Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier: YAJN3dTYm8P4etFvZYli5LrPZjSRJLByWq0EJUomnTc=
Subject key identifier: B2:0D:DC:2C:CD:98:9B:3E:81:2A:47:F6:F8:94:CE:4A:5C:62:13:5E
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial: 0198D7A8C84CE3AB4D932E339E519F886968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number: 07A6
Signing time: Sat 23 Aug 2025 16:00:19 +0000
Manifest this update: Sat 23 Aug 2025 16:00:19 +0000
Manifest next update: Sun 24 Aug 2025 16:00:19 +0000
Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: MRAA+yI9otabu9WR8toYpZN3u/Kx2rLFMY8s/P7jtsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:c8:4c:e3:ab:4d:93:2e:33:9e:51:9f:88:69:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Validity
Not Before: Aug 23 16:00:19 2025 GMT
Not After : Aug 24 16:00:19 2025 GMT
Subject: CN=b20ddc2ccd989b3e812a47f6f894ce4a5c62135e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:5b:65:95:fe:13:22:ae:c6:5f:7c:4d:81:
e5:a5:d4:d1:5e:3d:8e:e7:96:f8:6f:f6:0f:eb:fd:
7e:19:f0:e2:bb:25:8b:d3:c0:1f:2a:c1:5b:6d:21:
20:ac:d5:f3:e2:3c:cd:9a:4b:91:37:ea:15:26:8c:
a3:93:3f:46:45:5f:2e:4d:ed:c6:f5:2c:22:1d:32:
81:bc:54:2c:e7:eb:cc:a5:41:90:ac:4c:57:6f:f9:
39:55:db:4d:5c:cc:e4:64:aa:3a:19:88:25:7c:59:
ef:d5:b6:30:54:68:60:20:90:a2:8c:49:95:84:df:
26:25:bf:66:87:78:49:9c:70:d7:14:ea:5f:f2:08:
96:1f:f6:3d:53:a4:0f:07:87:c1:35:71:04:31:0f:
3e:21:0c:56:af:4c:6e:1d:95:09:52:36:8b:5d:3d:
9c:c3:79:f6:d4:64:5c:ff:a8:c3:10:69:8a:1e:49:
ee:3d:5b:3f:b7:c4:ed:ba:d5:b1:a3:5b:27:ae:4d:
05:e2:fd:ed:9d:fe:07:de:1f:8f:88:78:e2:33:6c:
2c:3b:c5:32:13:99:89:9f:cd:1e:9d:18:27:0c:34:
3a:78:28:73:f9:91:b0:7c:9c:fa:f5:6c:e8:b4:3d:
a1:ed:ef:86:eb:33:a7:b5:f3:d9:2e:d0:d5:0c:0c:
8a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0D:DC:2C:CD:98:9B:3E:81:2A:47:F6:F8:94:CE:4A:5C:62:13:5E
X509v3 Authority Key Identifier:
keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:da:b9:32:86:17:a5:af:09:21:b4:aa:3a:7d:fe:c4:a6:cb:
2a:bb:79:96:79:1b:ae:2c:5c:eb:5f:52:38:07:1e:ff:95:62:
c7:d9:36:46:99:14:9b:9f:a4:86:8c:a4:66:8d:cc:4d:5c:97:
9a:d2:20:2a:f0:c9:ca:6d:e6:c6:87:34:66:3e:33:8a:96:17:
94:c0:b2:e5:5f:ba:09:9a:e8:af:96:e8:c6:08:f9:f1:c5:66:
57:40:d9:31:77:be:7c:ec:29:b1:84:a5:5b:74:0a:40:6c:54:
12:98:22:4d:bb:ba:b2:0c:dd:44:e6:21:ba:54:28:20:37:cc:
26:88:98:88:49:33:80:a7:b2:bb:a4:03:ec:9b:7d:3e:13:ea:
3a:53:16:53:b2:d4:88:0b:8d:77:ef:a5:0c:b5:02:88:d0:7c:
40:bc:e1:31:23:ad:9b:4a:86:0c:14:ef:c7:28:ea:7c:7d:de:
13:ce:3b:b5:75:9d:78:b7:6b:e2:60:73:ec:a7:fe:d8:83:29:
d6:df:cb:3f:2d:66:27:cf:b0:da:39:72:0c:f6:75:65:49:4b:
53:76:50:23:2d:cd:5a:6e:d8:1f:6b:d0:9f:a5:3b:7d:73:97:
66:33:4d:89:b1:79:99:2b:c7:0a:23:e4:6a:45:ec:f6:4c:de:
21:16:45:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:31:39 2025 by rpki-client