Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
File: 5LDTQqkyMznAd8XGreEJO1pADyQ.mft (raw, json)
Hash identifier: +2p3oFkiKMWU53poh/2HtJw3KycJLjyRMfoCwE6sZd8=
Subject key identifier: 84:71:39:8C:B9:CA:B1:25:89:6D:D5:78:DA:BE:1B:08:9C:E1:E5:AF
Authority key identifier: E4:B0:D3:42:A9:32:33:39:C0:77:C5:C6:AD:E1:09:3B:5A:40:0F:24
Certificate issuer: /CN=e4b0d342a9323339c077c5c6ade1093b5a400f24
Certificate serial: 019A733871A50885B0E8F32888EC0F8B10DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
Manifest number: 0384
Signing time: Tue 11 Nov 2025 14:01:10 +0000
Manifest this update: Tue 11 Nov 2025 14:01:10 +0000
Manifest next update: Wed 12 Nov 2025 14:01:10 +0000
Files and hashes: 1: 5LDTQqkyMznAd8XGreEJO1pADyQ.crl (hash: 85xi0AXQAuc8PXLUv4rOPj4Lg7BzOZdG1/RIyAhKJTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:71:a5:08:85:b0:e8:f3:28:88:ec:0f:8b:10:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b0d342a9323339c077c5c6ade1093b5a400f24
Validity
Not Before: Nov 11 14:01:10 2025 GMT
Not After : Nov 12 14:01:10 2025 GMT
Subject: CN=8471398cb9cab125896dd578dabe1b089ce1e5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:a9:5c:20:02:9b:bd:29:44:b0:f4:75:50:
da:8b:87:5a:20:70:31:51:6c:75:f1:9a:2e:7b:28:
67:5d:f2:20:03:4e:86:21:7e:72:cc:25:08:ff:a4:
f4:0f:52:07:bf:c1:9d:e8:17:54:4b:84:f6:d5:88:
74:a6:af:02:01:e4:68:9a:03:9c:97:7a:ef:81:71:
7f:4a:65:d3:8e:c1:90:94:6f:d6:87:c5:60:21:49:
03:2e:d7:47:6e:23:0f:6f:f3:9a:67:43:06:d9:e8:
d0:3f:ec:ed:a8:7c:3a:65:69:a1:f4:63:b1:12:52:
d7:04:9d:02:8f:0b:74:29:cf:99:42:77:31:0a:91:
df:8f:da:fb:46:5a:de:82:7d:82:c7:72:9e:36:cb:
9d:16:00:72:36:82:fc:ba:04:69:c4:69:cd:09:95:
40:02:80:cf:ee:b4:b9:15:f8:6c:ce:8b:ce:34:b3:
8b:c9:7c:79:d2:23:38:c1:6d:c2:78:ec:14:36:f6:
02:c4:cb:51:5d:87:82:2f:4d:28:05:1a:b2:d5:1c:
1a:57:fc:0b:7a:be:cc:cc:16:c3:93:43:c3:11:56:
dd:89:cb:60:01:28:1f:4f:19:b8:f2:0d:2b:63:9a:
79:ee:39:0d:38:d3:36:a9:56:d3:94:a8:d7:f4:92:
88:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:71:39:8C:B9:CA:B1:25:89:6D:D5:78:DA:BE:1B:08:9C:E1:E5:AF
X509v3 Authority Key Identifier:
keyid:E4:B0:D3:42:A9:32:33:39:C0:77:C5:C6:AD:E1:09:3B:5A:40:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:51:52:a8:15:2e:67:ad:3a:d3:6f:b1:e2:93:8b:d7:e3:85:
17:10:69:79:c3:09:9e:c2:30:eb:b0:a4:2d:37:ae:c5:c4:2a:
11:08:94:97:10:5d:ba:a0:86:c7:0f:bf:02:4e:7d:e9:55:e1:
6e:23:31:66:97:82:6c:1c:d0:51:c2:93:8d:27:27:ef:93:a6:
5a:78:29:02:47:b4:14:30:e1:ee:91:97:bd:ab:8e:a2:e5:88:
1d:95:cc:02:96:4a:6f:81:38:0e:b9:d9:56:35:18:72:1a:45:
3d:9d:60:96:10:98:f0:b0:a0:20:ee:25:48:18:5b:5a:b8:dc:
41:93:3b:21:b5:c1:c6:89:13:25:e0:b2:52:04:3e:d0:73:a2:
a8:64:78:64:32:cf:65:f2:3a:2b:ec:3c:c0:81:57:7a:d2:cd:
1e:a8:4e:fc:6b:67:66:5c:e3:d6:97:7f:2b:f9:b8:20:f4:b6:
30:7c:34:f0:ae:ec:f0:15:f1:4b:b8:d2:f7:63:48:12:96:28:
f3:b3:df:52:a8:83:29:b2:88:bb:5f:7e:f8:19:b9:49:45:1f:
c1:4f:46:96:c9:03:e8:13:cf:f0:df:05:b7:94:c9:ba:25:64:
74:57:8f:c7:f1:19:76:ba:4c:26:d5:16:01:fc:14:b5:23:f6:
35:e3:2e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:52 2025 by rpki-client