Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
File: _5zoM1_DdnayDsFlXFPWfbyG6LM.mft (raw, json)
Hash identifier: PLRTnOmO+Nq6Eb/SPAi6C0pnYxpBQjvSsZaWFIn6ooM=
Subject key identifier: 37:23:90:01:4A:B0:69:5B:E1:79:AB:D1:E0:CD:3F:01:1A:E4:F1:95
Authority key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
Certificate issuer: /CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Certificate serial: 01984AAF45E786A212D3A88CD60439562CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
Manifest number: 0E7C
Signing time: Sun 27 Jul 2025 07:00:57 +0000
Manifest this update: Sun 27 Jul 2025 07:00:57 +0000
Manifest next update: Mon 28 Jul 2025 07:00:57 +0000
Files and hashes: 1: _5zoM1_DdnayDsFlXFPWfbyG6LM.crl (hash: B7vUsI371ybAVtiyToOtfOWyUgbpNJEtElDEFEiK7TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:45:e7:86:a2:12:d3:a8:8c:d6:04:39:56:2c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Validity
Not Before: Jul 27 07:00:57 2025 GMT
Not After : Jul 28 07:00:57 2025 GMT
Subject: CN=372390014ab0695be179abd1e0cd3f011ae4f195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:68:bc:85:89:9b:14:eb:06:6a:a0:86:4a:
49:92:47:07:c5:d5:83:cb:f1:89:7a:00:42:ca:21:
4e:3c:bc:c6:d4:c9:bc:38:f9:30:ba:10:b8:22:50:
f9:c5:5d:be:51:ec:db:5c:a6:64:4a:25:c3:00:69:
98:5b:49:38:dc:3d:0a:38:3c:c8:78:19:ae:a1:27:
1a:0a:c8:75:cb:f3:5c:43:ef:4b:47:fd:c7:42:2c:
c1:3f:0e:93:19:a3:35:0b:fa:e0:1e:62:49:8b:04:
f9:37:b7:8e:e2:94:49:59:13:64:9d:a1:0e:a3:d7:
06:ad:37:23:38:bb:44:d7:9f:d3:71:84:20:f2:e3:
33:b6:53:94:64:13:08:6a:67:eb:5c:d4:fc:85:34:
ea:04:c6:0a:ca:c3:c8:f3:f9:0b:8c:74:59:02:eb:
1c:17:9e:1e:74:48:eb:f0:51:2f:74:06:39:17:63:
10:90:7d:17:0a:c6:12:a5:b6:f9:3f:56:9b:82:bb:
87:d7:a0:ce:a4:cd:7a:81:ea:62:04:34:37:09:f6:
0b:b6:52:8f:10:9a:8a:06:e7:44:e3:3e:21:cc:41:
c4:8d:50:7a:d4:d9:36:87:97:5c:23:95:35:a3:77:
3f:13:a0:48:91:10:ed:17:ea:52:04:06:ac:aa:a1:
4f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:23:90:01:4A:B0:69:5B:E1:79:AB:D1:E0:CD:3F:01:1A:E4:F1:95
X509v3 Authority Key Identifier:
keyid:FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:04:0b:42:fa:dc:43:e6:74:bb:76:10:20:ab:53:00:88:82:
7c:82:83:ef:61:9a:27:90:75:f5:fb:f2:76:c2:3b:06:b6:05:
13:30:02:08:8d:99:25:f1:94:d3:e9:62:eb:75:ae:45:f3:48:
be:46:4e:16:6c:5c:e3:3a:96:01:92:e6:ef:99:93:de:7a:40:
c4:7d:f5:79:6c:f9:4b:21:30:9f:4c:c2:09:e1:76:15:2d:92:
f6:d5:9c:21:8c:60:3d:41:b3:0a:29:3f:ce:f8:5a:7b:3f:e5:
d2:e8:0a:c8:ab:63:05:07:51:bb:47:af:19:a4:de:cb:84:7d:
f3:27:a9:a3:ee:6d:de:f5:dc:46:45:97:b8:13:df:0d:a8:42:
6e:0c:2e:3e:da:7f:98:5e:b9:4a:f0:13:e5:28:88:34:0e:e6:
d7:f4:44:31:79:f1:b1:6f:4c:f8:3e:35:93:ac:b5:21:21:fd:
9a:58:e5:48:cb:98:ac:93:82:3c:0e:3f:2e:ac:9b:75:fd:92:
57:25:17:80:33:82:d4:d2:72:80:af:d5:61:4d:83:ae:90:1b:
6d:b8:20:21:1c:7a:6c:93:d4:a8:f1:9d:ea:55:ff:1e:ea:a6:
aa:f8:81:03:24:7e:4c:79:9f:35:46:56:4a:e4:67:be:b1:fd:
14:d8:7f:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKr0XnhqIS06iM1gQ5Viy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOWNlODMzNWZjMzc2NzZiMjBlYzE2NTVjNTNkNjdkYmM4
NmU4YjMwHhcNMjUwNzI3MDcwMDU3WhcNMjUwNzI4MDcwMDU3WjAzMTEwLwYDVQQD
EygzNzIzOTAwMTRhYjA2OTViZTE3OWFiZDFlMGNkM2YwMTFhZTRmMTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw5ovIWJmxTrBmqghkpJkkcHxdWD
y/GJegBCyiFOPLzG1Mm8OPkwuhC4IlD5xV2+UezbXKZkSiXDAGmYW0k43D0KODzI
eBmuoScaCsh1y/NcQ+9LR/3HQizBPw6TGaM1C/rgHmJJiwT5N7eO4pRJWRNknaEO
o9cGrTcjOLtE15/TcYQg8uMztlOUZBMIamfrXNT8hTTqBMYKysPI8/kLjHRZAusc
F54edEjr8FEvdAY5F2MQkH0XCsYSpbb5P1abgruH16DOpM16gepiBDQ3CfYLtlKP
EJqKBudE4z4hzEHEjVB61Nk2h5dcI5U1o3c/E6BIkRDtF+pSBAasqqFPcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcjkAFKsGlb4Xmr0eDNPwEa5PGVMB8GA1UdIwQY
MBaAFP+c6DNfw3Z2sg7BZVxT1n28huizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzV6b00xX0RkbmF5RHNGbFhGUFdmYnlHNkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9kNzM1NDEtM2I0ZC00NGE5LTgyYWMt
MjllNTNlZGE2ZTFjLzEvXzV6b00xX0RkbmF5RHNGbFhGUFdmYnlHNkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9kNzM1NDEtM2I0ZC00NGE5LTgyYWMtMjllNTNlZGE2ZTFj
LzEvXzV6b00xX0RkbmF5RHNGbFhGUFdmYnlHNkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwQLQvrc
Q+Z0u3YQIKtTAIiCfIKD72GaJ5B19fvydsI7BrYFEzACCI2ZJfGU0+li63WuRfNI
vkZOFmxc4zqWAZLm75mT3npAxH31eWz5SyEwn0zCCeF2FS2S9tWcIYxgPUGzCik/
zvhaez/l0ugKyKtjBQdRu0evGaTey4R98yepo+5t3vXcRkWXuBPfDahCbgwuPtp/
mF65SvAT5SiINA7m1/REMXnxsW9M+D41k6y1ISH9mljlSMuYrJOCPA4/Lqybdf2S
VyUXgDOC1NJygK/VYU2DrpAbbbggIRx6bJPUqPGd6lX/HuqmqviBAyR+THmfNUZW
SuRnvrH9FNh/ig==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:56:44 2025 by rpki-client