
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File: 5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier: 3N1axoqXOrTCopoxxS5csXhPfNg4AFZqlNloLIKSm9c=
Subject key identifier: 0D:58:91:EA:B5:D8:F0:0D:1F:01:1F:76:09:34:AE:C6:29:BE:DC:62
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer: /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial: 019921B198418CD14749DB70DFE376ACA682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number: 09B8
Signing time: Sun 07 Sep 2025 01:01:50 +0000
Manifest this update: Sun 07 Sep 2025 01:01:50 +0000
Manifest next update: Mon 08 Sep 2025 01:01:50 +0000
Files and hashes: 1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: 8+oq0hNpIoO5TXYQ2G32/p09c44uQgfzcpjZIbOE2Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:98:41:8c:d1:47:49:db:70:df:e3:76:ac:a6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Validity
Not Before: Sep 7 01:01:50 2025 GMT
Not After : Sep 8 01:01:50 2025 GMT
Subject: CN=0d5891eab5d8f00d1f011f760934aec629bedc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:79:c7:8c:ca:a6:9d:2e:bc:74:37:ab:95:
93:18:0f:23:ac:6b:c5:99:9b:33:b9:15:43:60:f8:
2b:31:de:d1:c0:0c:a8:e8:8c:62:2e:53:fe:cb:aa:
88:88:62:98:a4:ac:cc:89:d2:3f:8e:3d:18:e9:a0:
6b:ed:65:2f:7b:16:9d:c8:91:12:04:a2:cd:e7:a4:
1a:68:c9:20:92:a9:7b:14:6e:71:b5:3c:28:8e:c0:
8f:4c:a6:87:ee:18:89:04:51:a4:9e:61:d0:42:10:
2e:a3:dd:25:f1:64:43:d2:79:e5:76:12:d3:3d:47:
a6:47:6e:13:d6:2e:a1:a5:18:82:fb:5c:83:51:78:
d6:b8:99:34:5d:f4:7a:a4:39:98:88:91:ec:62:4d:
e0:25:6b:10:28:10:b5:48:80:d6:a1:bf:00:23:4b:
af:1d:40:1e:07:65:17:73:8f:f4:f1:5b:fe:2d:18:
45:e3:a6:ef:2a:49:f4:b9:99:98:0e:e0:62:f5:28:
f0:66:95:77:db:d0:57:bc:a4:74:34:6b:ea:6b:ba:
ba:a7:cd:fc:49:f8:d0:d1:7a:27:a5:8e:b8:14:d7:
60:85:a1:46:cc:ac:74:fe:4c:46:8f:d1:fc:16:c6:
dc:59:a4:d9:74:19:d4:16:f2:bc:b8:fe:ba:8f:43:
b6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:58:91:EA:B5:D8:F0:0D:1F:01:1F:76:09:34:AE:C6:29:BE:DC:62
X509v3 Authority Key Identifier:
keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:02:d5:fb:ab:64:43:6b:5c:b8:45:ae:89:16:77:44:ba:02:
48:14:6d:ae:43:34:50:3d:ff:3c:24:89:ce:65:8a:09:2a:61:
40:15:ab:3f:07:aa:6d:d2:36:14:7f:8b:be:67:59:e3:03:0c:
19:36:cb:70:d9:fc:6f:1d:b8:2b:9d:49:6f:e4:2f:d0:4e:a0:
5f:39:68:ba:34:d7:d0:76:2a:f5:8b:83:db:ed:77:40:58:3f:
c3:a9:65:71:76:cf:d8:c4:9b:b2:20:e0:3c:af:91:0f:0a:8c:
7a:00:52:7e:6e:e1:58:34:53:2e:08:f6:74:18:00:b6:af:be:
bc:c9:d3:d4:22:ee:d2:eb:dd:e0:d6:bb:72:c1:72:68:5c:93:
66:78:9a:67:dd:cc:c6:56:ef:f2:75:32:5b:36:25:41:f0:93:
f7:d3:cf:a1:f1:a6:87:e5:5b:c7:1d:89:08:30:d8:00:95:93:
be:23:46:f4:80:53:11:6a:35:22:45:4d:f5:4e:ef:3b:ba:f6:
06:f2:5b:f1:a3:4a:61:43:8c:e5:36:e2:01:4e:8f:79:92:d4:
1a:76:03:6f:0f:93:8e:87:ac:8b:8c:29:11:96:75:3a:3e:ac:
a8:06:c7:4a:4f:ae:8a:3b:da:61:6f:bc:24:f4:bf:af:75:0e:
a6:2a:22:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:12 2025 by rpki-client