Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
File: Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft (raw, json)
Hash identifier: 9qDhhQTMkX92IrcnKwD/STUjQjTaOF/K49TGWRAxDAs=
Subject key identifier: 5E:F8:08:C7:C3:A8:7B:C9:4C:50:F1:5A:9C:A6:8A:BD:FF:F9:D0:27
Authority key identifier: 67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8
Certificate issuer: /CN=679bd78e3819770c116e577bacfad1993392bdb8
Certificate serial: 0199FAD8429006A1C73049854D6B4BA37F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
Manifest number: 1140
Signing time: Sun 19 Oct 2025 05:01:40 +0000
Manifest this update: Sun 19 Oct 2025 05:01:40 +0000
Manifest next update: Mon 20 Oct 2025 05:01:40 +0000
Files and hashes: 1: Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl (hash: j8R9+5IiuoF/x3GNGplpXVzIx+libfFLxTbwC8L4DRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:42:90:06:a1:c7:30:49:85:4d:6b:4b:a3:7f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679bd78e3819770c116e577bacfad1993392bdb8
Validity
Not Before: Oct 19 05:01:40 2025 GMT
Not After : Oct 20 05:01:40 2025 GMT
Subject: CN=5ef808c7c3a87bc94c50f15a9ca68abdfff9d027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:af:18:9f:ce:17:3e:ef:57:48:58:64:4c:
55:c3:4d:2f:e5:b6:a3:05:f4:f9:ec:81:c5:13:7a:
28:a0:ea:5a:53:69:6e:79:85:c9:0a:1f:72:13:b6:
23:8e:73:d7:e6:53:47:59:e2:14:f7:7c:2f:9c:0b:
ed:c7:59:1b:5e:cb:60:93:ec:9d:fd:b5:f7:60:fd:
1b:6c:7f:db:fe:64:46:64:83:ac:fb:16:ca:93:18:
50:7d:7d:a5:d0:c7:02:fb:17:97:ae:ab:37:6b:38:
eb:20:2e:12:80:fd:3c:28:9d:7f:58:bc:07:8f:09:
4a:58:07:75:b6:2e:a0:32:45:1b:67:4d:5c:07:61:
fd:3d:b6:c0:3b:b1:99:1d:5d:a7:a0:a2:fe:ef:37:
58:14:58:79:52:a9:33:d8:b5:59:6e:69:d1:ff:ec:
0e:6e:22:f3:b2:93:26:c1:32:05:b2:06:dd:a3:c8:
d7:5e:80:de:3f:dd:72:94:84:2d:5f:78:f6:9a:bb:
e1:66:5d:85:db:b7:6f:6a:8c:20:0a:20:a6:db:e7:
28:8d:94:b9:f2:c4:97:10:55:8d:e1:70:3c:49:f1:
54:84:06:d9:8d:fd:04:c0:48:8f:e1:f3:78:07:ce:
80:97:ac:ba:1c:01:38:36:df:ed:5a:33:64:d8:8f:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F8:08:C7:C3:A8:7B:C9:4C:50:F1:5A:9C:A6:8A:BD:FF:F9:D0:27
X509v3 Authority Key Identifier:
keyid:67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:40:df:2c:e8:d3:e3:6d:de:e4:e3:cb:ad:e8:42:cb:47:da:
31:0f:51:64:63:e3:b5:e1:65:be:b1:8e:15:db:56:8d:4f:a4:
88:21:51:51:93:4c:b2:be:83:cc:f5:7e:23:9b:55:c4:f3:9b:
c0:11:48:21:9d:9a:a5:87:98:5f:ee:f1:81:a9:76:85:11:42:
3c:86:da:d3:9b:88:f3:d3:fe:ff:5c:8b:50:68:fb:12:b5:83:
9c:d4:4a:76:64:bd:71:4b:a7:c6:92:86:48:a6:f1:4b:36:b5:
c2:99:88:63:f5:46:b1:ff:65:e0:15:ad:0b:df:e7:36:fc:07:
4b:f6:d6:36:0d:af:0f:80:e4:40:2d:f2:07:22:58:e0:63:19:
c5:53:93:3e:a1:fe:a5:0a:74:71:f1:bf:ef:88:0b:18:c1:72:
01:85:85:51:37:a6:05:2f:49:0b:a2:bf:a7:4b:06:e5:16:88:
54:f4:17:2b:ee:2f:43:b4:c8:d8:90:bf:57:22:c2:38:af:86:
d0:10:75:43:7d:9c:18:6b:be:7b:15:6c:2c:f6:e6:68:aa:05:
e3:b2:a2:24:26:ce:fd:84:0e:43:11:04:00:b0:ac:4a:55:ab:
54:81:2c:b1:41:58:3a:28:9f:fe:ee:0f:52:63:fb:8a:76:13:
b7:e5:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:16 2025 by rpki-client