
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
File: X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json)
Hash identifier: 0NPKRmnQbozONdal8mmV93wuoqIEd2JrQUsJVJvpezk=
Subject key identifier: 91:39:B5:1D:70:EB:C0:67:3A:06:83:0F:12:5D:AC:C6:77:84:3A:50
Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
Certificate issuer: /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Certificate serial: 019922C33266AEBCA70A32794D9C0FA7CD8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
Manifest number: 065E
Signing time: Sun 07 Sep 2025 06:00:41 +0000
Manifest this update: Sun 07 Sep 2025 06:00:41 +0000
Manifest next update: Mon 08 Sep 2025 06:00:41 +0000
Files and hashes: 1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: sYhuYTDqkD4u5jxBpS280S68UVbwsLc8Y09+k/97teQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:32:66:ae:bc:a7:0a:32:79:4d:9c:0f:a7:cd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Validity
Not Before: Sep 7 06:00:41 2025 GMT
Not After : Sep 8 06:00:41 2025 GMT
Subject: CN=9139b51d70ebc0673a06830f125dacc677843a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:03:30:f1:58:79:71:6d:4a:82:3a:69:ac:3b:
70:0a:80:29:c7:b1:77:3c:7d:f0:7d:d5:59:dc:d8:
78:86:88:99:9f:ae:14:73:87:80:8d:1f:35:57:4b:
11:68:ec:78:1e:2e:0e:72:38:bb:a4:d2:b5:ff:b2:
15:47:2a:09:4a:08:56:b6:90:a5:b1:18:ad:4c:27:
8d:dc:db:0a:5b:bc:e8:69:ce:ad:ad:3e:f1:da:fc:
2b:93:78:89:9d:75:ac:6c:da:0d:82:8f:d1:c8:e3:
1e:36:a9:87:8c:a1:17:39:5b:5a:f5:da:8a:62:cc:
93:67:24:a7:2a:83:e1:07:ee:dd:62:2e:69:c4:95:
65:19:c7:1f:4b:8f:89:26:3c:bf:c9:92:4b:43:44:
7e:f4:c1:08:eb:e6:05:1d:c5:7d:89:44:44:42:2b:
f5:a0:07:d8:97:bd:da:55:2b:2e:bf:13:f0:49:ce:
5a:c7:85:5f:56:d4:d6:ff:01:61:e8:41:93:89:a5:
4e:b6:7c:49:67:06:ca:e4:85:33:22:7a:e9:ba:cb:
a8:bb:24:33:10:cf:38:13:9e:02:c7:d0:21:8a:3f:
23:07:8f:67:0a:8e:3b:06:7a:08:0c:5d:bb:1a:73:
b1:17:d1:24:47:fb:9b:2f:57:7d:52:2f:6f:24:3b:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:39:B5:1D:70:EB:C0:67:3A:06:83:0F:12:5D:AC:C6:77:84:3A:50
X509v3 Authority Key Identifier:
keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5c:1d:fa:80:1d:a1:24:72:48:c9:f6:dd:f0:bf:f6:3a:55:
fa:e9:37:17:43:bb:e3:47:00:7f:15:68:ff:6d:9c:24:42:25:
4a:0f:2a:8b:b2:a9:c0:42:ee:30:cd:eb:8a:a5:2d:20:a2:ce:
3e:47:72:1f:53:18:b4:dd:03:ea:41:fd:85:52:59:97:71:17:
78:3d:85:90:91:a8:4d:63:98:7d:6f:8b:9d:c1:13:f6:06:ad:
aa:75:a8:d2:7c:c1:5d:d0:bc:ea:04:fb:3c:aa:12:40:53:fe:
3d:e4:77:79:c5:bc:0e:a3:5e:9b:9a:f4:0c:7b:2a:4a:2d:ae:
5f:11:5e:ba:5a:47:9f:41:e5:87:01:93:3e:4b:5e:82:64:30:
34:b6:2a:6a:53:d3:b8:8b:28:78:c3:61:7d:e3:f0:7a:48:c9:
8e:71:cc:60:46:12:a1:70:8e:40:bd:63:25:1b:55:d2:f0:9d:
e1:d8:30:87:66:b3:45:b9:bb:c5:31:78:d2:2e:6a:5c:b8:1f:
0e:bd:db:fa:17:38:6a:29:82:6f:27:40:14:a9:48:8b:b4:6f:
97:1d:0a:fa:49:46:76:c2:97:42:fb:6f:7e:7b:af:54:47:4b:
09:d8:ed:a1:10:00:7f:01:cf:a9:97:b5:97:69:49:84:12:12:
74:16:12:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:42 2025 by rpki-client