Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
File: 5ZAclsdH6RYsrv5QFArlMhsjxXw.mft (raw, json)
Hash identifier: JBXVyA6En/YHs5/OANmV+Gx/00kFygInx5Xbun2UQ6k=
Subject key identifier: 55:40:9E:D8:48:11:F3:01:2A:0A:DE:5D:86:97:79:AC:12:5D:37:93
Authority key identifier: E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
Certificate issuer: /CN=e5901c96c747e9162caefe50140ae5321b23c57c
Certificate serial: 0199FBEB97AB46E88F71C864C25C6AA55DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
Manifest number: 022C
Signing time: Sun 19 Oct 2025 10:02:24 +0000
Manifest this update: Sun 19 Oct 2025 10:02:24 +0000
Manifest next update: Mon 20 Oct 2025 10:02:24 +0000
Files and hashes: 1: 5ZAclsdH6RYsrv5QFArlMhsjxXw.crl (hash: 0l+YQoZ5n1FTTZfv33Ivlb005I/pPnd0mazCDbFIZAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:97:ab:46:e8:8f:71:c8:64:c2:5c:6a:a5:5d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5901c96c747e9162caefe50140ae5321b23c57c
Validity
Not Before: Oct 19 10:02:24 2025 GMT
Not After : Oct 20 10:02:24 2025 GMT
Subject: CN=55409ed84811f3012a0ade5d869779ac125d3793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:d1:da:e5:8a:84:c2:06:ff:86:8d:e9:44:
ce:4d:1a:4c:3f:0c:89:c3:1d:a7:fe:53:c9:ab:b7:
78:4f:54:ab:4f:ed:3c:7e:5e:4e:63:64:ef:fa:49:
d6:64:37:24:91:7a:be:c6:16:4f:58:24:d7:eb:36:
75:35:1a:aa:94:ea:66:68:d6:dd:8f:cf:93:62:3a:
11:b1:5f:cb:f5:23:39:90:ed:59:83:3a:1c:2e:fc:
e4:b2:c1:91:9c:62:f9:e3:9f:4a:71:96:ba:00:12:
7c:4d:92:ad:e6:01:88:97:30:4b:cf:4e:ae:9d:a8:
1d:8c:02:ac:86:5c:56:75:b3:2c:06:55:be:30:88:
2b:df:29:f1:54:1d:01:02:68:78:69:28:4c:d0:8e:
84:25:5c:70:6c:ea:00:e7:9e:1f:4a:6f:e7:f7:99:
83:c7:9c:b5:85:0d:3b:4f:c1:a7:d7:6a:eb:fc:ad:
e0:f3:2a:32:f4:37:0d:5c:0f:3b:65:c2:5a:e7:c7:
90:cc:7d:aa:70:e7:0b:d2:57:4e:59:f7:a6:12:50:
84:50:cb:2f:21:98:63:ef:cb:09:b4:0c:7d:44:3f:
7b:93:13:d5:91:03:69:1e:e8:f8:69:c6:ef:2e:ae:
f6:94:7c:37:a8:bd:1c:9c:cc:ba:ca:08:4c:ae:92:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:40:9E:D8:48:11:F3:01:2A:0A:DE:5D:86:97:79:AC:12:5D:37:93
X509v3 Authority Key Identifier:
keyid:E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:be:49:96:4a:00:48:bd:12:54:90:21:3d:fc:b4:7e:b4:4f:
e1:da:2a:8c:5c:14:09:c6:f8:3c:f9:01:41:4c:90:d1:48:95:
e1:c4:de:b6:8a:0e:23:a7:87:9f:29:c6:0e:47:e5:92:84:be:
c2:e6:2a:e6:66:e3:87:af:0e:57:5d:80:d7:ac:4c:9e:30:c6:
00:11:98:27:f2:e8:f6:41:ea:d0:5e:15:13:9c:da:9a:59:be:
b1:38:4e:b5:76:ab:66:4c:37:c7:d3:68:75:2a:88:f9:40:bd:
db:16:89:d8:85:c1:71:92:00:82:b5:b7:20:88:4b:c8:69:b1:
cc:ea:9a:88:32:68:3a:8d:03:e8:72:4f:cf:bf:02:7c:64:71:
b8:98:a2:57:8a:57:92:26:9b:27:a4:42:f4:f9:a3:d9:a7:a0:
e7:56:28:2e:2b:12:3b:0f:12:05:d5:2b:cd:ba:fa:83:0b:37:
01:ca:79:1e:64:b5:ef:0c:b2:c1:f1:8a:45:76:82:67:14:47:
66:6d:0d:81:50:4f:4c:16:4f:56:d4:09:05:cd:a8:17:83:d8:
f5:b1:10:10:30:f6:4d:b0:57:be:df:91:1a:31:ac:ec:1d:5c:
7b:19:a6:96:64:ef:a0:e1:d6:4d:5d:e1:69:ee:07:17:ea:74:
ab:7e:96:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:36 2025 by rpki-client