:4a:e1:9e:d6:5a:bb:88:6f:09:85:
53:26:ae:ba:3e:b5:72:70:69:e8:80:7c:73:b7:d5:5c:f3:c9:
fe:76:e8:68:27:2e:ec:cc:50:9f:00:3c:57:93:c7:49:2d:49:
c1:b9:ae:65:d1:cc:a4:37:a3:ce:8f:96:38:25:b3:fc:15:af:
30:c7:0b:e9:92:a1:ce:46:7e:e8:8d:7d:05:cf:27:9a:9f:be:
9e:98:3a:5e:5f:ac:cc:7b:b2:e1:66:04:46:d1:dd:c4:d5:f4:
b5:50:c6:79:67:80:23:72:8d:db:bd:b6:f4:29:7a:2c:33:7a:
65:22:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:25 2025 by rpki-client