Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File: 5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier: eso9++nxXIjxhjxxKaW7Wp638IRAu3ZhK0Iu0iGTBok=
Subject key identifier: D8:D9:24:B3:61:7D:25:F6:8E:A2:D1:E1:04:53:F7:B5:EE:B7:DD:48
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer: /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial: 0199FBEBE4CA3D8DEADD90D6CAEAAE7F4884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number: 0A29
Signing time: Sun 19 Oct 2025 10:02:44 +0000
Manifest this update: Sun 19 Oct 2025 10:02:44 +0000
Manifest next update: Mon 20 Oct 2025 10:02:44 +0000
Files and hashes: 1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: dtzWB721CEQiMmFi1AzCwP4JePxz25VSlBpdIzKpGzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e4:ca:3d:8d:ea:dd:90:d6:ca:ea:ae:7f:48:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Validity
Not Before: Oct 19 10:02:44 2025 GMT
Not After : Oct 20 10:02:44 2025 GMT
Subject: CN=d8d924b3617d25f68ea2d1e10453f7b5eeb7dd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:f4:45:b1:3b:63:ee:62:b7:70:df:07:ed:
79:8d:81:14:41:06:48:35:97:a4:e6:47:d8:58:22:
65:00:68:46:37:26:62:91:97:f2:88:8c:6d:a3:7a:
69:ab:9f:d4:85:52:c3:95:25:90:87:85:17:48:4c:
3f:7b:ba:6c:66:c5:6c:43:fe:f4:29:ce:0e:fd:8d:
79:c2:fc:f3:bf:f5:9e:25:84:39:74:ba:15:c2:57:
2d:62:ad:cd:8d:d3:ee:17:bb:9a:38:90:7d:93:6d:
89:c8:e6:44:cb:3a:8a:71:12:2d:21:32:3e:da:2f:
99:9d:b0:62:6c:ed:10:69:fc:f0:1f:d9:ef:1e:c3:
cf:6b:4c:77:49:3b:af:30:ab:08:7f:08:e5:62:2f:
e6:1d:85:ab:1f:df:c2:bc:da:77:b5:f3:48:e2:83:
36:2c:e1:42:ec:34:1c:a5:52:92:0d:5e:9d:63:1f:
6e:d4:ee:7f:44:01:3f:f1:93:ee:19:72:eb:bd:ab:
8d:2d:2b:f0:e7:35:b2:a8:4b:3b:19:95:a7:8d:ff:
a8:fe:54:cf:78:cc:e3:54:10:bf:6a:a4:93:09:d9:
d3:81:bd:03:ce:a7:cf:86:c4:64:d1:9b:af:a4:3e:
d9:94:20:1f:a1:4f:93:9f:f8:96:f0:5c:ca:7c:a3:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D9:24:B3:61:7D:25:F6:8E:A2:D1:E1:04:53:F7:B5:EE:B7:DD:48
X509v3 Authority Key Identifier:
keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:17:5d:a8:0e:0c:ee:43:72:1e:72:4d:f8:c3:10:02:ba:9f:
1b:f9:dc:12:b9:22:d3:5d:e0:72:c3:bf:7b:a0:a5:56:47:68:
a7:ab:ed:77:d0:c6:ba:97:24:f3:0d:f9:c8:65:dd:60:8e:88:
76:9f:91:5e:17:a0:ab:89:b5:95:c5:26:90:ac:b1:c0:f7:d4:
1d:54:38:a5:4b:fc:f4:63:89:3e:22:c0:8d:ce:bf:8b:25:0f:
47:a0:ba:9b:85:da:2b:9e:55:40:ed:4b:2b:36:a0:b7:59:f3:
b6:80:e0:3c:b7:cc:48:a0:72:c5:09:61:49:5b:f1:92:1f:71:
b3:2b:30:a1:2c:a1:42:af:9c:50:1e:64:82:4e:f0:63:6a:b2:
32:f0:6b:9b:17:98:ed:5d:e1:46:88:6b:d1:98:b3:e5:7c:9d:
6b:b2:67:d3:27:35:13:b0:3c:70:70:cd:ee:32:60:3c:ee:7b:
41:16:14:5a:0f:1b:ed:fe:8d:5c:2a:f8:6d:81:f3:0e:cc:9c:
2e:a6:e2:be:f6:c4:d8:1b:7e:4f:43:69:74:21:15:aa:20:43:
76:9d:29:47:f6:3f:46:30:61:5e:f6:cb:64:0c:3a:05:15:d6:
00:da:1b:c8:80:c0:af:ba:3d:5f:7a:3b:cf:6c:66:e8:ab:04:
cd:7e:c1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:25:59 2025 by rpki-client