Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
File: X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json)
Hash identifier: Z1uZ1wg7MxJ23OhxJtJvUrGjvyC7bk88Z40h+F9ZAKU=
Subject key identifier: 86:32:29:38:27:35:C2:87:B9:3A:13:39:6D:F4:9F:66:F0:95:4F:C6
Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
Certificate issuer: /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Certificate serial: 01974B8D95B167EA21D092A6BC7968C9AB57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
Manifest number: 056A
Signing time: Sat 07 Jun 2025 18:00:59 +0000
Manifest this update: Sat 07 Jun 2025 18:00:59 +0000
Manifest next update: Sun 08 Jun 2025 18:00:59 +0000
Files and hashes: 1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: KTsq39nkOsanb1csIVNiLI23cvWoI/A8Hkxe9xrus5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:95:b1:67:ea:21:d0:92:a6:bc:79:68:c9:ab:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Validity
Not Before: Jun 7 18:00:59 2025 GMT
Not After : Jun 8 18:00:59 2025 GMT
Subject: CN=863229382735c287b93a13396df49f66f0954fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:9c:cd:ed:bb:18:82:08:a7:09:3b:2b:23:
e5:0d:ab:fc:16:6a:23:13:c5:12:b1:93:9f:2b:30:
6d:77:45:78:00:bf:85:71:7a:90:4e:b7:8a:7c:7b:
99:3b:67:ef:29:f7:83:c1:35:93:42:4a:78:e7:e0:
5b:46:3a:89:c3:20:30:68:ae:5a:cb:0a:10:3c:10:
26:06:c3:fe:c9:e7:79:16:69:e1:c2:9c:b8:86:10:
2c:ff:40:9a:50:c5:1e:4c:0f:20:8f:b2:7b:53:ef:
2d:95:1c:4e:e8:21:fc:d8:e0:34:98:bb:c0:c8:a4:
3a:96:82:98:30:36:16:14:3f:17:28:bf:b9:0a:23:
c9:a6:40:41:55:42:3f:ea:9a:33:ac:5c:90:58:22:
ce:59:2e:af:03:f6:7d:e5:48:cc:94:1f:e2:2f:85:
bc:c5:ab:63:6e:35:b6:66:ef:30:23:1b:e9:d1:79:
6d:8d:94:c7:de:62:64:a4:69:c2:2b:3c:18:7d:90:
59:d3:3b:8d:5b:22:fa:ec:24:b2:d9:12:45:c5:a4:
a8:e4:c8:73:46:f5:b0:6f:e6:2c:de:37:36:40:49:
40:39:c5:ce:22:31:d0:ad:ec:23:29:57:38:1f:bd:
5c:99:de:2b:72:cc:83:fc:08:70:6d:73:42:7c:97:
9b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:32:29:38:27:35:C2:87:B9:3A:13:39:6D:F4:9F:66:F0:95:4F:C6
X509v3 Authority Key Identifier:
keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f1:1c:f0:2c:65:7e:17:e5:58:f1:cf:56:f6:8a:4f:d8:db:
40:dd:e1:07:51:3c:6f:10:a9:80:38:a0:92:e0:3a:65:75:f9:
4c:1e:60:f4:9f:7d:63:d3:8a:3f:01:dc:00:02:cc:6a:87:dc:
1e:98:db:99:bc:c1:8e:d3:71:5a:11:ac:a2:bc:c4:2c:df:1e:
8d:9a:a8:97:83:de:87:59:f4:52:af:fb:aa:eb:fe:48:1b:2e:
47:43:4f:4a:5a:51:fe:bf:ed:2f:c6:ea:26:ca:18:04:c3:8a:
7a:f6:ca:81:24:66:2b:16:41:19:4c:3f:94:7c:1d:98:16:09:
f4:bf:3e:3d:19:ee:31:6f:aa:a5:40:be:57:57:70:1b:01:3c:
43:7d:83:7c:4b:62:ef:7a:ad:bc:4d:20:14:3d:b7:b3:f7:2b:
2e:5a:08:e8:b6:79:c7:af:fb:93:53:ac:bd:71:b5:40:8a:7a:
51:47:a9:15:de:19:ef:72:a1:56:f8:29:ca:07:c8:26:ff:b7:
fa:78:2b:fb:35:47:03:7b:5d:77:90:36:cf:c9:cd:e1:c4:70:
fa:68:16:ca:e0:6d:c6:55:68:0d:82:7f:b4:9f:ed:2c:ad:53:
d2:e5:5d:d1:a0:14:a1:aa:f4:bf:12:25:07:84:01:84:6e:e9:
bb:dd:64:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:07:10 2025 by rpki-client