Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
File: F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft (raw, json)
Hash identifier: AMfp0am5nxjfU2SYDG6SQE4vz0ASXqFBbAxFeae7tY0=
Subject key identifier: 21:AA:28:B0:D8:BF:71:A2:05:DE:B3:5A:CB:02:E4:00:6D:49:7B:6E
Authority key identifier: 17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72
Certificate issuer: /CN=1792582aa0b18d6073592f121a6e563fec424672
Certificate serial: 01974D447432B1413231A1E8FC46F05E3727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
Manifest number: 061D
Signing time: Sun 08 Jun 2025 02:00:20 +0000
Manifest this update: Sun 08 Jun 2025 02:00:20 +0000
Manifest next update: Mon 09 Jun 2025 02:00:20 +0000
Files and hashes: 1: F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl (hash: Dmn5kqtRSAzQE76Yo8ZXxheK5A/qS1q9jydT37ktKak=)
2: X1Hk6Afe1QrSetXg0Fl8YXsPzIQ.roa (hash: XOR8QJ4EQ0MnwLrp2DnXgyEFhnN9pPQ9poUD3LAPUHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:74:32:b1:41:32:31:a1:e8:fc:46:f0:5e:37:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1792582aa0b18d6073592f121a6e563fec424672
Validity
Not Before: Jun 8 02:00:20 2025 GMT
Not After : Jun 9 02:00:20 2025 GMT
Subject: CN=21aa28b0d8bf71a205deb35acb02e4006d497b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:2a:5a:88:fd:18:09:be:88:14:f5:65:fe:
b0:81:72:e1:e6:d0:29:a8:b0:5f:ca:43:3a:69:f2:
dd:be:76:56:c2:4c:76:16:42:86:c8:95:70:90:fd:
83:6b:aa:1c:c9:f3:0d:18:11:3e:1a:c4:e5:76:6d:
ae:9d:5f:76:3f:ae:8d:21:cc:18:34:40:41:12:97:
ee:85:93:74:d9:3b:66:e1:07:b7:c5:5f:93:f7:17:
79:bd:f8:00:f9:2b:66:fb:12:3e:c8:31:09:e1:39:
d7:80:80:25:c9:14:61:60:4a:8f:65:dc:6c:96:be:
67:c7:34:24:f8:12:f4:56:54:dc:03:35:1b:47:50:
47:10:7c:98:3d:c9:3a:00:6b:e4:72:54:e9:41:eb:
a0:e7:b4:92:ed:63:5c:96:c1:b6:b1:13:77:46:fd:
23:06:6f:ba:3b:4b:07:8d:42:81:0a:1d:62:72:44:
89:65:77:2b:bc:7b:36:e4:22:1f:7c:29:64:ef:01:
66:48:c8:b7:09:4b:4b:26:c1:57:da:d5:72:4e:d3:
68:b1:26:72:82:5d:49:07:f4:b0:47:0f:d8:06:4e:
cf:fe:64:48:da:c7:d3:0f:19:d4:fe:e9:b4:af:5e:
c1:06:e5:89:4a:4f:c5:35:72:a8:9b:20:d3:82:d8:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AA:28:B0:D8:BF:71:A2:05:DE:B3:5A:CB:02:E4:00:6D:49:7B:6E
X509v3 Authority Key Identifier:
keyid:17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5f:b3:c5:ea:2f:16:94:9a:40:c7:a0:65:aa:a9:c1:53:59:
64:ad:43:f8:18:8c:28:e3:a5:00:71:e0:e4:9e:22:75:78:5d:
b4:3e:d0:e9:c3:9e:10:49:3a:ca:9a:35:44:e5:b8:06:ef:1c:
a0:3b:0c:cb:9b:5d:7e:3f:dd:79:6f:0e:2c:23:89:9b:78:42:
e0:fd:e5:b4:33:a0:13:39:16:06:96:92:69:35:1d:9e:27:c8:
64:0b:ae:2d:22:27:43:14:da:53:d6:b5:a9:bd:1a:99:9a:74:
e2:43:fc:01:22:18:79:e0:1e:63:9f:72:c3:fb:51:51:e9:59:
34:d4:44:8f:6c:de:9f:9a:6f:dd:aa:80:b0:ed:fb:c0:64:39:
96:9a:e9:81:f8:4a:de:13:ef:94:c4:04:2f:20:4f:f9:25:1a:
e4:52:67:e0:7f:5f:2d:14:1d:e4:98:83:25:9a:25:39:40:74:
80:71:9e:cd:3d:30:e2:e1:88:5e:40:42:2a:ea:e1:52:5a:a4:
65:87:2a:a5:cf:64:b9:02:4b:ec:9e:ff:a2:37:b7:b8:0d:1b:
d4:dd:8d:7b:28:78:2d:07:3d:24:df:c1:1b:67:af:1c:21:6b:
cd:33:6a:f4:dc:05:65:64:1b:45:28:e7:db:e1:da:03:29:b5:
d6:fa:49:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:17:43 2025 by rpki-client