Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
File: f5kYyrbx817xteWDyyg56bdIsVg.mft (raw, json)
Hash identifier: Si6nrKvPwWln8dwiQV4cF+Vqz+HlHuJTuG1lcDjHF0Q=
Subject key identifier: C0:90:AE:1B:D1:9E:8E:12:66:58:F8:AF:CA:60:5D:41:B6:24:5F:3E
Authority key identifier: 7F:99:18:CA:B6:F1:F3:5E:F1:B5:E5:83:CB:28:39:E9:B7:48:B1:58
Certificate issuer: /CN=7f9918cab6f1f35ef1b5e583cb2839e9b748b158
Certificate serial: 01974A7A658D93BE378891897BB7E296331B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
Manifest number: 1251
Signing time: Sat 07 Jun 2025 13:00:24 +0000
Manifest this update: Sat 07 Jun 2025 13:00:24 +0000
Manifest next update: Sun 08 Jun 2025 13:00:24 +0000
Files and hashes: 1: f5kYyrbx817xteWDyyg56bdIsVg.crl (hash: 2FYV3eUtTH/KZzYAfTrUkKZrPn9uKWrlLCEJZ057pHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:65:8d:93:be:37:88:91:89:7b:b7:e2:96:33:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9918cab6f1f35ef1b5e583cb2839e9b748b158
Validity
Not Before: Jun 7 13:00:24 2025 GMT
Not After : Jun 8 13:00:24 2025 GMT
Subject: CN=c090ae1bd19e8e126658f8afca605d41b6245f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:60:2b:38:75:e1:7c:1f:82:2b:41:0d:e3:
ae:d7:d8:13:5a:88:ef:ec:74:81:23:35:2e:82:2e:
f2:b9:8d:b4:78:d6:93:be:8d:15:7d:3a:90:f6:50:
bd:6b:48:17:61:05:93:f8:5a:a8:10:c7:6e:0f:92:
54:f5:1e:60:b3:c5:71:10:f6:8b:08:4c:f5:87:82:
e1:62:0d:68:8b:2f:6e:52:21:ea:2a:ea:87:2a:ed:
6c:d5:94:bb:06:0a:85:40:ce:f9:75:51:82:0b:3c:
8c:9a:d5:7b:19:c2:02:79:53:44:7b:63:c7:51:39:
86:d8:f3:70:b7:be:89:17:d8:8d:5e:34:30:cc:26:
50:85:ae:3e:43:b6:fe:94:9d:50:3e:b9:6e:66:fa:
75:1a:20:c5:10:43:bb:35:a7:9c:71:d0:24:19:9c:
b0:b0:0d:7c:3b:01:03:65:50:f4:26:a7:9e:ec:d6:
4d:13:77:06:3a:b8:7f:bd:4a:fb:65:72:34:17:f8:
68:5c:c2:72:87:bf:26:df:f3:ae:4a:35:53:77:92:
03:a4:a4:f1:46:b3:89:47:06:6a:73:16:bd:f6:43:
7c:24:3e:83:5b:89:1d:e0:9c:77:0f:5b:f4:ea:61:
ec:96:0c:48:3b:d1:b0:77:f4:b0:05:1b:16:ce:6b:
51:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:90:AE:1B:D1:9E:8E:12:66:58:F8:AF:CA:60:5D:41:B6:24:5F:3E
X509v3 Authority Key Identifier:
keyid:7F:99:18:CA:B6:F1:F3:5E:F1:B5:E5:83:CB:28:39:E9:B7:48:B1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:47:a2:90:1a:6c:79:d8:3d:e0:13:b7:b2:1b:76:65:c5:70:
fa:d1:13:aa:06:e4:f0:16:d1:3c:41:3e:43:49:c5:70:88:35:
0b:b8:a5:3d:35:1d:35:f6:e9:46:83:64:d7:15:3e:1c:2d:1b:
8e:b7:ea:63:20:dd:b7:39:81:2a:b1:09:59:79:6f:31:4d:33:
9e:09:3f:34:c8:43:f6:3f:6c:a9:ab:b0:04:3b:28:42:4a:1f:
be:46:1b:ab:a3:5a:15:75:c2:52:24:21:6a:3d:10:ad:a5:5e:
d5:92:5b:eb:85:c8:ce:e3:90:58:3b:9e:f5:89:fa:0e:52:18:
97:5d:31:53:a1:ab:bb:58:9a:0d:84:4a:c1:a3:e0:38:79:98:
0b:d5:17:ef:b3:28:63:71:a9:76:47:c0:ba:75:4a:92:e6:33:
a4:2e:c7:19:2b:27:83:96:03:1a:94:a3:a7:4b:0a:8b:da:8f:
a0:2d:bc:e2:08:37:32:ae:45:0d:2d:be:97:3c:c6:dc:df:37:
e9:62:bb:1e:43:e3:1c:46:37:61:88:35:ab:90:3c:96:a0:4f:
38:e1:96:ad:a6:00:da:4b:1b:fa:a7:45:5b:f4:2e:4e:8a:90:
e5:13:cd:d9:93:b9:d7:ab:41:8e:5f:60:ef:17:57:15:41:7b:
e0:f8:93:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:32 2025 by rpki-client