Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
File: 5zkzwIr5wC27DT6X8fkJM_U1b8E.mft (raw, json)
Hash identifier: nLWuxdzsnbaYLhXoeHWDtjIbvokUelCpu/Kguk0WejY=
Subject key identifier: 94:03:4B:FA:C9:0E:95:6B:32:59:84:71:DB:AA:70:A8:EC:A6:36:37
Authority key identifier: E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1
Certificate issuer: /CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
Certificate serial: 0199FBEBED010F9CEBFE4C5BD531861D8317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
Manifest number: 0E7F
Signing time: Sun 19 Oct 2025 10:02:46 +0000
Manifest this update: Sun 19 Oct 2025 10:02:46 +0000
Manifest next update: Mon 20 Oct 2025 10:02:46 +0000
Files and hashes: 1: 5zkzwIr5wC27DT6X8fkJM_U1b8E.crl (hash: prdH/7crydjG5gKcXHdPrss2w23IvmFXWTMIgK5S5iI=)
2: iR2xhszrhu9CQV9Ilw41Wt-zCR0.roa (hash: GfiW21oyJHRpJ2RiePVt0wuNlZL5LHM/Gp8C0SkaZrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ed:01:0f:9c:eb:fe:4c:5b:d5:31:86:1d:83:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
Validity
Not Before: Oct 19 10:02:46 2025 GMT
Not After : Oct 20 10:02:46 2025 GMT
Subject: CN=94034bfac90e956b32598471dbaa70a8eca63637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:27:d2:cf:19:a9:92:52:80:d9:e2:af:37:
0c:cf:ed:53:39:2c:72:8c:05:62:85:17:dc:b5:d6:
32:1d:dd:19:dd:fc:39:8b:eb:b8:58:9f:c6:c0:57:
c6:cb:b5:5b:17:90:92:ef:f5:e4:15:08:bd:50:8f:
b0:ec:e2:76:b5:4c:58:32:e8:56:eb:95:44:73:d7:
93:c5:34:56:e6:67:2f:ec:17:af:32:8e:ef:bf:03:
b6:88:6f:6c:fd:9b:4b:c4:58:4e:70:38:0a:0a:8e:
4a:b2:f8:20:ec:b6:8d:bb:bd:2e:34:0f:1c:9e:bc:
a8:3e:10:55:52:16:2f:36:9f:69:47:05:f9:ca:db:
11:db:99:92:d5:06:74:bc:03:14:04:fa:6a:f5:25:
53:c0:f0:02:06:d4:62:c2:8e:b6:67:70:ae:97:bf:
02:87:4c:af:11:89:0e:ab:a4:7a:0b:34:04:60:b1:
18:c8:5a:2d:cc:89:d1:a4:6f:ae:d4:67:8b:5e:c6:
84:3e:08:8f:6f:dd:e4:2f:31:07:16:4c:50:dd:fb:
5c:8b:1a:61:d4:8e:43:f7:e7:0a:4c:ce:37:d5:4c:
1a:4d:e4:ed:1a:c7:e9:6c:04:a3:67:8d:7e:66:2b:
bf:93:19:59:06:61:7b:42:1f:9a:02:b3:f5:1f:90:
58:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:03:4B:FA:C9:0E:95:6B:32:59:84:71:DB:AA:70:A8:EC:A6:36:37
X509v3 Authority Key Identifier:
keyid:E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:53:8b:96:66:de:eb:d1:60:f8:c0:57:03:8d:7b:94:13:09:
6b:f3:17:e5:36:d9:cd:30:36:81:de:6e:79:a5:ef:ad:69:dd:
b5:cb:ad:06:63:4f:b0:e8:79:fc:42:a7:ec:8d:98:c2:b3:b6:
c1:96:aa:b1:63:af:65:1e:90:2f:ec:32:12:60:48:90:90:bc:
2f:9d:f3:9c:7a:fa:d0:4d:46:ad:c5:8b:3b:c7:da:8e:d2:bd:
b2:93:37:4e:21:4e:f7:bc:37:e9:48:f5:85:74:29:13:38:a2:
12:4b:96:90:bf:4d:ab:be:a7:d5:b6:ee:af:05:90:63:54:12:
d0:5f:54:d2:cb:84:49:18:c1:af:30:33:31:7c:65:ef:ee:c1:
ee:e4:15:32:0d:53:be:26:5c:d4:71:10:8d:a6:a1:eb:7f:97:
8c:a0:8e:c9:9e:3c:74:44:2c:0e:25:f7:4f:21:12:a4:de:42:
7c:7b:f4:ea:64:d6:da:16:a9:3f:40:cc:8a:b3:b1:bf:ca:41:
9f:e7:dc:6e:f6:57:ee:40:42:ed:61:2c:8b:8a:89:bd:91:f1:
49:c7:89:e5:4a:2e:53:3d:f3:44:b3:b0:20:a8:e9:d5:e8:fd:
71:f5:46:47:45:cf:29:8f:5c:d3:5c:03:06:83:54:97:2c:2a:
5b:86:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:41 2025 by rpki-client