Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
File: 5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json)
Hash identifier: ZriFF5jBpTOnTuCmQw6aZXdG7FTkAOhwIDz4Eh123/8=
Subject key identifier: F5:0B:22:43:95:5F:A9:79:A6:CE:F7:C6:7E:BB:EC:DD:EC:22:26:74
Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
Certificate issuer: /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Certificate serial: 019896A68261332E5591B6338E0CF59B4F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
Manifest number: 0F50
Signing time: Mon 11 Aug 2025 01:02:31 +0000
Manifest this update: Mon 11 Aug 2025 01:02:31 +0000
Manifest next update: Tue 12 Aug 2025 01:02:31 +0000
Files and hashes: 1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: qxXXwWQzovteiNHnJN4PU1tXA/V6xDO+XWAtqc+DZsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:82:61:33:2e:55:91:b6:33:8e:0c:f5:9b:4f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Validity
Not Before: Aug 11 01:02:31 2025 GMT
Not After : Aug 12 01:02:31 2025 GMT
Subject: CN=f50b2243955fa979a6cef7c67ebbecddec222674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d2:63:fe:79:d7:82:8c:b8:46:24:94:95:a9:
29:52:25:0d:1d:2a:ba:16:0e:15:25:70:01:dd:df:
60:0c:c3:8c:aa:66:69:0c:57:e9:31:61:70:cd:e6:
d0:39:4f:d6:16:04:fb:1d:26:be:21:cd:aa:f3:20:
05:f4:e4:c1:25:36:3b:f0:9e:7a:97:b4:59:31:e1:
35:76:c6:44:5f:5e:6a:95:b9:b1:43:57:71:35:da:
32:32:73:b8:7b:f2:7f:9a:9e:e6:53:c4:88:d6:d0:
db:e8:60:68:4b:2d:66:4f:46:73:c7:cc:48:3e:7c:
44:92:54:ea:a9:92:e6:c1:86:c3:2c:7a:16:f9:90:
ed:6e:92:99:43:d3:11:28:02:77:54:c8:a1:4d:04:
ec:66:26:ab:36:de:99:5a:2a:de:d6:37:65:fd:20:
d4:3d:44:81:69:a9:47:15:69:03:ec:0f:63:1f:e6:
8f:60:bb:82:a0:e4:6c:93:17:ec:80:34:b5:a8:69:
1a:be:ef:17:5a:d6:34:26:91:9b:37:dd:0a:78:b2:
ab:be:35:08:9d:4b:97:72:fe:55:54:60:ad:d5:4b:
7c:1b:6f:ce:4e:a5:c2:b5:66:a3:43:a0:7e:ea:e8:
7f:7f:46:18:0f:e6:43:9c:82:c4:e7:11:9b:65:9a:
11:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0B:22:43:95:5F:A9:79:A6:CE:F7:C6:7E:BB:EC:DD:EC:22:26:74
X509v3 Authority Key Identifier:
keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a6:81:da:e3:16:1c:aa:43:1d:ba:62:fc:c5:3c:9c:62:a6:
07:59:e3:ca:ce:a7:dc:f0:a9:e2:8d:05:b2:1e:2b:15:f7:a1:
6c:b2:3b:37:2a:e7:35:69:a7:6c:98:ca:66:dd:aa:d1:e1:86:
97:5f:31:c9:c9:52:69:c0:86:aa:ea:06:00:23:f6:71:f3:50:
d8:fe:aa:1d:45:d9:04:f7:86:5b:94:65:e5:bf:d4:a2:63:f5:
86:7a:c5:32:e8:ef:8e:9d:40:d3:a7:dd:27:1d:c0:43:ee:b6:
e4:13:7a:b6:c7:75:b5:8a:48:25:6b:d9:f2:27:7b:62:c6:a0:
6b:d0:af:53:f5:9d:48:59:e7:55:ba:f4:27:05:41:4f:0b:64:
d4:88:0a:5a:50:69:9d:e2:9f:20:fb:ad:85:96:5e:92:12:6d:
d2:1a:15:42:5b:46:58:42:71:45:44:19:88:9e:96:19:6b:37:
a8:ea:26:8a:f8:34:ef:8c:e0:29:4b:ad:d8:ba:23:d2:7c:5d:
6c:b9:26:8d:82:5e:18:dd:87:6f:af:72:db:a2:0b:58:07:e7:
34:70:6d:a8:7c:68:c8:5f:6c:ed:d4:20:60:fa:2c:84:a7:f1:
cd:56:c7:af:89:6c:66:5e:b5:f5:c1:b1:67:58:4d:ee:9c:5d:
b0:e2:be:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpoJhMy5VkbYzjgz1m0+fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3M2E5YmEzOWU4YjhlMmI4YmY0ZTg4MjUyYWZiZmRkY2Nj
ZGQxYTEwHhcNMjUwODExMDEwMjMxWhcNMjUwODEyMDEwMjMxWjAzMTEwLwYDVQQD
EyhmNTBiMjI0Mzk1NWZhOTc5YTZjZWY3YzY3ZWJiZWNkZGVjMjIyNjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitJj/nnXgoy4RiSUlakpUiUNHSq6
Fg4VJXAB3d9gDMOMqmZpDFfpMWFwzebQOU/WFgT7HSa+Ic2q8yAF9OTBJTY78J56
l7RZMeE1dsZEX15qlbmxQ1dxNdoyMnO4e/J/mp7mU8SI1tDb6GBoSy1mT0Zzx8xI
PnxEklTqqZLmwYbDLHoW+ZDtbpKZQ9MRKAJ3VMihTQTsZiarNt6ZWire1jdl/SDU
PUSBaalHFWkD7A9jH+aPYLuCoORskxfsgDS1qGkavu8XWtY0JpGbN90KeLKrvjUI
nUuXcv5VVGCt1Ut8G2/OTqXCtWajQ6B+6uh/f0YYD+ZDnILE5xGbZZoROQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPULIkOVX6l5ps73xn677N3sIiZ0MB8GA1UdIwQY
MBaAFOc6m6Oei44ri/ToglKvv93MzdGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpxYm81NkxqaXVMOU9pQ1VxLV8zY3pOMGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yZjUwM2QtNmNjMS00MzVlLTg3MWEt
N2ZhNGY1OGM0ZmI5LzEvNXpxYm81NkxqaXVMOU9pQ1VxLV8zY3pOMGFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yZjUwM2QtNmNjMS00MzVlLTg3MWEtN2ZhNGY1OGM0ZmI5
LzEvNXpxYm81NkxqaXVMOU9pQ1VxLV8zY3pOMGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqaB2uMW
HKpDHbpi/MU8nGKmB1njys6n3PCp4o0Fsh4rFfehbLI7NyrnNWmnbJjKZt2q0eGG
l18xyclSacCGquoGACP2cfNQ2P6qHUXZBPeGW5Rl5b/UomP1hnrFMujvjp1A06fd
Jx3AQ+625BN6tsd1tYpIJWvZ8id7Ysaga9CvU/WdSFnnVbr0JwVBTwtk1IgKWlBp
neKfIPuthZZekhJt0hoVQltGWEJxRUQZiJ6WGWs3qOomivg074zgKUut2Loj0nxd
bLkmjYJeGN2Hb69y26ILWAfnNHBtqHxoyF9s7dQgYPoshKfxzVbHr4lsZl619cGx
Z1hN7pxdsOK+9g==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:09:15 2025 by rpki-client