Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
File: 5LDTQqkyMznAd8XGreEJO1pADyQ.mft (raw, json)
Hash identifier: VXnFPwDYe7YhzhcOSdgSL7czd53pemMSehUT4tW1HwA=
Subject key identifier: 10:67:5B:35:32:0A:81:9B:15:5D:C4:D4:42:F6:F6:9F:7F:2B:4E:94
Authority key identifier: E4:B0:D3:42:A9:32:33:39:C0:77:C5:C6:AD:E1:09:3B:5A:40:0F:24
Certificate issuer: /CN=e4b0d342a9323339c077c5c6ade1093b5a400f24
Certificate serial: 01992331627180A1DECB883736B1FF04FDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
Manifest number: 02D6
Signing time: Sun 07 Sep 2025 08:01:02 +0000
Manifest this update: Sun 07 Sep 2025 08:01:02 +0000
Manifest next update: Mon 08 Sep 2025 08:01:02 +0000
Files and hashes: 1: 5LDTQqkyMznAd8XGreEJO1pADyQ.crl (hash: konR1aY9VNYxApKo1gpFUZ7z+c0k8zXE862V40thyws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:62:71:80:a1:de:cb:88:37:36:b1:ff:04:fd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b0d342a9323339c077c5c6ade1093b5a400f24
Validity
Not Before: Sep 7 08:01:02 2025 GMT
Not After : Sep 8 08:01:02 2025 GMT
Subject: CN=10675b35320a819b155dc4d442f6f69f7f2b4e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:1f:66:ad:2d:d6:fe:00:76:13:7f:8a:7b:
4f:50:96:12:d7:78:1c:be:cf:f6:8b:38:43:f6:ec:
06:22:fc:83:4b:bf:b7:24:db:26:71:62:3e:2f:20:
b0:ba:c1:be:79:c7:f7:b9:30:08:c9:de:35:54:58:
d2:eb:a9:a0:dc:96:7b:4b:cc:63:05:57:5c:0d:c3:
ce:25:7b:15:90:54:b2:37:43:35:3d:c0:ec:0f:70:
49:a6:06:e1:95:13:f5:5a:24:01:44:4f:2b:70:e1:
53:c3:1a:d4:43:04:ab:c6:22:d7:49:e0:39:70:e0:
43:ff:3f:ec:56:71:c2:a0:64:1e:95:c3:d2:5d:6d:
c3:ab:70:e8:71:c2:70:a6:7a:2d:7f:04:a9:5a:d7:
0b:f9:1c:07:3e:89:c1:d5:27:ad:91:f6:84:f9:68:
61:32:e8:8c:b4:07:e8:98:71:61:7d:b4:29:88:2d:
c5:8d:c7:b3:e4:99:1b:70:25:d7:a1:14:68:10:57:
42:3e:af:76:fd:ea:24:29:ae:ed:f6:cf:8d:0f:38:
43:fb:4a:19:9e:80:44:74:f3:3d:a3:b9:22:a9:02:
71:2d:85:c3:2a:5e:8d:93:1d:6c:05:4b:a0:26:19:
38:8a:ab:b1:c4:cb:a4:b9:f1:be:af:c8:8d:aa:8a:
0f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:67:5B:35:32:0A:81:9B:15:5D:C4:D4:42:F6:F6:9F:7F:2B:4E:94
X509v3 Authority Key Identifier:
keyid:E4:B0:D3:42:A9:32:33:39:C0:77:C5:C6:AD:E1:09:3B:5A:40:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0c:9d:8b:7c:ce:af:6f:03:5d:3a:80:a7:2c:58:42:18:39:
ab:84:68:25:9c:6a:ec:2c:b0:31:26:e1:21:7e:14:9e:d0:2f:
fc:f5:8b:76:c1:ac:ce:3a:b0:fa:fb:50:6a:4c:1a:43:75:6e:
ac:ff:a7:d5:ab:bb:24:3b:db:ad:58:fb:b2:f8:bc:f8:ae:06:
db:5f:24:0a:f4:40:5d:fe:25:e7:b3:71:ce:bd:cd:1c:29:59:
1b:92:e9:3a:02:45:ae:dd:74:00:8c:e3:16:80:d5:3d:f8:a5:
52:ab:34:f5:43:c8:80:47:8b:21:7d:82:ca:82:d7:7a:00:58:
9b:98:b6:17:e8:f7:eb:b3:6e:04:83:5d:92:bd:1b:71:8e:c7:
78:41:67:86:4f:8e:dd:83:32:f4:98:8b:af:f9:d0:af:2f:84:
6b:58:38:96:f5:5d:f4:8c:27:18:49:ce:ee:8b:89:cb:9b:87:
bb:dd:66:32:23:67:2e:9d:f5:b7:b4:fd:2e:d3:00:11:e2:8e:
b2:57:f8:f8:36:47:9a:f7:c8:09:42:5c:92:20:dd:f7:e8:f7:
68:52:3b:74:a6:1f:33:6c:9e:47:56:fa:5a:71:42:ae:b3:d7:
c8:8b:51:79:47:ce:a4:4b:0c:b4:7b:f7:82:08:ab:22:0f:ab:
a9:a2:b3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:00:40 2025 by rpki-client