Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
File: _5zoM1_DdnayDsFlXFPWfbyG6LM.mft (raw, json)
Hash identifier: GSWLn6i9s8WVN77puyBlXS3Dp0lVxnsSsgQm1qGvfcg=
Subject key identifier: 15:63:64:94:09:FE:45:1E:EE:5C:1D:48:02:D2:C6:EE:13:30:C4:86
Authority key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
Certificate issuer: /CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Certificate serial: 019A711343901E4E829E4A49D7890BA20C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
Manifest number: 0F99
Signing time: Tue 11 Nov 2025 04:01:19 +0000
Manifest this update: Tue 11 Nov 2025 04:01:19 +0000
Manifest next update: Wed 12 Nov 2025 04:01:19 +0000
Files and hashes: 1: _5zoM1_DdnayDsFlXFPWfbyG6LM.crl (hash: 2gziWUNTyVCVz1wsJPfiYzW2nsH1BJizte+DTFkZn3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:43:90:1e:4e:82:9e:4a:49:d7:89:0b:a2:0c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Validity
Not Before: Nov 11 04:01:19 2025 GMT
Not After : Nov 12 04:01:19 2025 GMT
Subject: CN=1563649409fe451eee5c1d4802d2c6ee1330c486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:f6:d5:45:ca:2f:68:7b:87:5d:47:7d:85:
4f:40:0f:88:61:da:1b:21:e3:10:33:7e:40:35:3c:
e0:ea:c8:6d:4f:db:e6:d5:37:fa:4d:64:a5:a7:ed:
7c:4e:db:17:ac:84:e9:2f:66:01:28:41:b7:f1:60:
b5:12:81:82:fe:a5:d1:3b:cd:8b:63:01:75:67:96:
55:bc:39:f8:67:d6:a6:0d:60:82:23:f1:4b:8a:0e:
99:12:c1:f9:35:05:f7:1d:e0:d0:45:31:11:38:5d:
e7:98:d5:57:94:da:81:88:3f:89:0c:ae:b8:29:d9:
24:1b:5d:a8:be:6b:f0:83:de:d8:e4:d0:a9:ca:5f:
40:a7:73:91:59:3b:dd:dc:07:99:81:5a:f8:a3:57:
9e:d4:db:6f:5a:2a:1c:d0:06:a0:48:4f:77:1f:dd:
40:a8:c2:59:9a:0c:33:14:8f:87:74:96:6d:83:3f:
71:24:da:49:6e:98:1e:ed:44:ed:a0:20:df:47:13:
cf:55:2a:8e:c4:f7:13:a6:65:d7:bb:90:78:2b:06:
97:30:5e:3c:88:a2:bc:37:90:fb:82:08:fd:1c:ac:
77:6b:40:4e:8e:3c:d4:fc:1a:63:5a:9a:2d:9c:f9:
0d:5a:03:7c:9d:7a:45:ce:90:e1:a3:ba:61:59:73:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:63:64:94:09:FE:45:1E:EE:5C:1D:48:02:D2:C6:EE:13:30:C4:86
X509v3 Authority Key Identifier:
keyid:FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:36:2d:d0:89:60:27:31:b2:a7:84:6f:cd:dd:06:18:c4:f6:
8e:95:67:f6:95:87:78:73:46:c0:d3:31:a1:2f:d3:33:cd:a8:
b9:a3:16:c7:68:d8:2b:e8:70:b5:d7:53:5a:a8:50:a8:47:51:
c6:21:5a:c9:27:7e:43:56:58:d9:63:6a:1a:f7:46:d3:ea:6a:
3c:4b:26:0e:5d:a4:f8:77:c8:c6:cb:64:18:5c:fd:4a:3e:0b:
45:2e:fd:cd:ff:6f:68:0a:7b:0f:3f:9b:00:5b:2a:91:fb:77:
ff:b6:df:d7:16:13:84:5e:ea:e0:f9:67:2e:fe:d4:3d:fe:d0:
24:65:c3:19:b9:2a:df:f5:c6:8a:3f:a3:8e:fd:c5:0a:1b:be:
c2:26:29:a3:8f:21:ca:62:21:d7:6b:29:3b:f1:93:9f:9d:bb:
e8:86:bc:65:d6:63:a0:1b:1d:29:c9:57:8e:7c:11:ba:fd:4a:
24:b0:f8:2e:51:30:72:e4:75:8a:33:96:a4:49:04:80:6c:22:
2a:9c:61:48:cd:0b:1c:96:d5:e6:e5:a4:16:9e:fa:54:f0:8a:
74:60:8c:bd:08:f1:1b:e0:d0:7f:36:c5:9b:39:da:86:e0:48:
bf:ba:18:55:b9:b6:9b:94:65:e5:61:ff:d4:42:30:5f:3e:a9:
fa:13:1d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:50 2025 by rpki-client