Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
File: _5zoM1_DdnayDsFlXFPWfbyG6LM.mft (raw, json)
Hash identifier: c5G5Numl56NzkXEVK4FsqXxJqmz/CaZHbgY4xP4/5sE=
Subject key identifier: 67:85:E9:DF:2D:DA:00:42:9E:F2:3A:9D:FE:EA:72:94:21:D2:46:2B
Authority key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
Certificate issuer: /CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Certificate serial: 0199FD341BD46ADFD43E41C66FB2995291A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
Manifest number: 0F5D
Signing time: Sun 19 Oct 2025 16:01:14 +0000
Manifest this update: Sun 19 Oct 2025 16:01:14 +0000
Manifest next update: Mon 20 Oct 2025 16:01:14 +0000
Files and hashes: 1: _5zoM1_DdnayDsFlXFPWfbyG6LM.crl (hash: 1NWU1L04E7tIUc37KOlPGVy5Z1YPa+U/FYaMd+pPv/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1b:d4:6a:df:d4:3e:41:c6:6f:b2:99:52:91:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Validity
Not Before: Oct 19 16:01:14 2025 GMT
Not After : Oct 20 16:01:14 2025 GMT
Subject: CN=6785e9df2dda00429ef23a9dfeea729421d2462b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:ff:23:c6:a5:ed:09:39:4b:d4:6b:53:00:
7d:71:a3:d3:45:41:05:60:5f:9d:c3:38:79:bf:89:
19:02:63:56:ab:72:62:8f:17:97:92:0d:94:18:f5:
47:5b:8d:40:7a:6b:45:2b:08:85:7d:74:64:b7:c7:
2d:74:38:80:6c:6f:d0:c3:89:8f:d9:3d:82:eb:02:
fa:20:96:42:32:82:06:09:aa:e1:96:ef:b3:fc:5e:
1e:34:bc:cc:38:59:e0:11:b4:ae:90:ba:45:80:cd:
9e:e4:7b:00:c5:6e:8e:bb:b1:ad:0b:73:de:f4:95:
af:f2:2e:fd:18:3b:8f:73:14:8b:13:c7:dc:c1:be:
fd:ec:03:64:d2:97:95:74:06:b8:14:16:f7:32:e9:
8f:7a:5b:e6:97:7d:c9:fa:bc:ea:2d:f8:5f:00:5e:
c8:74:1e:9b:6a:33:5d:ca:1c:fa:a5:9a:3c:ad:26:
59:60:cd:57:7c:b8:f2:4d:c3:50:b1:c5:b4:46:48:
4e:15:89:b3:03:07:63:f8:95:03:16:ae:77:e0:ad:
56:62:a1:27:97:02:09:53:d7:da:50:c8:17:6e:8a:
90:3e:d9:67:93:ad:21:ca:92:39:79:f4:b5:cd:bc:
46:f1:62:4b:94:46:0c:28:cd:07:e7:d4:df:80:52:
07:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:85:E9:DF:2D:DA:00:42:9E:F2:3A:9D:FE:EA:72:94:21:D2:46:2B
X509v3 Authority Key Identifier:
keyid:FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e9:aa:ba:0b:ca:d4:90:d5:6c:f6:b6:41:2e:f5:e1:4f:d7:
2f:da:b7:54:49:0d:e6:a0:64:4d:8d:a7:59:be:93:b2:dc:ee:
77:6d:06:88:52:31:d4:58:e1:3a:3e:20:c7:19:43:0e:92:ff:
fa:13:4f:19:2f:e0:64:a4:52:5f:31:93:79:03:ad:24:e0:c0:
3a:b4:86:b5:60:d1:2f:cf:24:9d:c5:de:01:e4:2a:47:1e:a4:
b1:43:73:6e:1a:3c:de:21:3b:cb:f4:dc:e7:6c:3e:b6:32:42:
55:bb:0d:7f:6c:e6:cb:fe:f0:7e:32:ab:69:25:d4:93:9f:73:
5f:a8:de:f3:08:f2:3a:4f:50:5d:b2:2c:be:8b:e2:ed:5d:ce:
5e:f3:e9:5f:2e:a6:14:93:83:f0:62:2e:a8:e6:d0:75:34:6e:
ad:8c:a6:46:af:e9:06:7f:35:7a:a6:0b:26:10:ea:a0:60:00:
2b:ee:5a:20:c8:49:bb:02:b0:bf:a9:06:3a:aa:b2:1f:e9:6f:
c6:83:d8:6b:39:83:f1:6c:ae:aa:74:07:ea:b7:ac:6a:fd:ab:
db:44:39:3c:10:75:9d:b3:1c:e4:7d:cf:86:24:a8:96:be:74:
c1:06:9b:3d:a7:60:5c:46:88:79:e2:61:0f:02:24:b8:9e:17:
9f:b0:b1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:10 2025 by rpki-client