Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
File: 5zcPsJ5SI60eRI9MDxYv6plae1Y.mft (raw, json)
Hash identifier: Vux7hJ2R3MuJ8mjZPEkpSTTMr9mc5mkPwIZvDdJfrEQ=
Subject key identifier: BD:45:65:49:91:E6:03:69:05:3C:42:36:FC:A3:8B:84:A0:82:12:68
Authority key identifier: E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
Certificate issuer: /CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Certificate serial: 01984B5538ACE5B38176965893B4A946F6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
Manifest number: 1421
Signing time: Sun 27 Jul 2025 10:02:12 +0000
Manifest this update: Sun 27 Jul 2025 10:02:12 +0000
Manifest next update: Mon 28 Jul 2025 10:02:12 +0000
Files and hashes: 1: 5zcPsJ5SI60eRI9MDxYv6plae1Y.crl (hash: iHcJsTWQw9OjkUufWWB4JyO1YO7DcKhGZaK/xMftPN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:38:ac:e5:b3:81:76:96:58:93:b4:a9:46:f6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Validity
Not Before: Jul 27 10:02:12 2025 GMT
Not After : Jul 28 10:02:12 2025 GMT
Subject: CN=bd45654991e60369053c4236fca38b84a0821268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:b4:0d:64:4a:c1:60:75:7e:16:a7:d1:fd:
8a:52:5c:19:93:75:f8:14:17:b1:12:3e:fb:21:71:
8f:5c:5d:0a:3b:ea:94:86:78:51:56:37:f7:aa:ae:
e8:f5:63:24:6b:d6:a6:22:fc:90:99:7b:be:a8:0b:
a4:d6:d8:e5:4c:be:a4:c4:7a:20:0a:ea:ae:91:c0:
9c:c1:12:4c:bb:02:97:90:95:a7:0b:4c:e7:49:17:
5a:74:b6:77:d7:f7:3c:49:26:bc:e3:6e:03:a0:30:
ae:d7:a1:d9:66:7b:82:83:f9:65:ca:71:39:19:ca:
a3:be:c4:fd:61:60:a6:68:16:bb:cb:db:a0:72:f6:
dd:da:4a:5b:56:6d:f2:bf:4c:f6:08:ad:98:bc:9c:
b6:3a:02:0a:ae:ac:49:2e:fd:0b:ac:1b:41:56:c7:
5b:63:e0:b2:ff:da:dc:9a:44:a2:99:39:9b:74:39:
e4:9f:a8:76:f3:93:57:bb:31:37:cb:4c:c7:e7:cc:
f5:5b:33:58:d7:39:0a:7a:5e:31:c0:63:f5:6c:2c:
54:36:56:42:4e:d2:11:48:64:fb:27:b8:db:1a:06:
35:26:e5:f8:aa:4e:a7:86:9c:01:31:52:ce:0b:16:
13:c7:c3:bb:7a:f2:6f:1f:23:6e:48:7d:dc:c3:5f:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:45:65:49:91:E6:03:69:05:3C:42:36:FC:A3:8B:84:A0:82:12:68
X509v3 Authority Key Identifier:
keyid:E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3b:e0:16:e4:18:a8:1d:4a:9b:ac:7f:f5:f6:a3:b1:e3:a5:
80:86:9d:4d:8e:a8:0d:1e:47:2b:5b:5b:61:b6:91:03:43:4f:
30:14:7e:a2:c0:e8:6c:af:e5:ea:60:5a:9a:eb:1c:ae:3a:14:
96:b4:64:80:8a:6c:57:a2:f0:20:58:cf:2e:57:52:7e:97:e4:
26:6e:30:77:a0:2b:f6:59:be:09:45:31:fd:7b:81:5d:94:ba:
f3:b6:21:bd:63:fa:51:28:39:6e:7c:f8:d3:46:15:f5:38:c4:
98:52:11:e7:43:ab:b1:fa:89:dd:05:56:1e:8b:b7:9d:fd:97:
86:e7:9f:07:64:a9:da:93:ad:cf:57:7c:77:6e:42:aa:2f:2e:
dd:47:f8:9b:98:ea:10:76:05:fd:ed:9d:bd:65:78:27:35:bc:
6c:42:c9:d2:7a:60:d8:66:c4:27:5d:3e:2a:21:94:1d:f7:6b:
19:46:98:f4:e4:79:b2:6f:71:e2:85:9f:ff:14:b4:02:1b:78:
9e:01:b4:92:08:24:28:82:f3:e1:ce:4d:1a:4d:d8:5a:16:8f:
07:18:f5:f2:22:7d:97:df:2c:8f:4a:6f:b8:83:07:42:bc:d9:
a4:db:a9:b5:db:2e:b1:e5:2d:89:f6:3c:c1:b0:8e:d6:81:00:
55:c9:e2:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVTis5bOBdpZYk7SpRvb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MzcwZmIwOWU1MjIzYWQxZTQ0OGY0YzBmMTYyZmVhOTk1
YTdiNTYwHhcNMjUwNzI3MTAwMjEyWhcNMjUwNzI4MTAwMjEyWjAzMTEwLwYDVQQD
EyhiZDQ1NjU0OTkxZTYwMzY5MDUzYzQyMzZmY2EzOGI4NGEwODIxMjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIm0DWRKwWB1fhan0f2KUlwZk3X4
FBexEj77IXGPXF0KO+qUhnhRVjf3qq7o9WMka9amIvyQmXu+qAuk1tjlTL6kxHog
CuqukcCcwRJMuwKXkJWnC0znSRdadLZ31/c8SSa8424DoDCu16HZZnuCg/llynE5
GcqjvsT9YWCmaBa7y9ugcvbd2kpbVm3yv0z2CK2YvJy2OgIKrqxJLv0LrBtBVsdb
Y+Cy/9rcmkSimTmbdDnkn6h285NXuzE3y0zH58z1WzNY1zkKel4xwGP1bCxUNlZC
TtIRSGT7J7jbGgY1JuX4qk6nhpwBMVLOCxYTx8O7evJvHyNuSH3cw1+uywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1FZUmR5gNpBTxCNvyji4SgghJoMB8GA1UdIwQY
MBaAFOc3D7CeUiOtHkSPTA8WL+qZWntWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpjUHNKNVNJNjBlUkk5TUR4WXY2cGxhZTFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84ZjIyOTMtN2RiYS00MzdiLWFmODUt
OTdlMzU1ZTUxZWYzLzEvNXpjUHNKNVNJNjBlUkk5TUR4WXY2cGxhZTFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84ZjIyOTMtN2RiYS00MzdiLWFmODUtOTdlMzU1ZTUxZWYz
LzEvNXpjUHNKNVNJNjBlUkk5TUR4WXY2cGxhZTFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATvgFuQY
qB1Km6x/9fajseOlgIadTY6oDR5HK1tbYbaRA0NPMBR+osDobK/l6mBamuscrjoU
lrRkgIpsV6LwIFjPLldSfpfkJm4wd6Ar9lm+CUUx/XuBXZS687YhvWP6USg5bnz4
00YV9TjEmFIR50OrsfqJ3QVWHou3nf2XhuefB2Sp2pOtz1d8d25Cqi8u3Uf4m5jq
EHYF/e2dvWV4JzW8bELJ0npg2GbEJ10+KiGUHfdrGUaY9OR5sm9x4oWf/xS0Aht4
ngG0kggkKILz4c5NGk3YWhaPBxj18iJ9l98sj0pvuIMHQrzZpNuptdsuseUtifY8
wbCO1oEAVcni4Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:14:12 2025 by rpki-client