Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
File: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft (raw, json)
Hash identifier: GFYFktCWbpQUo/JmTGA5I2dnQTYR1BWYRVOwJJsByTM=
Subject key identifier: 5B:73:89:2D:69:37:B4:02:57:E7:7D:BA:31:09:C6:2A:A3:68:67:8A
Authority key identifier: FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
Certificate issuer: /CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Certificate serial: 0196579403687D50B61C9BBECB8941C3AACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 09:00:40 +0000
Manifest this update: Mon 21 Apr 2025 09:00:40 +0000
Manifest next update: Tue 22 Apr 2025 09:00:40 +0000
Files and hashes: 1: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl (hash: o44xuyfZrtJ4sKGqEbVPxew+J/IIe8uJKw3pOYCIAvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:03:68:7d:50:b6:1c:9b:be:cb:89:41:c3:aa:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Validity
Not Before: Apr 21 09:00:40 2025 GMT
Not After : Apr 22 09:00:40 2025 GMT
Subject: CN=5b73892d6937b40257e77dba3109c62aa368678a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:db:83:1b:10:d6:69:7c:c1:9f:58:1d:10:55:
0c:71:02:1d:88:86:ff:1d:2f:ac:24:4c:73:b9:3d:
15:ce:16:aa:96:cd:0e:d4:cb:7c:13:44:78:ef:fe:
5c:fb:3b:a7:03:55:fc:94:1d:43:26:a7:93:aa:38:
07:68:8b:ea:5a:06:bc:ed:f1:31:f8:7a:c2:75:25:
1f:48:16:e2:fa:3e:9b:3d:bc:de:6b:86:63:9b:1d:
3d:e1:82:e1:63:c5:b4:64:05:0c:91:e0:bd:43:50:
1d:d1:c0:9d:13:8c:a1:bb:12:6b:a7:c4:96:de:aa:
0b:9d:2b:78:a6:98:15:e4:fe:a5:03:1c:f9:07:c6:
a2:84:93:10:4a:3b:9f:38:73:01:38:27:e1:6c:62:
21:df:db:f7:68:0d:fc:c8:47:80:68:d5:2c:d7:32:
5f:86:2d:0b:2f:09:fd:2e:27:af:17:8b:5e:8b:6d:
4c:62:6e:5d:68:78:27:c5:b7:13:65:7b:13:2a:5e:
c0:28:d3:7b:32:83:17:a0:4c:36:79:c1:4c:9c:fd:
0e:dc:28:1a:a6:10:b7:01:2f:6b:5c:3f:d0:d1:ed:
16:41:26:ab:94:a9:e1:59:8e:4f:8e:c9:b4:e9:77:
e5:07:e2:3c:1e:be:30:07:6d:1a:15:b3:2f:27:eb:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:73:89:2D:69:37:B4:02:57:E7:7D:BA:31:09:C6:2A:A3:68:67:8A
X509v3 Authority Key Identifier:
keyid:FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9d:10:c1:7c:08:1d:cd:22:24:a0:be:0a:47:74:14:51:85:
02:75:27:83:07:6f:a7:d7:97:ea:6c:75:25:b5:54:af:97:26:
47:cc:ab:3c:04:af:1c:36:ff:aa:a9:7f:76:b7:73:45:bf:58:
c5:b1:1d:48:ed:73:40:28:81:18:ac:97:38:69:57:2f:56:e5:
3e:06:65:b1:a6:d8:12:79:0f:58:a5:12:7a:a0:0f:75:60:61:
fe:ea:bd:9c:df:92:fd:79:e3:e3:03:53:64:dd:20:ff:0f:f9:
3c:75:5f:11:4c:98:08:85:69:75:86:5f:a0:33:82:46:b0:b4:
c9:cc:1f:29:bb:83:3f:5d:e9:11:c0:e6:91:66:37:10:ab:ea:
a6:17:a5:4d:42:42:34:9a:55:46:84:09:ce:b2:6f:21:77:cd:
f3:a0:d5:44:e0:c6:59:30:dc:af:19:d5:21:b2:28:19:48:3c:
9c:a6:c7:d6:2b:e2:45:f4:28:2a:1b:1e:c1:86:40:50:44:11:
b4:f8:96:4f:1b:9c:ad:f9:ae:05:06:e2:61:1d:d5:28:13:0a:
c9:eb:6b:bb:5f:01:69:5c:6c:f9:01:03:f5:73:c7:30:37:e2:
b7:02:3f:0e:42:f2:b7:cc:28:6b:01:39:f4:d0:83:4e:e6:af:
28:4d:01:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXlANofVC2HJu+y4lBw6rMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOTdmMWVjYTRjOGM0ZjAwYzI2NTUzMjU3ZGNkMjJiZTYw
OTMyZTQwHhcNMjUwNDIxMDkwMDQwWhcNMjUwNDIyMDkwMDQwWjAzMTEwLwYDVQQD
Eyg1YjczODkyZDY5MzdiNDAyNTdlNzdkYmEzMTA5YzYyYWEzNjg2NzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9uDGxDWaXzBn1gdEFUMcQIdiIb/
HS+sJExzuT0Vzhaqls0O1Mt8E0R47/5c+zunA1X8lB1DJqeTqjgHaIvqWga87fEx
+HrCdSUfSBbi+j6bPbzea4Zjmx094YLhY8W0ZAUMkeC9Q1Ad0cCdE4yhuxJrp8SW
3qoLnSt4ppgV5P6lAxz5B8aihJMQSjufOHMBOCfhbGIh39v3aA38yEeAaNUs1zJf
hi0LLwn9LievF4tei21MYm5daHgnxbcTZXsTKl7AKNN7MoMXoEw2ecFMnP0O3Cga
phC3AS9rXD/Q0e0WQSarlKnhWY5Pjsm06XflB+I8Hr4wB20aFbMvJ+sD/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtziS1pN7QCV+d9ujEJxiqjaGeKMB8GA1UdIwQY
MBaAFP+X8eykyMTwDCZVMlfc0ivmCTLkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzVmeDdLVEl4UEFNSmxVeVY5elNLLVlKTXVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lNTgzODYtYmNmOC00ODI2LTk1ZWMt
ZjljNzVhZDNhZWQzLzEvXzVmeDdLVEl4UEFNSmxVeVY5elNLLVlKTXVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9lNTgzODYtYmNmOC00ODI2LTk1ZWMtZjljNzVhZDNhZWQz
LzEvXzVmeDdLVEl4UEFNSmxVeVY5elNLLVlKTXVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJ0QwXwI
Hc0iJKC+Ckd0FFGFAnUngwdvp9eX6mx1JbVUr5cmR8yrPASvHDb/qql/drdzRb9Y
xbEdSO1zQCiBGKyXOGlXL1blPgZlsabYEnkPWKUSeqAPdWBh/uq9nN+S/Xnj4wNT
ZN0g/w/5PHVfEUyYCIVpdYZfoDOCRrC0ycwfKbuDP13pEcDmkWY3EKvqphelTUJC
NJpVRoQJzrJvIXfN86DVRODGWTDcrxnVIbIoGUg8nKbH1iviRfQoKhsewYZAUEQR
tPiWTxucrfmuBQbiYR3VKBMKyetru18BaVxs+QED9XPHMDfitwI/DkLyt8woawE5
9NCDTuavKE0BtQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:33 2025 by rpki-client