Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
File: 5J_xmt1LshEp7ogjFL5zy3jM7bM.mft (raw, json)
Hash identifier: Ix9zKSaN5AHiyRwgaJ0K60Mw45U76EJP0plZNgTHNYo=
Subject key identifier: DE:BB:75:9C:F7:B3:C3:2A:3A:C2:14:CC:3B:2D:E7:83:54:F1:C1:4C
Authority key identifier: E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
Certificate issuer: /CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Certificate serial: 0199FCFDAED29FF68F42FF74F17E1C80E7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
Manifest number: 07D4
Signing time: Sun 19 Oct 2025 15:01:47 +0000
Manifest this update: Sun 19 Oct 2025 15:01:47 +0000
Manifest next update: Mon 20 Oct 2025 15:01:47 +0000
Files and hashes: 1: 5J_xmt1LshEp7ogjFL5zy3jM7bM.crl (hash: EfGbThinnbIHfYIX7u4lOrFRH4CCGrYCI0Ta7b4DEaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:ae:d2:9f:f6:8f:42:ff:74:f1:7e:1c:80:e7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Validity
Not Before: Oct 19 15:01:47 2025 GMT
Not After : Oct 20 15:01:47 2025 GMT
Subject: CN=debb759cf7b3c32a3ac214cc3b2de78354f1c14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:35:06:6c:52:0c:22:6b:e3:5d:3f:6b:2b:53:
8e:8d:99:e3:1b:35:3f:bd:22:28:5d:56:49:98:d1:
98:ac:6b:60:fc:fb:6a:b9:78:86:e3:5f:77:69:f4:
de:fb:5d:09:1a:af:36:b1:88:b0:74:c1:f6:b4:9b:
d2:08:f8:68:12:f8:68:c0:7e:1e:04:e2:99:ce:bf:
b6:58:58:bb:02:7c:f0:65:db:3f:18:d7:60:4d:48:
73:39:40:0d:4f:f1:2e:52:14:de:38:5f:15:6b:fc:
ae:70:df:74:56:5b:11:28:61:fa:b9:3e:8f:44:1a:
2d:48:0f:7b:78:a9:43:3d:de:75:6a:d1:ae:9a:da:
a6:5c:a9:46:a6:a2:a0:07:5c:48:88:08:3a:07:aa:
ca:07:7e:b3:0f:92:18:71:fb:55:c7:c3:03:98:4e:
80:0f:67:82:bc:bd:e4:da:85:4a:53:8a:ec:5b:b3:
47:15:c3:3e:fc:7e:b4:f2:05:d7:bb:92:c4:a6:a3:
9c:d0:f0:d4:f7:81:fa:6a:8e:9d:c3:4b:0f:3e:26:
98:3f:e1:da:0e:77:3c:8b:e3:7c:9a:c1:92:d0:83:
dc:6f:45:ff:e7:15:55:39:31:8e:f8:22:ea:f7:90:
08:7b:56:ca:98:47:52:d1:52:74:b7:b4:28:f1:63:
a9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BB:75:9C:F7:B3:C3:2A:3A:C2:14:CC:3B:2D:E7:83:54:F1:C1:4C
X509v3 Authority Key Identifier:
keyid:E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f9:88:cc:e3:a7:5e:6f:97:5b:86:19:3b:7d:9e:38:08:e7:
84:bd:9d:69:a5:07:a0:00:25:14:b9:cf:15:cd:a0:28:4d:d8:
54:40:6d:16:55:40:9e:19:f8:b2:ca:71:8f:46:7a:65:09:f7:
cc:7d:d0:d5:e5:b4:07:4b:75:46:d3:d3:58:ec:d0:62:60:c6:
3e:08:5d:66:d8:ab:ab:c2:54:e7:34:2b:d6:72:96:e8:2f:0d:
ab:4d:ad:10:0c:c7:84:71:0b:cb:8a:16:75:c9:5a:db:0d:0d:
00:ad:08:5e:c6:0f:a9:b6:5f:d6:95:8b:33:d3:27:8d:82:22:
06:f7:e6:69:55:ee:7f:ba:7b:55:39:d9:91:53:5d:f5:39:2e:
fa:78:56:b5:a7:7c:b6:31:26:92:52:f8:35:ce:57:06:73:1e:
5a:43:16:e0:26:99:68:e7:7c:74:81:38:ea:88:d4:0b:8b:e1:
d5:e2:32:36:78:5c:53:27:a9:d6:76:62:52:11:8d:4d:62:ee:
b3:a8:69:88:56:bf:ad:61:9e:35:71:0c:35:cd:fd:8f:dd:6f:
ad:c8:8d:db:ee:48:31:02:86:a0:19:58:04:31:67:80:06:c5:
27:3c:cf:57:7c:2f:9f:c7:91:c2:3d:c7:08:99:e4:10:95:29:
ae:69:d1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:38 2025 by rpki-client