Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
File: 53ltjBnzKhyvvVt49Sds6N-ZXQo.mft (raw, json)
Hash identifier: 7PLFSdzxbNTDfezTG8FQ3DNhOImE5MqZwChPdAWH8hQ=
Subject key identifier: 48:EE:21:E8:6F:E9:E5:96:84:A6:5B:F9:36:4E:5D:F2:B4:2F:6C:AE
Authority key identifier: E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
Certificate issuer: /CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Certificate serial: 0199FC5832DC209DFDE4EA04D296EF82F5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:02 +0000
Manifest this update: Sun 19 Oct 2025 12:01:02 +0000
Manifest next update: Mon 20 Oct 2025 12:01:02 +0000
Files and hashes: 1: 53ltjBnzKhyvvVt49Sds6N-ZXQo.crl (hash: BpZPNQjNY5RyvK8jA3XzPETBPePli+Gh5XjnWEf1DPY=)
2: tUZHDdFwry8ADa4Cy4cgEjcwGpA.roa (hash: khx6M/GES6UZBMxotwf4KeFJV0Wp8E9iWqwkSmvOz7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:32:dc:20:9d:fd:e4:ea:04:d2:96:ef:82:f5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Validity
Not Before: Oct 19 12:01:02 2025 GMT
Not After : Oct 20 12:01:02 2025 GMT
Subject: CN=48ee21e86fe9e59684a65bf9364e5df2b42f6cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:53:a7:d7:69:f5:e5:e3:37:78:fd:83:af:
c6:87:ab:56:05:2b:d0:7e:17:bd:86:49:6f:cb:19:
99:3f:b4:2e:38:07:1f:4d:a0:ee:fb:bc:47:6e:5a:
ed:ad:c7:14:80:8d:b8:3a:78:3a:b8:11:34:f3:2a:
cb:29:ce:72:b1:95:1c:55:bb:eb:01:6e:59:d0:0e:
c7:49:ac:91:a7:29:82:91:9e:13:9c:1d:92:a2:7b:
f3:0f:36:39:cf:35:39:b8:69:c6:06:90:3a:72:dd:
3d:b4:0d:1e:60:ab:2c:67:16:95:cb:0a:b0:b9:fb:
3d:18:86:4a:3f:66:29:7e:a8:e7:8c:43:b2:96:1d:
a5:c4:5b:ac:cb:52:f0:1e:8f:ea:25:1e:6e:e9:77:
1b:30:2b:07:4d:3e:7b:12:4c:c2:3e:ae:3c:0a:a4:
78:57:bd:37:a0:52:e9:15:e5:c1:da:a8:0c:9e:6a:
46:1b:e9:bc:72:31:82:16:1e:94:5b:f2:53:32:f7:
ac:e9:da:84:47:6c:d5:c6:bd:0f:45:31:75:06:5d:
b8:52:96:18:3b:43:23:99:00:39:fb:c4:08:49:3c:
b9:cd:b3:dc:87:58:93:8a:79:30:68:a2:d2:27:7f:
cf:2b:02:0a:8f:42:4f:e8:46:ad:8a:d4:b7:e0:7a:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EE:21:E8:6F:E9:E5:96:84:A6:5B:F9:36:4E:5D:F2:B4:2F:6C:AE
X509v3 Authority Key Identifier:
keyid:E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:51:f2:7e:e9:c2:88:32:5d:3d:2e:91:96:b0:4c:24:4e:18:
c2:8a:c1:44:1b:9b:3f:e4:e4:be:7b:41:57:ba:cb:58:f0:91:
d1:8f:1d:2a:a5:8b:e9:32:e7:b4:65:fd:45:f4:18:ff:b9:fe:
39:00:3d:f3:9b:75:0e:28:eb:a7:4b:5a:b2:d7:8e:86:62:8e:
1d:48:eb:74:7f:0e:9d:9f:e3:fc:e8:47:8c:05:45:29:1e:10:
93:36:3e:45:45:3e:59:d8:56:1c:50:91:4c:63:1b:41:ee:f5:
98:12:3e:fb:90:7c:c7:7e:6f:96:ab:88:17:14:d5:91:f7:48:
70:f6:06:6a:c8:f9:36:ef:d3:98:9e:ea:8d:37:e1:7e:8d:56:
fd:15:31:3e:37:e3:3a:56:93:4a:2a:11:d8:9c:db:0a:76:3b:
62:38:3e:5b:6e:2e:ea:63:27:b5:4a:57:2e:4d:ad:1c:30:e5:
93:dd:00:eb:fa:89:67:41:2c:4a:d8:69:f3:57:c2:57:42:c4:
f3:62:a7:c0:28:43:73:d3:8c:f2:88:b7:ed:63:23:d9:ae:d7:
cc:ae:c2:4e:be:8c:9e:11:b7:35:5e:91:a4:18:6c:27:da:2f:
49:52:f9:cf:03:2c:43:68:71:43:61:6b:ba:97:b3:ea:9c:20:
d2:c4:ef:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:47 2025 by rpki-client