
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
File: _5zoM1_DdnayDsFlXFPWfbyG6LM.mft (raw, json)
Hash identifier: XYzGM/iUbmR5xjQSbxMjE1gWxivgyVBju/onGnvoS3k=
Subject key identifier: EC:1C:29:A3:74:CB:BD:35:B9:4B:68:E4:52:F7:EF:F3:97:5F:AF:FB
Authority key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
Certificate issuer: /CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Certificate serial: 0198733DDA1680AFC2C378E08AA97B155D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
Manifest number: 0E91
Signing time: Mon 04 Aug 2025 04:01:29 +0000
Manifest this update: Mon 04 Aug 2025 04:01:29 +0000
Manifest next update: Tue 05 Aug 2025 04:01:29 +0000
Files and hashes: 1: _5zoM1_DdnayDsFlXFPWfbyG6LM.crl (hash: 0xdzzswIme/1gOiX4GrUUlCY0ayqtYJux90ze3WY5dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:da:16:80:af:c2:c3:78:e0:8a:a9:7b:15:5d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Validity
Not Before: Aug 4 04:01:29 2025 GMT
Not After : Aug 5 04:01:29 2025 GMT
Subject: CN=ec1c29a374cbbd35b94b68e452f7eff3975faffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:5f:07:f9:0f:df:a6:2e:60:85:c3:4d:f9:
af:94:01:33:48:cc:80:6f:65:4e:49:d1:05:59:9e:
8a:5b:2a:1a:bd:9b:41:19:10:d2:3d:c5:5b:92:dc:
87:79:aa:74:53:0d:d1:e9:03:03:45:d6:82:9e:cf:
01:85:11:12:6c:ec:93:79:01:49:d9:69:5d:ad:14:
34:04:45:c4:37:3c:3c:c0:47:0f:eb:e7:a8:5d:40:
f7:fa:1d:f2:1c:80:4d:a4:fc:93:07:ec:c7:9e:81:
47:9f:89:5c:50:aa:52:34:f1:0c:38:a2:8e:c3:83:
4e:68:d4:4e:c2:aa:9f:3a:82:12:a8:35:c9:33:0b:
af:d4:90:0a:74:a9:96:39:99:58:8b:36:b6:1d:1a:
7d:c1:cf:92:3a:05:a6:c9:2d:fa:d5:eb:6b:d4:60:
45:38:ea:90:4f:4f:5c:46:0f:d1:5c:c1:f3:1e:10:
7c:0c:ff:2b:04:61:8a:6f:ca:25:ef:a1:99:65:07:
4e:e4:d0:66:35:d9:04:f1:d8:c7:3d:0d:fd:53:a9:
a7:30:93:e6:fe:04:33:0c:5d:41:3c:ab:a6:cb:13:
38:c9:3d:6d:63:37:93:d0:57:f8:8a:67:48:f8:03:
c1:d7:0e:18:22:46:1a:24:b4:03:38:ca:22:75:90:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1C:29:A3:74:CB:BD:35:B9:4B:68:E4:52:F7:EF:F3:97:5F:AF:FB
X509v3 Authority Key Identifier:
keyid:FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:28:46:5d:fb:6a:9e:54:7d:18:06:a8:6f:1c:eb:83:d5:c2:
36:b5:92:b9:63:60:7c:d2:65:bc:20:47:d5:15:c7:78:0e:89:
b1:d8:2f:2d:db:a3:6d:aa:2b:ea:de:25:7b:a3:33:97:22:f9:
a1:ab:98:75:05:75:65:c1:0b:e8:b3:09:31:1b:a2:f5:6c:ac:
84:fb:8a:91:48:d1:24:ee:2b:47:43:f1:6d:60:59:00:31:c2:
a0:d2:7e:2f:47:86:0e:57:e4:1e:45:94:94:4d:3b:a6:0e:4f:
fc:90:3e:e2:a6:4d:d1:35:c4:43:aa:5e:f4:57:1d:31:f0:77:
08:36:0f:bd:c3:23:0a:a4:e4:ab:49:c0:ff:ef:73:e4:a4:78:
a3:36:7c:f1:fe:4b:f2:a6:fb:72:6d:80:91:8c:d8:28:35:d2:
60:18:0e:a8:de:fd:97:4f:94:00:aa:62:ad:43:36:2b:e4:08:
de:97:c5:de:9f:db:1c:be:5c:0a:e2:25:86:7a:13:74:ef:16:
06:68:b5:70:0b:2a:7a:b5:a5:b9:50:9f:46:7c:2a:64:f0:f9:
f3:41:a5:ea:5f:d0:fc:77:32:18:b6:7b:5c:0c:83:a1:42:28:
55:f1:ae:0e:a8:2c:08:ad:47:16:07:16:da:c3:af:12:4a:0e:
14:9b:e4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:36 2025 by rpki-client