Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
File: 5zqmpwU3TttxYIbqzxppeqLwjmE.mft (raw, json)
Hash identifier: +PFSiSsnuvZkqjgM3/Zxolo0gZMlWqzWqTJZDptrQHs=
Subject key identifier: A8:74:47:1C:44:5C:EF:BF:97:76:F8:6D:2A:A7:C7:E5:30:95:27:87
Authority key identifier: E7:3A:A6:A7:05:37:4E:DB:71:60:86:EA:CF:1A:69:7A:A2:F0:8E:61
Certificate issuer: /CN=e73aa6a705374edb716086eacf1a697aa2f08e61
Certificate serial: 0198D472594D0F196C8828A4863F07E939D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
Manifest number: 0697
Signing time: Sat 23 Aug 2025 01:02:00 +0000
Manifest this update: Sat 23 Aug 2025 01:02:00 +0000
Manifest next update: Sun 24 Aug 2025 01:02:00 +0000
Files and hashes: 1: 5zqmpwU3TttxYIbqzxppeqLwjmE.crl (hash: RWNW+bMnBA8Z29yQmQLCkuhTK1FSARpyUYrEHseZX24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:59:4d:0f:19:6c:88:28:a4:86:3f:07:e9:39:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73aa6a705374edb716086eacf1a697aa2f08e61
Validity
Not Before: Aug 23 01:02:00 2025 GMT
Not After : Aug 24 01:02:00 2025 GMT
Subject: CN=a874471c445cefbf9776f86d2aa7c7e530952787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:f1:ee:ea:3c:cc:b3:50:a5:b0:07:49:55:
8a:f1:4e:57:70:3c:1e:03:a2:fd:40:b2:17:17:53:
72:a4:41:48:9e:0f:76:07:3a:06:bb:8f:8f:cc:be:
91:7c:29:08:8c:d1:45:e1:50:c6:47:7a:29:54:e9:
d6:cc:94:97:4b:ff:61:30:0a:98:9d:b9:34:4b:0f:
48:81:e8:fb:38:98:13:cb:c8:4a:eb:5b:25:68:63:
7c:93:09:ed:91:2c:91:d1:9e:8c:f0:d0:95:b7:28:
4b:4e:36:59:fc:e0:f3:d1:b8:ad:16:42:9d:84:2f:
21:7a:ec:57:b9:c2:5c:39:e8:3d:f6:f5:d9:89:96:
2f:b1:ad:4d:05:e0:2b:3f:4f:e5:84:6c:93:1a:cc:
0f:fa:f8:09:8b:46:b1:87:6d:9f:01:68:bb:be:c2:
bd:d1:8b:4e:fe:f5:ae:11:08:e5:24:5a:e8:91:e6:
d0:b6:2e:a3:54:12:3a:39:b3:b0:8a:07:f7:fc:f2:
ff:97:be:82:36:6a:33:9e:74:82:17:34:b1:6f:64:
9a:b5:dc:ab:0b:66:e7:c8:a1:bb:ea:04:db:aa:d2:
1a:54:a1:c2:29:e5:b7:e6:3c:38:75:f7:8d:35:0b:
25:5c:53:1c:2c:2e:c1:b0:c7:1b:4a:1c:b2:fc:96:
77:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:74:47:1C:44:5C:EF:BF:97:76:F8:6D:2A:A7:C7:E5:30:95:27:87
X509v3 Authority Key Identifier:
keyid:E7:3A:A6:A7:05:37:4E:DB:71:60:86:EA:CF:1A:69:7A:A2:F0:8E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4a:64:64:99:56:ab:a6:41:0a:b7:e6:af:8f:e5:ee:b6:9a:
5f:7d:2c:66:d4:d3:52:5a:4f:db:2f:b4:d7:57:f2:12:58:45:
d1:40:e7:66:b3:4d:5a:91:f4:27:2d:42:29:4f:59:a0:5f:28:
85:c0:be:87:96:53:66:d1:f5:50:61:d4:58:08:45:07:78:1c:
79:95:d2:76:59:56:b8:27:ff:db:3f:08:d1:ba:ff:bb:fa:56:
24:8a:cf:0f:01:25:b9:1f:31:50:34:98:4c:43:f8:e0:e5:d2:
71:21:fd:a5:b2:3a:6b:c2:af:c3:11:58:86:e8:3b:2d:bf:0f:
4a:98:40:6b:64:0a:db:05:e8:b3:00:b8:c8:f0:6d:5d:9d:d6:
ac:5f:c5:06:08:1b:3e:ec:91:c1:5a:da:8f:84:ce:23:51:9e:
7e:8d:9e:16:3b:99:de:df:f5:f3:c3:8a:d3:bf:9c:80:23:1d:
23:26:09:ea:d5:3c:3c:8a:dc:b5:6a:08:fe:39:25:7c:2d:2a:
80:70:e3:37:26:ea:7e:ff:b8:76:48:40:8d:79:79:0f:8a:cd:
76:63:8c:7c:40:f6:f4:e6:2b:7f:7a:e6:c2:23:a4:91:9c:52:
59:a1:a9:3c:ce:b1:32:59:df:67:5a:98:4c:4d:f0:ae:f9:23:
67:68:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:59 2025 by rpki-client