Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
File: X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json)
Hash identifier: 97/8VKEQ7hPoZksYpf0xgis11LwULMhlpvCj2kpSK00=
Subject key identifier: 88:BB:BB:73:73:2B:54:E0:0B:57:03:3D:38:42:E6:97:D8:6F:63:B4
Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
Certificate issuer: /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Certificate serial: 01967530BD4F4CFC73DA338AEA09F28CD956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
Manifest number: 04FB
Signing time: Sun 27 Apr 2025 03:00:50 +0000
Manifest this update: Sun 27 Apr 2025 03:00:50 +0000
Manifest next update: Mon 28 Apr 2025 03:00:50 +0000
Files and hashes: 1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: Sr1kqEx38jkZxdidODB+PFnhT//DamVlSKxnUkdugzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:bd:4f:4c:fc:73:da:33:8a:ea:09:f2:8c:d9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Validity
Not Before: Apr 27 03:00:50 2025 GMT
Not After : Apr 28 03:00:50 2025 GMT
Subject: CN=88bbbb73732b54e00b57033d3842e697d86f63b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:27:34:c3:9d:2d:03:97:fd:9c:2e:81:f3:
c3:d1:3b:be:44:8d:e9:a1:c6:e2:23:9b:51:fc:81:
e5:eb:0c:7b:04:d8:70:7f:32:c4:71:dc:1c:f6:c0:
90:b8:e2:67:95:3d:85:3d:85:9b:9c:73:96:54:98:
5f:65:17:aa:92:b6:56:a8:54:82:50:42:72:e2:0e:
2b:58:bd:27:d2:29:bd:37:ed:6e:0e:2d:18:93:89:
38:0d:e1:b7:3c:ca:c0:e2:b8:eb:5c:85:4e:55:da:
c8:5d:12:65:5a:08:72:3d:ae:8f:06:76:16:00:52:
86:32:c6:3b:3f:19:a1:7c:ec:3e:70:13:9f:94:57:
8d:d1:90:c3:cb:6c:b2:f1:0b:55:51:5e:36:b3:6d:
88:ce:6d:40:5f:d8:97:9f:ab:df:e6:39:92:f0:28:
42:7e:bf:a7:85:89:51:44:33:47:47:89:ab:27:7d:
55:b6:ff:a3:91:c6:89:36:44:de:72:97:7d:de:8d:
c3:c5:6f:6a:bd:0a:4a:56:c9:d0:d3:82:8a:d5:2a:
33:e4:dc:57:ab:bc:d8:fd:66:f1:9d:32:ac:2c:4c:
80:c0:82:94:32:1e:36:83:72:c7:8b:d3:98:21:ff:
56:c7:a1:ad:2f:06:80:52:21:67:f6:74:99:12:c9:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BB:BB:73:73:2B:54:E0:0B:57:03:3D:38:42:E6:97:D8:6F:63:B4
X509v3 Authority Key Identifier:
keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d7:52:bc:d5:62:95:13:15:35:73:43:55:98:72:07:c2:c4:
0e:78:8a:5e:dd:2e:ee:fd:5b:8a:66:bf:d5:56:6f:c7:db:a4:
02:3e:90:a8:93:35:db:01:e6:fc:f9:92:8b:8b:44:c0:b3:ef:
24:24:c7:ce:f7:1d:a8:71:95:83:89:fb:f2:04:ec:a2:39:b7:
04:b2:1e:0a:a9:8e:fc:46:e2:2d:13:dd:58:a3:6d:b6:f8:31:
b4:b7:7a:14:fe:03:ce:ad:63:83:72:7b:15:a9:4b:bd:11:88:
39:a7:5b:d2:ca:be:91:87:f0:36:c0:42:eb:6a:9d:80:12:b0:
e7:c2:2d:1e:b5:11:af:10:f7:d7:5e:31:af:df:fe:e4:5b:7b:
bb:a2:d9:0f:1e:c7:9f:92:e4:0d:f7:50:f3:57:12:2a:c1:cf:
a3:aa:d8:d8:6c:80:96:11:8b:49:06:5d:99:d1:c4:d2:c2:e6:
9d:c5:4f:70:34:70:c2:2d:29:49:f2:43:cd:0f:2d:e1:bd:c8:
89:f0:fd:16:83:14:63:ea:ed:1d:c5:b8:18:c1:5f:b9:ae:6b:
5b:45:6b:09:f5:6f:52:9b:2c:9d:cd:ec:c6:25:e8:51:24:d5:
3b:53:3a:91:76:4f:a1:68:84:14:04:a9:b3:15:3b:31:6f:bd:
91:9e:52:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:38:09 2025 by rpki-client