
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier: EPow2jmOk01rkwdOOhII45gaBLCzx3btia9sweqTf+Q=
Subject key identifier: E8:DE:2E:75:38:69:2F:FD:78:62:FD:62:F6:A1:39:43:5D:3B:0F:48
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer: /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial: 01988B7D03D75CDD9E6CF3ECD37F5225A3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number: 0BFD
Signing time: Fri 08 Aug 2025 21:01:22 +0000
Manifest this update: Fri 08 Aug 2025 21:01:22 +0000
Manifest next update: Sat 09 Aug 2025 21:01:22 +0000
Files and hashes: 1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: UHgD5aJsPLmV5l+kXhyV4yj1dlzcgfn3cmP8F1Q79gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:03:d7:5c:dd:9e:6c:f3:ec:d3:7f:52:25:a3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
Validity
Not Before: Aug 8 21:01:22 2025 GMT
Not After : Aug 9 21:01:22 2025 GMT
Subject: CN=e8de2e7538692ffd7862fd62f6a139435d3b0f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:83:80:c4:fc:a1:06:37:3a:16:41:23:d4:
3d:eb:5d:ed:db:9b:ac:9b:55:bc:73:bc:23:49:97:
f1:2b:f7:b0:dd:c2:65:44:bb:cf:75:af:07:c7:3a:
a6:72:2e:24:99:a0:c1:6d:5a:fb:b8:a2:89:bf:3f:
c2:21:2b:60:cb:13:a2:c4:aa:9d:31:27:76:90:d6:
1c:8c:83:9f:4f:6d:a4:ce:a9:7d:3a:de:1a:7b:e4:
59:24:95:37:ac:ce:82:fe:b4:40:d3:9e:93:78:96:
af:dd:1c:22:02:8f:75:0f:3c:ff:b4:98:9c:1f:d3:
06:92:92:1e:04:e7:68:5d:44:c9:23:b4:6c:7c:2a:
47:68:e0:e0:8f:98:07:6f:d5:32:43:1f:2c:17:27:
47:38:20:da:1b:26:c4:cd:33:dc:ba:81:6c:cf:1e:
64:01:59:a4:92:5c:2c:93:d6:16:69:6b:d2:e6:5d:
d8:80:c7:33:10:73:2f:64:fa:21:b7:9b:bf:9d:24:
cc:67:f7:46:86:70:dc:bb:6b:a1:42:58:a4:25:52:
ff:2b:06:e2:b7:f6:b1:3a:4d:b7:f5:a2:c5:64:c9:
5c:11:59:a1:99:63:0d:11:9e:f3:58:52:c9:82:fc:
8d:25:a4:9f:9f:09:30:bc:5d:81:39:fb:26:20:10:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DE:2E:75:38:69:2F:FD:78:62:FD:62:F6:A1:39:43:5D:3B:0F:48
X509v3 Authority Key Identifier:
keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:dc:35:b6:b2:f0:bd:4a:7d:04:03:c5:00:1c:84:aa:10:8c:
27:c0:ad:2b:ae:c7:e1:b8:3a:a5:ea:d7:9c:02:dc:b7:26:ae:
44:42:e7:d9:0c:68:8f:80:d8:0f:21:91:56:6e:c0:fe:2b:82:
14:10:3a:5d:17:96:17:53:06:c7:de:ef:77:28:df:84:93:be:
ff:de:e7:ad:b4:d7:25:a9:0d:85:93:77:9e:d4:df:3b:b0:94:
e7:0f:15:6c:24:d2:03:d7:3a:f8:d9:aa:24:b2:ac:5b:8f:87:
09:46:cb:84:d4:30:8e:ca:01:97:e5:d2:57:e8:2c:c7:94:22:
7b:4a:26:37:b1:15:ac:ee:04:42:fc:00:15:ab:ae:ac:44:f7:
a6:fa:56:db:e6:50:f5:a6:04:f2:97:3e:18:66:eb:e9:54:11:
8e:c1:69:c2:5e:24:19:a1:91:dd:32:1b:65:a7:a7:ec:9c:14:
01:63:3e:bc:88:b9:d2:c7:ba:c6:0b:9d:33:67:df:cc:19:b9:
22:15:f7:14:64:62:5e:96:8e:95:e2:a0:e9:ec:54:d2:0c:b5:
00:e0:b2:3d:d8:76:d4:20:8f:64:aa:32:57:73:4c:c1:4e:ca:
ec:27:c6:b7:b0:4e:35:f4:80:5d:7e:e7:c2:95:86:e4:c3:96:
bc:68:7a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:45 2025 by rpki-client