Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
File: 53bFGYDHUepeMd3ayO9h-1bJcA8.mft (raw, json)
Hash identifier: YRiPV41a/0FhT7eig8qMjBOrDvwF0PAEWII62MrNmP0=
Subject key identifier: 5D:A6:71:9A:83:5D:2B:8C:ED:28:D0:DB:F1:C8:BE:75:20:CC:94:D6
Authority key identifier: E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
Certificate issuer: /CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Certificate serial: 0199FE102E3C77109D2C5FC873ADCAF23C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
Manifest number: 02F6
Signing time: Sun 19 Oct 2025 20:01:37 +0000
Manifest this update: Sun 19 Oct 2025 20:01:37 +0000
Manifest next update: Mon 20 Oct 2025 20:01:37 +0000
Files and hashes: 1: 53bFGYDHUepeMd3ayO9h-1bJcA8.crl (hash: jWjJ8HfktEcA+PZ4DZyUwaYH4zfEyhG50XPGAbX/xDs=)
2: MSnHBIOL0Bltj-Q0mkBqryaUsS4.roa (hash: R8xRgK2CEN6mE5gSyGtBAs14gnmUzJFq4i62UURLtRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:2e:3c:77:10:9d:2c:5f:c8:73:ad:ca:f2:3c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Validity
Not Before: Oct 19 20:01:37 2025 GMT
Not After : Oct 20 20:01:37 2025 GMT
Subject: CN=5da6719a835d2b8ced28d0dbf1c8be7520cc94d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:cf:cd:92:1d:db:49:2d:48:ae:9f:14:84:
73:e5:44:bf:90:66:5e:57:d4:75:1c:4c:32:7f:fc:
c3:3b:39:68:75:f0:58:95:19:fb:5c:82:57:a4:84:
a9:15:2e:1f:2e:10:f3:f1:9c:0b:6c:8d:1d:70:3a:
a2:ec:1d:ec:ae:4c:c9:02:ef:2f:87:f8:2d:15:b5:
8f:2b:59:c1:5a:73:21:f8:ad:d8:db:92:44:fe:96:
d2:44:63:0a:de:d5:9f:27:b5:46:61:81:99:08:1b:
63:e2:4c:4d:8d:69:82:99:cf:fe:37:27:74:22:b5:
75:01:8f:72:98:03:34:9b:0c:e8:d9:7d:ee:28:30:
c2:2d:9a:b5:f7:9a:42:80:7f:a6:4a:64:a0:a3:3a:
47:16:c0:73:5d:7c:d2:f0:d6:79:d1:b6:86:ce:81:
70:a1:53:fb:48:06:fe:da:43:a5:83:24:78:6b:68:
8f:d5:af:f7:ce:87:51:e5:51:aa:bc:d0:9d:16:0e:
07:93:a2:58:d8:63:1b:e0:5f:6d:4a:ed:48:bf:a3:
61:67:cb:a9:d9:ba:43:c9:61:f9:41:92:6b:fc:8d:
e2:93:b2:e7:74:b6:49:59:92:7a:10:0d:18:b5:33:
f7:8d:cf:af:de:88:b3:7c:5d:dd:77:53:f2:5f:42:
6c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A6:71:9A:83:5D:2B:8C:ED:28:D0:DB:F1:C8:BE:75:20:CC:94:D6
X509v3 Authority Key Identifier:
keyid:E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c6:16:17:0f:8f:94:d5:6c:1c:d6:13:8a:12:dc:30:24:7e:
b6:64:af:9b:f1:da:28:78:8f:dd:a5:ae:c2:ce:64:85:3b:99:
9f:4f:6c:44:a8:79:58:f5:36:4d:88:12:5f:ed:d5:45:91:8b:
b2:89:17:2d:a7:84:c8:7e:9c:7c:1d:55:c0:a8:6d:f3:80:f9:
de:d5:f7:39:aa:da:80:21:dc:d0:a3:79:fd:b3:26:aa:e6:59:
7e:63:73:fc:e8:01:59:fa:3e:84:96:f8:4e:6e:f2:e7:51:f1:
f8:78:82:0a:58:a1:d7:0f:d0:af:5f:8f:0e:c3:bc:ac:c4:31:
0d:6c:2c:6d:9d:95:97:0e:59:40:e6:45:45:39:19:6e:8a:f0:
c2:52:38:84:bd:1d:b8:82:71:38:64:92:e9:2d:35:d4:f5:59:
33:04:03:59:c7:8a:dc:a8:a8:6c:26:67:b0:0b:3c:27:19:5d:
e9:a6:e4:aa:59:c6:50:0d:62:41:9a:8b:ed:eb:53:b5:34:51:
a6:e0:19:53:2a:d6:d3:d6:0a:98:f2:44:77:a5:96:63:75:98:
5e:28:ae:f3:01:5e:61:fe:26:e5:e9:f8:69:27:9e:c3:82:b2:
0f:49:cd:be:9b:74:85:7b:6d:c7:56:5f:bc:2c:f8:bb:9e:f5:
09:01:8e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:10 2025 by rpki-client