Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
File: f5kYyrbx817xteWDyyg56bdIsVg.mft (raw, json)
Hash identifier: PMgrSSGEVdfy29Gf+eIXac4lSWoKoG0QPz1KY4Wr5io=
Subject key identifier: FC:FC:AF:8F:1C:DD:77:A8:AC:5F:F5:62:4A:BC:B3:98:CF:19:56:1C
Authority key identifier: 7F:99:18:CA:B6:F1:F3:5E:F1:B5:E5:83:CB:28:39:E9:B7:48:B1:58
Certificate issuer: /CN=7f9918cab6f1f35ef1b5e583cb2839e9b748b158
Certificate serial: 01968F2868CEDE6C6484B477527195869A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
Manifest number: 11F0
Signing time: Fri 02 May 2025 04:01:52 +0000
Manifest this update: Fri 02 May 2025 04:01:52 +0000
Manifest next update: Sat 03 May 2025 04:01:52 +0000
Files and hashes: 1: f5kYyrbx817xteWDyyg56bdIsVg.crl (hash: CbaVR+RNdJ7hFDJEzgt2AdTJKrndMswyVWFTN0V7kOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:28:68:ce:de:6c:64:84:b4:77:52:71:95:86:9a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9918cab6f1f35ef1b5e583cb2839e9b748b158
Validity
Not Before: May 2 04:01:52 2025 GMT
Not After : May 3 04:01:52 2025 GMT
Subject: CN=fcfcaf8f1cdd77a8ac5ff5624abcb398cf19561c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:fc:cb:36:b0:70:17:ae:df:f9:4f:f7:d3:
a2:4a:32:92:61:fb:74:0d:a3:78:49:bc:55:09:69:
ba:00:1a:19:18:5a:b8:bf:01:36:cc:ce:02:3d:94:
fc:1f:01:b4:c3:16:5d:64:5f:d0:47:cf:da:1a:05:
57:ee:a3:fe:36:07:9a:cd:19:1b:9e:a2:87:81:dc:
2b:5f:d1:2b:a1:76:39:aa:f6:25:94:97:a4:18:92:
cf:50:fe:0b:79:9b:0c:5d:1e:a9:d4:3f:18:c6:f4:
ea:e4:d9:32:65:7b:c2:b5:ca:97:b3:b4:37:f6:4d:
92:12:eb:cf:9c:e5:79:ab:d3:ce:2f:e5:45:26:ed:
7d:81:42:ac:67:8e:ee:f1:ee:b6:47:44:fa:74:aa:
7c:2a:8b:3f:91:ad:28:00:51:07:39:4a:1b:1d:c7:
2f:0f:10:bd:29:21:66:93:2c:70:83:7e:0e:b0:d6:
da:78:1c:b4:0c:2e:39:a3:6d:17:bf:28:33:2a:88:
fe:de:55:0a:5c:59:30:ff:20:9c:a1:13:03:22:e0:
5f:a4:ca:cc:e0:6b:cf:a4:6e:66:44:29:df:32:31:
cf:a3:8f:bf:ac:c1:93:d2:13:6e:1f:49:1f:fd:4b:
71:e4:ac:74:f3:30:67:47:c1:19:ed:2d:c7:7b:d2:
2d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FC:AF:8F:1C:DD:77:A8:AC:5F:F5:62:4A:BC:B3:98:CF:19:56:1C
X509v3 Authority Key Identifier:
keyid:7F:99:18:CA:B6:F1:F3:5E:F1:B5:E5:83:CB:28:39:E9:B7:48:B1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fe:4e:d0:dd:65:b6:06:5d:c8:e1:b1:61:51:cb:98:b2:c4:
53:58:95:aa:c2:b2:23:0f:2f:f9:69:60:4b:ab:79:f0:30:61:
ae:01:82:2e:4f:d6:c4:54:fa:fa:59:91:61:20:41:79:88:02:
6b:bb:32:7f:86:1e:83:19:ce:74:e9:dc:8a:42:86:97:2c:09:
e0:dd:9f:51:27:0a:f1:1a:09:53:dd:06:2e:8d:cd:af:e0:c3:
50:cf:a0:61:ee:1d:b4:5b:ca:79:0c:eb:54:8a:c1:fe:bd:d1:
8e:19:22:2d:30:08:fe:6c:ad:4c:ef:c9:11:65:0f:fb:c3:05:
e3:83:ed:b8:da:27:50:cd:dc:fa:b4:fd:92:6d:68:05:86:d0:
14:76:52:da:1d:0b:c3:22:0b:68:9e:e3:9c:ea:fa:dd:bb:6d:
c0:63:73:e7:ed:e6:b0:87:13:6e:9d:0a:2a:cf:cb:4a:b4:c3:
94:8e:ff:e2:b9:1b:28:e6:4d:5c:71:b0:d1:8e:d6:6c:c2:4f:
36:fc:ff:7d:6d:8a:67:48:f6:33:3a:73:62:e8:13:6c:aa:6e:
17:cd:af:eb:41:8f:2e:3f:df:ee:85:65:d5:c5:eb:f3:e4:06:
3c:ad:21:06:4e:59:54:4d:25:55:44:ad:70:f6:ee:4d:99:0a:
b9:dd:d5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:58:01 2025 by rpki-client