Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
File: 5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json)
Hash identifier: CMJ1Mk2vg6MPEw8AvQLNZvCG35lfr4CssxpQ9UFqFzo=
Subject key identifier: 59:E7:36:F2:F1:B9:54:EF:8D:BC:13:30:7B:AB:73:43:A0:05:41:B5
Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
Certificate issuer: /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Certificate serial: 019921B269D56C5BB5E2CC61907F72E7D9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
Manifest number: 0F98
Signing time: Sun 07 Sep 2025 01:02:44 +0000
Manifest this update: Sun 07 Sep 2025 01:02:44 +0000
Manifest next update: Mon 08 Sep 2025 01:02:44 +0000
Files and hashes: 1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: IyGhBVno50LeuEALlkZGkDxOnPTHZYie4/vGU7pkYBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:69:d5:6c:5b:b5:e2:cc:61:90:7f:72:e7:d9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Validity
Not Before: Sep 7 01:02:44 2025 GMT
Not After : Sep 8 01:02:44 2025 GMT
Subject: CN=59e736f2f1b954ef8dbc13307bab7343a00541b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ff:73:1a:c7:00:e9:5c:82:b0:14:49:d9:be:
a3:f7:17:19:bb:c5:65:ad:f0:cd:69:c3:bb:ef:50:
69:c1:8f:4c:d2:bc:1e:c8:0c:ae:80:f5:95:33:0b:
88:7b:ef:3e:14:f5:50:9d:f0:8a:a7:e3:8d:49:8d:
de:58:cf:2c:f4:2b:d4:f6:c0:e4:a3:16:18:ab:f5:
d6:d9:e1:a4:b3:55:5f:00:2b:cf:75:04:e5:be:a6:
7c:6a:68:53:73:71:97:6c:16:21:4a:ea:84:1d:4a:
0d:83:83:b5:6d:d0:88:6e:f7:f8:8d:bd:78:d7:a4:
e0:7a:9a:99:76:ce:8c:46:25:37:4d:3a:74:c9:c0:
b8:cf:c4:18:fd:18:ad:20:eb:0e:20:57:73:2b:e2:
fc:e7:93:4d:ea:ab:c3:16:98:4a:45:39:4a:99:2e:
89:b5:0e:c9:0f:e9:45:3b:fb:e2:2d:32:0f:96:79:
18:c2:ec:55:6f:d9:e8:f3:e7:18:22:14:30:dd:6b:
95:07:5b:0c:a9:db:f7:ef:61:0d:ae:66:bf:95:e3:
c0:e1:be:24:df:43:47:c2:7f:ab:31:f0:63:3e:15:
76:09:d8:e5:69:22:59:14:6c:26:0e:ca:84:be:62:
ba:96:a9:73:cd:8c:8a:dd:e0:b0:0b:8d:cc:f1:28:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E7:36:F2:F1:B9:54:EF:8D:BC:13:30:7B:AB:73:43:A0:05:41:B5
X509v3 Authority Key Identifier:
keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6c:af:58:bc:4b:2f:5f:a0:93:56:5b:d6:b5:d3:23:2e:2f:
d9:a9:7f:64:9b:ae:11:65:93:fa:83:af:13:2c:5a:39:09:2b:
80:82:6c:d7:95:9a:f3:f5:20:08:dc:9a:1b:ac:a7:6c:45:cb:
40:e0:15:85:be:26:c9:c7:05:0b:3b:ae:8d:42:3c:36:78:3d:
69:8c:f0:4f:84:1c:0b:e3:36:be:7a:54:8b:2e:fa:25:99:59:
a0:1c:0f:01:aa:7b:89:44:25:51:7c:3b:0d:b4:be:90:09:37:
a0:5a:3b:7c:37:9d:31:b4:28:60:c2:40:c5:b9:f1:b6:95:ff:
4b:da:02:3d:7f:5c:47:88:95:13:bb:c4:19:37:25:7d:c7:6f:
ef:be:c9:d7:05:39:ea:6f:04:a7:ae:28:18:f4:e8:7c:c6:46:
68:5e:92:21:86:7b:20:b4:82:b5:07:be:49:4a:b8:08:28:c5:
1f:2d:62:c1:30:c3:07:be:bb:74:77:19:6f:14:dc:75:50:8c:
18:97:0f:4e:b7:16:f2:9f:49:74:15:99:55:52:eb:d4:ed:48:
6e:35:15:66:3b:68:fb:db:ae:ee:32:cc:b5:90:3b:40:75:69:
04:20:d0:d6:0b:05:8b:1a:e2:fe:42:8b:77:a8:3e:55:98:0f:
1a:e7:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:48 2025 by rpki-client