Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
File: IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft (raw, json)
Hash identifier: 4GCp0UfSZrFRI3WJLzTlEUrSfwvzqhgi6zt7WyHuzDQ=
Subject key identifier: 5E:70:50:FB:C4:75:08:40:BE:4B:95:56:31:D3:0E:BB:CA:EF:BE:54
Authority key identifier: 21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C
Certificate issuer: /CN=219b7c145e0acf8148418d54247dfddffc19fa4c
Certificate serial: 0199FC219082D80C882A5317CB5CF153D446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
Manifest number: 0295
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl (hash: Su/DfC1RyvKK5sSEYafzNteRQnIhPd9XTLNRYfdX1kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:90:82:d8:0c:88:2a:53:17:cb:5c:f1:53:d4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219b7c145e0acf8148418d54247dfddffc19fa4c
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=5e7050fbc4750840be4b955631d30ebbcaefbe54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:bb:6a:79:a8:3d:6a:69:7a:0c:44:ac:b6:
21:30:93:a6:56:38:b3:cb:99:88:3c:0b:78:c5:63:
15:7d:7f:05:b0:96:d8:42:24:ea:af:b0:8d:f2:ef:
59:b4:2c:ea:7f:f2:1d:3f:a1:f8:6d:9d:23:d3:c4:
da:16:5a:00:79:7a:4e:67:ea:df:67:29:dd:c8:b6:
be:af:ea:98:a3:a1:9b:f3:ef:61:62:44:d7:4c:d9:
55:e6:a5:ea:9a:fd:42:3a:f4:bb:11:eb:f9:1a:c3:
ec:a2:aa:85:53:27:2a:4d:07:7c:b6:0a:37:ef:5f:
30:ec:5d:2e:7c:7d:42:d1:c2:34:b8:98:5c:b8:7f:
ea:1b:42:c3:7f:56:35:dc:70:c5:0a:87:03:69:f4:
8d:89:40:2d:65:21:cb:c5:7f:4f:1a:ff:43:11:6a:
2b:7c:49:15:1f:ba:84:a3:63:5b:7a:c7:5d:7d:18:
00:89:56:01:c4:0d:e3:9b:a1:35:b3:c3:32:c0:68:
32:61:aa:59:4a:bb:a5:84:bd:de:80:60:50:43:b6:
ac:0e:ef:8b:81:17:6c:78:0b:78:07:07:c3:db:50:
5b:b0:e3:e5:3d:0e:9c:52:d8:00:41:d1:a8:5d:0a:
e4:8d:d0:73:92:04:27:04:d6:f2:36:ab:f9:17:95:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:70:50:FB:C4:75:08:40:BE:4B:95:56:31:D3:0E:BB:CA:EF:BE:54
X509v3 Authority Key Identifier:
keyid:21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8d:99:3a:f8:f4:7c:63:04:2f:f3:37:92:e1:fd:bd:df:bf:
b0:a5:02:55:3e:0d:d2:96:02:aa:2e:4e:bb:03:40:7b:94:ad:
01:f1:8a:4c:6d:1f:df:0e:92:c7:97:c1:de:6b:c1:cc:72:0c:
67:98:fe:72:61:47:b2:84:32:3a:1e:49:de:d5:68:65:64:56:
56:ea:f2:b2:b2:4c:fa:ed:a2:dc:3f:2d:b7:57:cc:ce:b1:ee:
c5:57:97:7a:9f:12:29:06:76:86:13:19:1b:dc:7d:f9:6a:f7:
49:fc:59:f2:80:88:bf:b9:c7:79:08:2a:c0:90:42:f4:f0:f4:
d7:d4:4a:01:6e:a5:26:f5:46:f8:b7:1e:42:9d:d9:6e:4e:cb:
2c:b1:fa:a4:0c:f7:a9:3e:2a:ea:ac:64:66:31:f2:cb:17:b5:
1c:e5:76:a0:4a:b4:8d:95:dd:59:c9:11:b6:34:c3:b9:a8:be:
9c:19:9a:c2:70:7c:e4:c4:f3:25:93:12:06:19:7d:5f:42:eb:
25:e2:42:dd:fe:1f:b7:65:ce:9f:da:fc:01:25:e7:b7:24:00:
6a:84:ce:b5:bc:ce:4d:0c:bb:77:f5:c2:5b:82:5f:4a:5f:ee:
c4:49:1e:59:cc:72:93:f5:6e:04:16:23:7f:21:a2:03:63:39:
64:23:3c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:09 2025 by rpki-client