Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier: EZyGtP9FQ1gzELkwtA8sjOBYugvDR9Z3KvLs+X3A1k4=
Subject key identifier: 3C:B7:98:5C:A9:30:C0:C4:78:B6:8B:16:FF:97:E1:19:C3:43:06:AD
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer: /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial: 019A4F621D9C312460FF3D013B83BA257947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number: 0CE7
Signing time: Tue 04 Nov 2025 15:00:21 +0000
Manifest this update: Tue 04 Nov 2025 15:00:21 +0000
Manifest next update: Wed 05 Nov 2025 15:00:21 +0000
Files and hashes: 1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: sJ6mUA23qmqY6s5c06v6Jy3RXwmxFtcePRXFeTzRiQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:1d:9c:31:24:60:ff:3d:01:3b:83:ba:25:79:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
Validity
Not Before: Nov 4 15:00:21 2025 GMT
Not After : Nov 5 15:00:21 2025 GMT
Subject: CN=3cb7985ca930c0c478b68b16ff97e119c34306ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bf:60:47:92:37:6d:85:23:a8:8a:2f:69:ba:
5e:63:12:de:df:c7:bf:4d:60:f0:48:0a:89:2b:30:
f7:72:f3:87:8f:37:3a:57:ec:9a:7d:1c:2c:62:09:
9a:7a:c8:84:e0:0a:1c:3c:6e:fa:98:2e:37:83:1d:
e0:ab:3d:cc:27:d0:69:ac:53:1d:31:a8:53:3e:f9:
8c:24:1e:20:97:75:b7:c0:3f:cb:b2:10:5d:18:22:
0c:9e:f7:90:67:8f:79:fc:3e:70:43:a4:e0:43:ef:
c3:dd:3d:81:01:b0:e5:fe:e6:e5:cf:da:fd:90:d4:
1f:13:20:ca:e4:72:b4:b4:50:a1:3d:ac:f1:bd:29:
82:44:e5:df:af:ad:da:d5:75:0a:ad:1c:e5:8c:8b:
57:3f:24:23:77:e5:7c:1f:c9:d7:e3:4c:6f:1a:8b:
a1:0f:3b:a3:e7:85:8d:ac:c2:f5:2e:d3:6e:5b:1c:
d8:67:bd:84:f4:ea:68:79:06:54:31:88:b9:49:87:
b0:34:eb:c8:bf:f8:dc:41:0b:32:b2:b2:7b:d4:8c:
aa:12:91:f2:07:39:10:ca:e8:fd:e1:55:41:bb:b4:
bb:f7:63:e1:10:5f:79:99:e3:0f:78:74:7e:86:9d:
78:15:63:1c:79:33:86:d1:04:a3:4c:57:8c:46:e2:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:98:5C:A9:30:C0:C4:78:B6:8B:16:FF:97:E1:19:C3:43:06:AD
X509v3 Authority Key Identifier:
keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:50:c8:96:7c:25:f4:58:a8:af:22:ed:ba:40:82:17:1a:19:
29:45:7b:8d:a1:ab:fa:76:3b:46:3c:81:06:9f:2d:b5:b5:5e:
08:d6:44:27:60:35:e6:1f:67:b8:fb:ab:a0:69:24:b4:c1:95:
6c:bd:73:f1:3b:a7:ed:4c:fb:17:fa:91:26:fb:6b:56:4c:36:
dc:9d:6b:eb:b5:33:79:24:1c:1f:80:ba:cb:db:1e:7f:32:55:
7f:40:ed:a6:e2:6b:be:85:41:03:e6:89:e5:67:f7:6b:a0:d3:
59:73:6c:11:59:bb:3c:95:8a:40:03:a5:b6:29:d4:77:a8:6c:
1d:49:55:b7:4d:c4:d6:35:17:ee:31:b8:0b:3f:57:bc:5a:e2:
85:3a:9b:83:6f:d3:d4:3c:8b:61:d5:7f:05:49:60:23:c0:6b:
51:fc:fe:71:4e:ef:fe:0b:6a:5d:b3:3e:d4:0d:de:eb:55:ef:
ac:bd:6f:1d:e0:44:92:31:88:7a:d2:74:21:85:8c:cd:55:a7:
da:92:82:63:d1:0d:aa:9a:ad:a6:61:d1:8e:45:4d:25:a9:84:
a7:c3:5f:fb:17:b2:d5:b3:5d:e2:71:4d:c8:80:34:59:13:c5:
3a:3e:2f:06:3c:b4:54:af:72:ce:35:da:15:75:94:98:d9:9f:
8b:f4:52:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:09 2025 by rpki-client