
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
File: 5LDTQqkyMznAd8XGreEJO1pADyQ.mft (raw, json)
Hash identifier: WXxOXnPPXHEcPK4QDSICm/TygZY3tIgEqqTj3qT1C1g=
Subject key identifier: 9C:92:7B:4C:14:EC:78:A3:BE:70:91:A4:DE:D9:67:0A:8E:EF:59:47
Authority key identifier: E4:B0:D3:42:A9:32:33:39:C0:77:C5:C6:AD:E1:09:3B:5A:40:0F:24
Certificate issuer: /CN=e4b0d342a9323339c077c5c6ade1093b5a400f24
Certificate serial: 019884D58A65DA76106005801F591D96974A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
Manifest number: 0284
Signing time: Thu 07 Aug 2025 14:00:43 +0000
Manifest this update: Thu 07 Aug 2025 14:00:43 +0000
Manifest next update: Fri 08 Aug 2025 14:00:43 +0000
Files and hashes: 1: 5LDTQqkyMznAd8XGreEJO1pADyQ.crl (hash: +h2w7XGUzFzIETQQGFLPwPodZJiQwnZlyDnxcT+uX0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:d5:8a:65:da:76:10:60:05:80:1f:59:1d:96:97:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b0d342a9323339c077c5c6ade1093b5a400f24
Validity
Not Before: Aug 7 14:00:43 2025 GMT
Not After : Aug 8 14:00:43 2025 GMT
Subject: CN=9c927b4c14ec78a3be7091a4ded9670a8eef5947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:25:4b:14:91:a7:85:f7:35:0f:77:e9:e4:
b2:c4:8d:24:38:b1:70:7b:1a:7f:f0:a6:8b:8f:67:
cf:78:26:f6:b9:19:d5:21:14:8b:91:d7:08:58:0a:
68:ec:33:de:ac:53:bc:fb:f4:bf:13:75:43:32:88:
e3:20:ed:e4:8e:eb:3c:f2:f3:64:4a:61:e7:68:60:
d0:d9:ce:b6:70:72:c9:4c:e6:36:df:ad:1c:d1:95:
41:94:af:92:57:1e:50:ea:f8:9a:f9:b4:56:d6:fb:
fd:65:ba:aa:3e:29:ab:11:c1:c5:e3:14:e1:08:27:
94:6d:2f:33:0d:99:d6:84:87:69:04:5e:52:bb:4c:
d8:ba:90:02:85:80:13:4a:0e:38:d4:5a:01:da:61:
8a:5b:d3:c9:ba:3a:58:81:cf:dd:6d:d8:b8:e7:7f:
dc:05:a4:45:06:c4:e9:79:a0:97:69:af:62:69:d0:
74:06:fa:0b:fa:80:db:60:3a:46:4e:5c:4b:79:b7:
d3:74:af:6c:e5:9e:02:75:9a:eb:42:cd:2a:38:da:
1f:46:a5:6c:0b:e9:84:55:dc:01:20:18:45:aa:ce:
40:0f:9b:3f:f2:fa:83:1e:04:08:11:ad:d5:cf:78:
35:cd:d7:8a:05:1f:b8:50:06:c5:a8:7a:70:fc:21:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:92:7B:4C:14:EC:78:A3:BE:70:91:A4:DE:D9:67:0A:8E:EF:59:47
X509v3 Authority Key Identifier:
keyid:E4:B0:D3:42:A9:32:33:39:C0:77:C5:C6:AD:E1:09:3B:5A:40:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:fc:42:99:51:b7:53:a5:9d:fb:3f:6c:33:01:46:fe:90:52:
3f:2f:da:5b:59:8c:64:3d:89:84:b8:d3:b1:91:c6:55:b6:c8:
90:f8:34:bd:24:7f:3e:e9:59:c5:9f:06:22:9b:f8:e5:3f:fb:
3a:98:72:2d:b9:58:a9:f7:b3:9f:17:fc:cb:2d:44:46:22:6a:
a1:4a:87:fc:51:d1:9a:75:f2:f7:9f:a6:90:c5:e3:26:2e:4b:
63:79:1e:ac:7e:8d:e2:85:21:b6:85:b9:b5:7f:6f:dd:c8:3f:
5d:f3:c5:35:46:d2:cb:9c:a5:80:12:52:df:d4:b7:42:a4:15:
e2:03:0e:e0:b3:a5:ec:3f:ff:55:08:fd:8f:a3:69:7e:49:fd:
f4:d8:c4:17:6c:02:11:27:c2:15:8e:aa:b4:3b:fa:a6:32:6d:
41:a5:b3:c0:70:95:6f:5d:b1:89:0e:c2:06:af:fb:66:85:3f:
99:c1:43:fd:de:96:41:ae:75:7c:8a:0d:c3:06:73:1e:2c:9e:
ac:49:7e:87:8f:30:4a:3d:be:e8:23:7d:df:f7:c2:e2:49:8d:
b3:8f:2e:d3:b8:ef:ca:cf:c9:80:59:58:f3:65:2b:33:74:37:
56:74:91:4c:05:11:3a:3a:51:ee:cf:ab:9f:41:eb:c5:7c:d6:
a8:00:67:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:14:02 2025 by rpki-client