Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
File: 5zqmpwU3TttxYIbqzxppeqLwjmE.mft (raw, json)
Hash identifier: EIGzBFE4/59A8bKE233OSTCElKWeMNYGzcSJunlB0T8=
Subject key identifier: 41:C0:8D:AE:12:9C:E6:09:38:1F:D6:89:BE:11:88:C8:38:CB:3C:4C
Authority key identifier: E7:3A:A6:A7:05:37:4E:DB:71:60:86:EA:CF:1A:69:7A:A2:F0:8E:61
Certificate issuer: /CN=e73aa6a705374edb716086eacf1a697aa2f08e61
Certificate serial: 0199FBEAA6F35A1B62FABF3EBDEE51BC77D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
Manifest number: 0730
Signing time: Sun 19 Oct 2025 10:01:23 +0000
Manifest this update: Sun 19 Oct 2025 10:01:23 +0000
Manifest next update: Mon 20 Oct 2025 10:01:23 +0000
Files and hashes: 1: 5zqmpwU3TttxYIbqzxppeqLwjmE.crl (hash: tVxFKtQZE3ioIRPID9hEmhQE/+pUB1WZ+ZuCQWnNgnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a6:f3:5a:1b:62:fa:bf:3e:bd:ee:51:bc:77:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73aa6a705374edb716086eacf1a697aa2f08e61
Validity
Not Before: Oct 19 10:01:23 2025 GMT
Not After : Oct 20 10:01:23 2025 GMT
Subject: CN=41c08dae129ce609381fd689be1188c838cb3c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:f6:3a:e5:d3:8f:4f:80:1a:d0:42:9b:e0:
c4:95:6f:86:5c:38:25:90:a0:18:23:e3:dc:b2:24:
91:06:f2:c8:d4:2d:a1:0d:1b:20:58:ab:bf:21:eb:
ab:77:58:8f:10:15:2e:33:eb:0f:9c:88:5a:a3:f1:
39:a1:cd:37:f5:27:8f:0e:49:50:5b:5e:91:47:1c:
c3:e0:00:e6:3a:ba:4f:eb:20:ed:09:ec:b4:b5:91:
15:6d:64:73:8a:ab:ab:1e:19:a4:0e:a1:2e:a6:4c:
a3:a9:81:43:bb:73:54:5d:bf:c8:0b:aa:b4:fd:04:
98:85:ee:84:42:c3:ef:56:cf:2d:b9:28:ca:0b:8c:
01:d6:7e:06:b9:da:1d:1e:85:1e:1b:39:2c:0f:29:
cf:f2:97:94:a3:be:d4:fa:3a:2d:7b:b4:5c:5b:3b:
2d:1d:05:61:5e:6e:29:a0:1e:cc:92:7c:a9:f2:4f:
13:ca:ed:22:77:24:03:6b:da:28:c5:97:5f:7b:b0:
6e:dd:7e:aa:fb:af:82:17:e5:a5:e4:13:35:21:4c:
a1:98:fd:a7:94:80:73:92:92:fb:1d:ae:30:79:05:
e8:20:58:29:bf:64:19:39:59:2e:30:85:54:b7:d4:
96:8a:64:88:e1:70:01:40:57:ec:6c:31:e9:7d:9b:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C0:8D:AE:12:9C:E6:09:38:1F:D6:89:BE:11:88:C8:38:CB:3C:4C
X509v3 Authority Key Identifier:
keyid:E7:3A:A6:A7:05:37:4E:DB:71:60:86:EA:CF:1A:69:7A:A2:F0:8E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:62:93:f4:17:61:b1:e9:a6:20:d9:87:8f:d4:1d:08:e9:a5:
0f:3e:f8:e1:ca:81:a8:de:fa:c5:93:5f:14:20:f5:1d:19:03:
f2:bd:d9:6a:ce:c6:89:43:01:b9:91:5b:1b:a6:5f:05:60:48:
fa:e9:e2:97:b6:57:fa:39:b9:b9:45:d3:8c:0b:4c:80:02:b0:
33:b3:bf:bd:d8:d9:b9:a4:72:fd:51:d2:85:f5:2d:fc:ef:6f:
88:0b:27:a5:e5:ae:12:b0:fc:8a:82:94:5c:2e:66:86:55:48:
f9:87:b4:ba:ca:47:f6:7f:62:90:29:96:27:86:87:7d:cc:bd:
6d:37:03:c7:df:61:cf:eb:b3:2c:e3:63:7b:ee:bc:e8:4f:b4:
db:17:e7:a3:c6:27:46:a3:db:aa:f7:b5:50:a5:fc:af:b6:0a:
e7:28:9c:3d:01:54:be:6c:cb:b8:62:77:fe:81:74:2d:e5:fb:
4f:29:de:f6:3f:b9:6b:66:68:26:af:5d:95:78:e8:48:b0:92:
53:74:08:8d:e2:3e:a4:14:ef:94:be:6f:e4:85:0d:44:ee:c2:
3c:bd:d1:da:54:d8:0b:94:24:e2:4a:ce:7c:03:48:d2:a4:33:
16:29:4d:33:d0:85:76:c3:a6:23:86:84:d9:44:a9:ff:46:9e:
f7:3f:b3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:20 2025 by rpki-client