Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
File: 5llE5PrhnBWib8tfJzL_G6I9NU0.mft (raw, json)
Hash identifier: R8VBfP2HuKHVjuyhrCr5Rl8e8dQaGpp2Rczoh06V2YI=
Subject key identifier: 4A:99:90:44:25:EC:52:36:B7:83:11:62:CE:98:DC:B1:AF:1F:EE:02
Authority key identifier: E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
Certificate issuer: /CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Certificate serial: 0199FC5853E967F2229A4ABB03EEF9881554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
Manifest number: 03A1
Signing time: Sun 19 Oct 2025 12:01:11 +0000
Manifest this update: Sun 19 Oct 2025 12:01:11 +0000
Manifest next update: Mon 20 Oct 2025 12:01:11 +0000
Files and hashes: 1: 5llE5PrhnBWib8tfJzL_G6I9NU0.crl (hash: SS/8LNMQO/AmR+VTSrbdC5mB3g/F3ek6Xvu62/YjT+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:53:e9:67:f2:22:9a:4a:bb:03:ee:f9:88:15:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Validity
Not Before: Oct 19 12:01:11 2025 GMT
Not After : Oct 20 12:01:11 2025 GMT
Subject: CN=4a99904425ec5236b7831162ce98dcb1af1fee02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8a:fc:22:33:93:fb:50:b0:db:cc:0a:99:2b:
39:62:76:a7:42:6c:8a:f3:c1:ff:53:51:4c:cb:67:
2b:de:c2:20:a9:c9:23:6a:79:56:b9:9e:1b:53:5a:
d4:00:5c:d6:7e:73:9d:8a:c4:22:b5:ac:44:61:a4:
9d:2d:56:3b:ce:15:1a:5d:c2:47:a3:e4:3b:78:58:
02:c6:d5:14:6f:0c:dc:92:8e:f9:c6:9b:4e:68:34:
62:57:25:a3:22:21:34:f8:9c:ce:8d:32:10:13:a0:
44:32:87:59:f8:d1:55:53:c8:d0:28:9e:e7:e7:6f:
96:12:f3:e9:3b:fc:3c:05:b1:fd:dc:78:e5:33:aa:
a6:3a:38:e5:42:a5:cb:4c:c6:1e:99:a8:fe:65:cf:
53:96:90:c0:a0:66:ac:5d:a9:f6:c7:fe:74:a9:18:
54:c5:b2:26:20:cf:ed:29:b7:27:20:92:25:c8:39:
6a:ef:96:7b:79:09:90:15:c3:3f:2b:72:f2:3e:d9:
ab:60:51:27:dc:fa:02:a5:bd:73:e9:f1:58:f9:4c:
f3:57:80:95:ee:78:80:e5:c9:1d:1d:43:92:61:99:
81:10:b3:48:36:37:d7:4b:35:8c:22:2f:f6:5c:dd:
e6:62:b3:28:65:d1:da:e2:00:13:27:08:96:81:27:
0e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:99:90:44:25:EC:52:36:B7:83:11:62:CE:98:DC:B1:AF:1F:EE:02
X509v3 Authority Key Identifier:
keyid:E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:90:36:32:72:73:89:27:dd:40:90:3c:cd:04:39:6b:8a:2a:
d2:df:6b:a5:dd:33:a7:ed:52:f0:01:30:53:85:0e:bb:56:66:
54:49:15:c4:e5:da:6c:de:4a:03:2e:7c:a8:34:0f:b3:cf:6c:
62:34:8d:97:cb:1c:20:6c:a0:47:7d:88:5a:12:04:ea:dd:58:
fb:8c:71:12:10:4c:37:05:fa:30:26:f6:dd:19:f0:2a:dc:83:
49:97:e6:00:f9:7b:c8:d9:79:4b:20:38:8a:1c:da:3f:f4:17:
4f:b4:8c:13:d7:b5:10:06:79:7c:8d:14:41:80:64:40:de:dd:
d5:b1:db:13:41:a8:1b:54:e4:56:72:c0:b6:cf:b5:67:43:fa:
21:0a:1d:85:81:53:88:f0:51:e6:cb:1e:a2:10:71:61:76:08:
61:16:b6:0c:34:e1:8a:1a:2d:e6:20:04:a5:4b:45:90:d2:a3:
6b:b5:58:0e:db:24:d2:4e:9a:18:b5:60:1d:b2:35:53:3b:f7:
1c:f5:c5:28:07:60:3b:0d:11:c0:46:83:1f:4d:ba:31:c0:69:
99:e0:58:d5:12:53:96:ac:55:49:6b:91:6e:2f:26:45:b4:cb:
6b:bf:28:fd:70:c4:ee:48:27:af:72:58:5e:e0:e4:13:db:ee:
14:c6:86:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:02 2025 by rpki-client