
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
File: 5DWo9PNqSBGpLRlhc-HEmarMd9U.mft (raw, json)
Hash identifier: S0sOIeAhDpeoX69gL0nLHtLmbJ52vogKYKCjyPlLtJ4=
Subject key identifier: 90:25:1E:76:C0:0F:9B:61:86:24:D2:59:20:5A:C9:0B:09:1A:A0:05
Authority key identifier: E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
Certificate issuer: /CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Certificate serial: 019922FA47328D3B35DB4B57CEA757AC51AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
Manifest number: 0D4F
Signing time: Sun 07 Sep 2025 07:00:51 +0000
Manifest this update: Sun 07 Sep 2025 07:00:51 +0000
Manifest next update: Mon 08 Sep 2025 07:00:51 +0000
Files and hashes: 1: 5DWo9PNqSBGpLRlhc-HEmarMd9U.crl (hash: ZYUp3gvBO/qvEF5PtrSqCp0DmDkj0B/lfWn5y6sZeCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:47:32:8d:3b:35:db:4b:57:ce:a7:57:ac:51:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Validity
Not Before: Sep 7 07:00:51 2025 GMT
Not After : Sep 8 07:00:51 2025 GMT
Subject: CN=90251e76c00f9b618624d259205ac90b091aa005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:50:d7:66:89:0b:70:ce:83:87:f7:f2:42:ac:
32:59:2b:dd:ec:71:fa:cb:c9:4c:82:e4:16:06:aa:
79:3f:2f:73:63:a6:85:54:d3:f4:d9:51:41:c3:8f:
5d:31:0e:7a:83:73:8b:86:aa:82:9f:f8:a1:79:48:
02:a5:2b:ff:81:b3:3b:46:1c:d2:8e:6a:1e:cb:a4:
af:f0:fb:1a:6d:57:99:ae:85:fe:53:58:35:ed:f7:
24:26:4b:3e:cb:5e:98:38:56:bc:76:b0:06:bb:2e:
83:85:e4:4a:e0:29:69:fe:5c:48:91:4d:e9:9b:01:
31:ea:34:4a:b2:4d:f8:4a:d7:4d:1c:60:30:2b:e7:
94:18:6f:c9:53:0e:44:03:fb:da:82:bf:4f:2c:e8:
d6:f3:04:c1:25:16:a8:c3:4d:cd:f1:e5:4e:e5:c0:
e7:c9:a1:a9:18:56:f8:10:e1:72:1a:d4:7c:8a:5d:
6a:49:91:18:9f:8e:37:fc:f6:3e:0c:e7:9b:a7:11:
99:8e:35:6e:f1:55:46:00:9e:41:ec:33:c6:d3:d7:
7f:87:59:46:e1:ab:ea:af:b6:5d:75:13:45:02:b5:
42:a9:00:f4:fe:be:b8:a8:a9:63:ef:28:30:ec:4b:
8c:c0:88:7e:54:47:95:09:15:ab:7a:c7:69:67:2e:
7f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:25:1E:76:C0:0F:9B:61:86:24:D2:59:20:5A:C9:0B:09:1A:A0:05
X509v3 Authority Key Identifier:
keyid:E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:69:8c:79:f3:fc:5f:f6:4d:5d:a8:0e:4e:7b:2b:98:7e:68:
99:41:36:af:e9:e5:de:f3:dc:f0:42:fd:98:ff:78:4b:7d:7f:
01:4d:2b:fa:b7:23:78:13:b0:43:89:8d:c0:93:39:8e:dc:28:
f4:f6:bf:dc:ef:6e:56:e4:0f:59:67:f5:04:0e:ca:3a:2a:92:
3b:f4:e0:92:5a:42:01:5e:83:9d:35:41:50:50:a1:a0:94:5d:
80:66:3b:1c:2d:d0:bd:91:87:ed:ab:c8:e7:90:09:41:6c:67:
f0:af:03:61:53:cf:76:c4:f6:26:e1:b3:83:42:4f:26:52:e6:
77:b9:b5:40:20:c2:72:ea:07:a0:e2:e5:ef:23:b7:55:6c:55:
49:a1:32:a8:ac:59:f3:c7:1a:a4:7a:f3:0e:e1:22:b7:b4:9e:
31:91:3f:95:fd:b5:0e:bd:87:6e:cc:d2:c4:e3:d4:a0:78:c8:
92:57:35:75:88:4d:6a:1e:b9:78:19:ee:33:18:c5:4a:37:85:
06:42:6f:ee:30:90:5b:c2:58:03:a7:f7:57:5d:31:81:14:9c:
17:79:c0:e8:e5:08:6a:dc:83:37:a5:02:96:ca:db:0d:7c:9d:
24:1a:e3:d2:e8:6c:f4:ef:81:1a:ec:19:aa:53:95:71:aa:77:
25:2f:6c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:11 2025 by rpki-client