Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
File: 5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json)
Hash identifier: RVkPvOg/AJ6K1plWy8MejSgNu1NOWNi4ufeiisExbdk=
Subject key identifier: 14:81:F6:11:E6:4E:CF:B7:BA:9F:E3:7A:60:02:6A:A6:D8:06:A8:0F
Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
Certificate issuer: /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Certificate serial: 0198D8511BB719B530997A71E5ECF212F71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
Manifest number: 0F72
Signing time: Sat 23 Aug 2025 19:04:10 +0000
Manifest this update: Sat 23 Aug 2025 19:04:10 +0000
Manifest next update: Sun 24 Aug 2025 19:04:10 +0000
Files and hashes: 1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: El18dQVtz5CumZ4MBjV5QVrOSmId/HCxQSlD5R1U3ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:1b:b7:19:b5:30:99:7a:71:e5:ec:f2:12:f7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Validity
Not Before: Aug 23 19:04:10 2025 GMT
Not After : Aug 24 19:04:10 2025 GMT
Subject: CN=1481f611e64ecfb7ba9fe37a60026aa6d806a80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:94:29:5f:ea:74:f2:42:b7:63:ab:37:84:8d:
7f:3b:68:df:98:57:6b:3f:9f:7c:3e:1b:b4:c9:66:
c8:7d:3c:71:0d:71:92:93:a8:bc:a8:8a:b0:94:9c:
a1:b6:81:fc:a6:de:81:0d:71:c0:c6:5c:53:49:85:
dd:2b:09:65:5a:20:1f:1f:08:11:e8:c1:d3:c1:56:
09:f9:f7:29:05:92:11:19:19:1c:a7:f4:2f:3e:71:
f7:be:86:d8:7b:78:d5:4c:15:b2:13:85:f7:ec:da:
f1:6a:5b:66:72:98:0d:31:72:96:c4:c2:01:94:08:
b9:d2:e9:f9:aa:e8:54:2e:b4:0f:2a:e0:50:67:59:
6e:d3:3d:ed:04:98:95:ec:3d:a1:a7:6a:8d:d5:22:
3b:ed:e2:81:c4:11:9e:44:ad:d3:0b:f0:2f:50:e2:
a5:8b:5f:dd:3a:8f:0e:55:50:79:51:35:4f:67:00:
6f:c1:3b:b5:12:8c:be:af:50:90:f5:12:74:93:ce:
5d:9b:db:f0:a1:6e:c9:ac:ba:af:2d:ce:08:99:85:
ff:78:89:b7:26:ef:a6:86:cf:ce:db:9c:59:3c:b7:
5e:a6:63:f5:c0:9a:32:4b:79:16:27:6c:09:ba:1a:
ac:7b:89:e6:fc:01:bb:f0:a7:12:0d:08:51:9b:39:
35:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:81:F6:11:E6:4E:CF:B7:BA:9F:E3:7A:60:02:6A:A6:D8:06:A8:0F
X509v3 Authority Key Identifier:
keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:59:5f:10:ba:ca:57:b4:a7:7c:6b:06:04:7e:50:86:f1:a4:
38:e2:86:47:3f:6e:b3:aa:7c:16:5c:2d:22:41:ae:65:53:f6:
7d:59:f4:09:3e:23:c7:c0:21:30:8b:26:bf:1d:45:14:d5:bb:
d6:71:2f:28:a4:ee:ea:d8:9b:7f:41:74:e9:fa:e5:66:76:17:
c9:b5:0a:5a:8d:35:ad:35:61:98:c2:f1:08:97:d6:bd:67:90:
bb:47:7a:71:e7:a9:f9:64:e0:bd:ba:43:6f:fe:ee:d6:05:dd:
71:91:42:01:45:a2:79:61:1b:ce:96:a6:66:06:3d:45:eb:e6:
b1:6c:00:b5:0d:94:5d:75:5b:46:7d:02:9e:42:ae:d5:a1:ed:
0a:95:cb:bb:bd:75:30:4b:ca:ae:1f:12:9c:a9:22:2d:50:95:
fa:a3:fb:6a:84:07:93:68:81:63:e0:55:c0:f4:73:d9:b6:f2:
64:27:c4:22:11:82:aa:a9:61:0b:6f:99:9a:83:7a:1d:9d:c8:
72:a6:bd:15:99:a9:84:76:6f:17:a2:a1:ef:1e:e6:30:ab:56:
72:f6:a8:3d:d4:dc:04:56:1b:fd:e6:a6:93:1e:4e:90:d4:37:
c0:1b:d8:3f:fb:e1:46:86:61:89:eb:6f:db:6e:27:bf:ad:73:
41:88:92:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:04:06 2025 by rpki-client