Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier: PJ2+CfvK5mO5M76RkNycHvg2xq8w/85COyh4204qWLg=
Subject key identifier: 99:A4:D1:28:EA:DB:6C:AE:23:AD:5E:C3:2E:C3:C8:91:9F:9E:40:D6
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer: /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial: 0198D6CCDF9EF1A33936A8C50EFA207AFF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number: 0C24
Signing time: Sat 23 Aug 2025 12:00:07 +0000
Manifest this update: Sat 23 Aug 2025 12:00:07 +0000
Manifest next update: Sun 24 Aug 2025 12:00:07 +0000
Files and hashes: 1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: Vxz8zlHDDkxXee/6WUjPMRxUgPBhq8sykhSsEopKfzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:df:9e:f1:a3:39:36:a8:c5:0e:fa:20:7a:ff:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
Validity
Not Before: Aug 23 12:00:07 2025 GMT
Not After : Aug 24 12:00:07 2025 GMT
Subject: CN=99a4d128eadb6cae23ad5ec32ec3c8919f9e40d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:96:53:f9:0b:7f:1c:ec:4c:f3:82:4d:ba:
6e:e3:9a:e7:33:7a:e2:af:1f:c9:2e:ef:52:6e:02:
50:80:d0:02:22:74:7c:b5:33:a1:b1:48:93:54:83:
14:1d:35:06:87:2b:75:7e:3f:29:48:82:d5:c3:bd:
ee:4f:9f:4d:55:c7:1e:a4:ee:4d:b6:95:ec:36:5c:
5f:30:ce:7e:82:f6:9e:24:dd:1d:f4:60:23:80:ac:
19:73:c0:ec:91:48:2a:22:13:aa:93:ae:bd:ec:8b:
9b:61:63:c5:14:a3:2e:a5:9b:90:28:d2:d5:c7:44:
06:aa:0e:b8:81:b2:9a:87:df:f2:ac:54:d5:b6:e9:
df:49:24:61:ec:91:39:c3:09:35:12:88:ed:ad:d5:
b8:6d:46:9c:c0:ab:ef:28:b4:30:09:28:74:5e:f6:
b2:56:80:d7:8f:60:aa:71:ca:59:e5:d2:e1:23:21:
f1:56:5a:35:6e:f5:46:1e:5d:54:cf:96:8a:eb:9d:
fb:4a:05:7f:b6:e6:a4:b3:65:f8:8a:52:02:4a:57:
4d:0e:b7:c4:30:4e:bb:59:6e:5f:dc:11:e9:c7:09:
64:93:9c:60:b6:d7:9f:98:04:07:4a:37:b9:15:45:
1b:6d:e3:b3:5d:eb:77:d4:7d:94:3a:67:cb:cc:11:
ac:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A4:D1:28:EA:DB:6C:AE:23:AD:5E:C3:2E:C3:C8:91:9F:9E:40:D6
X509v3 Authority Key Identifier:
keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:81:96:38:db:87:22:43:d1:94:c7:4e:2c:32:5d:c3:a6:2a:
da:76:cc:ac:cc:13:22:90:6f:cb:cc:f1:87:6b:e3:e1:61:ac:
c9:2a:72:ba:99:6b:16:89:32:1a:ad:fe:68:9e:19:47:1e:8b:
22:af:8b:e8:e0:c9:f9:6c:4c:85:71:c5:07:9a:7a:44:9c:35:
22:23:9b:58:9c:37:5e:09:eb:93:aa:e7:ae:3b:2c:a2:3c:a9:
0d:09:0e:2f:c8:94:f3:a1:ef:f2:9d:ae:52:26:5b:cf:75:41:
0a:e6:05:38:8d:41:b3:b4:18:65:30:07:e8:76:ce:d0:1f:24:
67:17:0f:8f:76:fe:7f:3c:77:9f:5f:dd:8c:f7:36:0c:9e:4e:
75:9d:dc:41:e6:2f:21:5a:ff:0a:a4:96:35:fb:91:33:cf:f0:
f7:7d:b8:bc:48:26:a6:96:61:c2:37:62:77:7a:b0:08:9c:d2:
b6:5f:8d:f3:20:e6:c1:c2:c1:0f:54:b7:4f:14:14:12:09:e0:
05:d9:20:00:2b:3d:f3:ef:0f:a9:ed:86:ec:be:dc:1e:05:f9:
ed:73:5a:75:3a:b8:72:66:ff:d9:e4:ba:ac:40:cf:01:d1:8c:
b9:7e:9f:9f:af:2f:71:35:b3:90:fb:e5:61:8c:de:f1:16:3f:
cf:68:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:36 2025 by rpki-client