Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier: LuImPE+wboAkymaGdZK8hqj8fv9qMnOMWvf6nmgYaPo=
Subject key identifier: 86:48:7B:46:00:0B:C2:E2:C9:14:86:D7:52:51:D0:82:C0:A1:C8:70
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial: 019A06DB97882C91A9D28868845E55F5AC49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number: 0843
Signing time: Tue 21 Oct 2025 13:00:45 +0000
Manifest this update: Tue 21 Oct 2025 13:00:45 +0000
Manifest next update: Wed 22 Oct 2025 13:00:45 +0000
Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: GBDgNEVOufG/LLTo9jXCw5e3Ob3jW/3axuFJJyX0hp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:db:97:88:2c:91:a9:d2:88:68:84:5e:55:f5:ac:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Validity
Not Before: Oct 21 13:00:45 2025 GMT
Not After : Oct 22 13:00:45 2025 GMT
Subject: CN=86487b46000bc2e2c91486d75251d082c0a1c870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:3e:2b:1c:b2:d5:27:24:b3:76:40:86:1c:
8e:c9:37:e7:1c:d6:a1:39:73:20:24:70:73:f6:70:
9b:20:bb:a9:0f:b4:e3:26:3a:b2:52:42:8f:ca:7f:
06:9e:86:e6:b5:3f:d8:44:65:4e:c9:37:61:69:1c:
9a:dc:d9:c0:4d:61:fc:1d:7c:33:84:28:a3:0d:31:
6c:98:97:59:2a:d7:cb:b2:16:33:83:cd:fd:1c:db:
ff:7a:1a:ef:a3:82:90:76:e3:cb:a1:72:4e:c9:57:
7e:9f:9f:df:65:06:b3:e1:eb:eb:c7:4d:4f:fe:7b:
4c:f2:66:f2:c5:05:ab:31:39:83:25:6c:e7:a0:22:
1f:bf:52:d0:f2:a9:38:b7:3d:e6:e4:ac:43:d2:83:
7c:22:45:ef:fd:15:2f:eb:f3:f5:ac:05:d2:8b:b1:
db:7e:e9:9b:cd:da:09:9c:2a:2b:ce:95:50:dd:9e:
79:4f:a3:77:36:38:a7:34:e9:8d:95:77:fd:30:fa:
10:90:34:4e:ba:f5:40:8d:a4:3a:18:0d:b8:91:20:
da:99:84:d0:09:a1:36:fa:7c:7f:6c:44:7b:af:e9:
ab:5d:f4:0b:f7:59:f8:30:fa:0a:c0:64:2e:8c:cf:
20:52:c8:f9:10:3b:bb:9a:71:0d:27:60:65:73:72:
0d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:48:7B:46:00:0B:C2:E2:C9:14:86:D7:52:51:D0:82:C0:A1:C8:70
X509v3 Authority Key Identifier:
keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:45:fd:cc:65:15:52:c0:5f:7c:7f:bf:65:1e:41:ea:c6:32:
60:b2:74:90:dd:2d:49:10:13:65:94:4c:49:c3:e6:e6:ed:8c:
2d:f5:7c:a3:5b:9d:fd:6a:ee:5c:64:05:0b:b8:87:60:5b:a7:
fe:36:c0:7c:e7:b9:fd:38:00:cf:03:6a:47:a6:fd:2e:f2:db:
c2:95:95:4d:a9:1c:aa:57:a5:b5:78:8f:b9:b8:b8:4a:72:e8:
a6:19:12:3e:52:53:da:51:42:ae:d3:00:c7:79:fd:fa:d9:80:
be:84:4d:ed:5b:28:36:58:45:33:0d:fb:6a:4e:fb:6e:76:67:
4c:fc:b3:5b:a2:04:46:fc:09:bc:5d:c1:16:ff:87:8e:3a:46:
cd:08:12:17:43:ff:b3:18:f0:53:d5:69:0b:82:d4:9a:b4:1f:
74:ce:76:60:64:0b:37:bd:c2:13:a2:a0:66:af:22:a2:d4:de:
14:cd:3f:f0:a4:85:cb:f8:9f:a3:37:2f:cd:c7:11:cf:37:1d:
34:5b:01:9a:c3:22:bf:d8:a5:c7:44:99:29:69:33:e1:b3:9e:
55:b8:3c:25:fb:d0:a4:be:88:c3:5b:d0:da:d7:07:3c:b5:eb:
51:7a:72:a4:1f:65:4d:ca:9a:d0:1e:37:e2:73:1b:1e:b1:90:
52:6e:0b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:12:27 2025 by rpki-client