Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier: IrkL0ZIZTbBF4DFk1gdiHLZ0KB8xeemijqFWK5Eb/co=
Subject key identifier: 15:16:BD:B3:40:61:75:78:BD:32:BD:90:ED:7E:AB:9C:57:F9:13:0A
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer: /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial: 019A7225A85045D8C3CA047ACC85E78C3ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number: 0CF9
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: 0pfYvQATrJYBwTz2P2eDMumqs44+can9XGOzH3UfCBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a8:50:45:d8:c3:ca:04:7a:cc:85:e7:8c:3e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=1516bdb340617578bd32bd90ed7eab9c57f9130a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:45:7b:a6:f4:c7:b1:2e:60:bd:79:60:4e:
81:1c:90:42:86:6e:c2:2e:22:eb:d5:4c:fe:cb:a3:
83:4b:f9:f6:3a:b0:bf:99:49:c4:44:9a:48:4d:43:
31:7e:07:0a:99:53:ea:ae:ad:5c:96:c9:a3:ac:b2:
69:df:6c:a2:62:35:d8:9e:d4:d6:cf:fd:96:a7:0c:
53:10:e5:4e:f6:47:6d:d7:5a:56:6d:54:43:c0:0a:
dd:92:16:30:ad:13:fc:ca:26:4b:51:ce:b8:88:09:
16:fb:98:8f:e8:a9:92:0b:4c:77:41:b7:e0:0b:a9:
73:b1:c3:d7:60:81:a8:e8:6f:a7:61:25:61:49:31:
95:36:74:c3:bd:62:ce:8d:d3:02:e4:98:3b:ab:e9:
09:80:dd:ca:94:06:35:ef:49:cf:89:24:03:59:5b:
af:f1:dd:b0:6d:eb:66:e8:35:e8:06:f3:9d:09:e9:
57:fd:4d:a4:65:2b:e5:3d:90:15:3c:08:bb:f3:07:
3d:fd:22:00:33:8c:62:92:b1:62:34:fc:31:6f:6a:
31:9e:ac:a2:03:39:b7:98:a0:67:a2:45:39:0a:a3:
91:29:08:ea:bb:21:38:8a:cd:68:f6:21:53:67:3b:
fa:25:31:25:9e:c5:ef:51:a0:2b:cd:ea:3a:51:1a:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:16:BD:B3:40:61:75:78:BD:32:BD:90:ED:7E:AB:9C:57:F9:13:0A
X509v3 Authority Key Identifier:
keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e3:90:8b:13:98:8a:9a:2c:5d:ca:53:60:81:2d:bd:5e:db:
b4:2d:1a:c7:ac:aa:9d:0b:86:6e:4c:88:ef:b8:09:f6:3a:e0:
bd:f2:3d:63:66:42:99:7c:ef:b9:0f:14:b1:88:f0:3a:14:8a:
55:07:2b:2f:63:a5:d7:d0:0b:26:7d:a0:a2:ff:bb:dc:6f:17:
c3:aa:eb:54:77:21:c3:e7:b4:14:d9:e7:29:3f:3a:67:1f:9e:
a4:b6:6b:84:e5:7c:86:44:a5:0d:3a:a4:c8:ec:38:10:5a:c0:
c8:c8:1d:b9:e7:0a:5a:92:46:43:be:3e:c7:24:86:99:51:b3:
c7:14:14:1e:f9:e4:a2:2d:b0:bf:0b:10:0b:e6:7e:13:f8:17:
49:3f:bd:aa:44:6e:f8:b1:96:d7:63:b0:ae:aa:f6:6b:ab:36:
ce:53:e0:d7:1b:6a:14:22:8a:7a:8c:35:98:04:47:05:21:e8:
4c:8a:d1:e4:65:af:13:0d:bc:59:51:ee:9a:b5:12:92:49:69:
06:03:46:85:14:2c:b0:3b:64:de:34:e9:7d:22:99:69:42:bf:
42:d3:97:40:b8:19:99:c3:70:62:af:a3:77:8e:a9:66:cf:a8:
71:e3:69:fe:bf:6f:07:d5:4f:68:ec:46:03:de:8b:79:91:59:
19:ba:3e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:38 2025 by rpki-client