Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
File: 5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json)
Hash identifier: 1pXzDNSuCskGayGb38PWnSTrrf8veX8OpTCBmt7z1UI=
Subject key identifier: F5:60:BC:6D:FD:49:02:18:56:D3:57:C2:2D:C2:13:AC:44:16:CA:87
Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
Certificate issuer: /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Certificate serial: 019A71B8B8243CEA4A97575CB976EDF8771E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
Manifest number: 1046
Signing time: Tue 11 Nov 2025 07:02:02 +0000
Manifest this update: Tue 11 Nov 2025 07:02:02 +0000
Manifest next update: Wed 12 Nov 2025 07:02:02 +0000
Files and hashes: 1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: IMFjYXkHZ9/4r6F6+t9j1Dr91KaphbUk00P6z8rUYyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b8:24:3c:ea:4a:97:57:5c:b9:76:ed:f8:77:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Validity
Not Before: Nov 11 07:02:02 2025 GMT
Not After : Nov 12 07:02:02 2025 GMT
Subject: CN=f560bc6dfd49021856d357c22dc213ac4416ca87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:11:c2:b8:a4:22:be:4d:05:d2:60:f3:b6:
9a:3b:63:4b:43:65:ba:a5:42:41:05:0b:b4:7c:d0:
fd:90:d8:c2:45:44:d9:aa:3b:f4:93:14:07:15:4f:
81:16:bc:4b:ca:c7:dc:61:b1:e4:fb:67:59:98:3f:
28:34:68:a1:af:8b:28:f3:7c:2d:e8:0b:18:2f:cc:
46:db:73:ba:72:6a:ea:94:5b:8c:fe:3a:ba:c1:57:
44:9d:90:f7:d7:92:1e:82:80:98:c1:eb:e7:71:c4:
4d:77:ef:9c:6d:92:b2:6a:b5:75:94:20:5a:ef:25:
f3:36:27:dc:fe:e4:75:be:37:a5:b7:88:11:2e:86:
ea:54:82:ed:df:1b:d9:ac:49:c5:87:3b:56:b9:6e:
2b:69:6f:88:5b:7e:37:32:30:12:74:81:d1:1b:55:
af:2b:2c:76:70:49:53:1f:a3:c2:12:97:96:da:bc:
00:46:6d:4d:93:03:86:f0:2f:b6:e5:e4:aa:7a:c7:
7e:35:dc:7c:48:fe:03:f1:35:7b:03:e4:c3:1d:2f:
eb:01:e1:04:7d:af:e0:3c:18:f8:f2:1c:7a:97:8e:
4e:87:56:82:3c:ac:11:5d:72:50:d4:a7:01:e1:8c:
7b:e6:7c:6d:53:d2:89:1a:96:95:68:e0:bb:f8:94:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:60:BC:6D:FD:49:02:18:56:D3:57:C2:2D:C2:13:AC:44:16:CA:87
X509v3 Authority Key Identifier:
keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:59:80:55:21:95:97:0a:5c:87:35:69:98:83:75:17:54:f5:
35:43:b7:ae:89:90:39:08:c0:3e:81:90:b2:c1:d1:91:7a:29:
a3:7d:65:72:6a:de:46:ba:37:5f:93:24:58:02:8d:d3:c5:ee:
a9:10:23:d5:6d:07:fb:12:9a:f7:4b:17:2b:ff:35:ae:0a:7c:
01:ac:22:cb:3b:32:41:b9:1c:c5:28:50:a0:f8:35:2b:3e:7c:
05:f8:f4:79:b0:f6:dc:44:1d:84:73:f0:23:bc:81:8c:e3:94:
8a:2e:20:06:1c:6a:56:61:54:51:90:e6:67:0d:1d:5a:dc:58:
75:5c:b4:ce:5f:05:ca:eb:10:4f:4b:b1:58:fc:34:89:0d:98:
e3:1d:1d:02:7f:73:4c:3b:fc:ef:c9:9d:15:9c:36:15:8f:a4:
7d:e0:9e:16:f2:dd:8a:a7:64:c2:c6:31:f0:7b:74:e1:3d:da:
e2:08:05:e7:39:2d:41:9f:6a:e0:6b:4c:7b:34:99:ce:99:12:
3c:85:d4:03:90:56:5b:1f:8c:8e:d6:9f:a2:49:c6:c4:fd:13:
d8:ec:db:4e:5b:e9:3e:f8:6b:9a:e5:f1:db:4f:c0:38:0f:e7:
86:34:3e:84:7a:b2:df:5e:56:f9:f4:1c:b0:da:ba:56:b4:fb:
e4:1a:9a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:01 2025 by rpki-client