Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
File: 52m60wYYMt6bfXw3Nzf0NGxsBuY.mft (raw, json)
Hash identifier: wktSfoaPPJp11viifD09OcWJf7rsyMwZfSTMsN6DzIE=
Subject key identifier: C5:68:7B:6E:1D:46:9A:07:42:F3:85:BA:C2:50:94:68:F4:9F:23:18
Authority key identifier: E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
Certificate issuer: /CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Certificate serial: 0198D473B7B55101E3CFBEC3C71979BC282B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
Manifest number: 0AEF
Signing time: Sat 23 Aug 2025 01:03:29 +0000
Manifest this update: Sat 23 Aug 2025 01:03:29 +0000
Manifest next update: Sun 24 Aug 2025 01:03:29 +0000
Files and hashes: 1: 52m60wYYMt6bfXw3Nzf0NGxsBuY.crl (hash: IL21rcArwpijy97vc96zn1kYZiklbcDLbewnuYcleMQ=)
2: lxXNUCeQItpUU-WIqT27d6PPlu0.roa (hash: gRV2uGVItKOTTis9BRa/lRn5duot/VIpG4JMEM2dMPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:b7:b5:51:01:e3:cf:be:c3:c7:19:79:bc:28:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Validity
Not Before: Aug 23 01:03:29 2025 GMT
Not After : Aug 24 01:03:29 2025 GMT
Subject: CN=c5687b6e1d469a0742f385bac2509468f49f2318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:3a:96:fb:e4:14:6d:2b:02:e1:e2:65:fb:
2a:30:4a:ca:a6:be:6c:02:8e:ab:52:41:ee:5f:f9:
c2:94:2a:b7:69:de:5e:b3:58:14:ee:ff:be:fd:88:
2b:16:d0:1c:98:03:b5:2e:2a:c6:b5:a0:2d:71:5c:
ff:8c:26:f6:a9:09:d0:84:31:b8:5f:95:dc:53:34:
14:5d:81:7f:53:b7:22:73:e1:c2:fd:9c:1d:1d:db:
4b:2b:06:e0:b6:7a:46:31:62:ab:0e:bc:00:76:ba:
f8:25:a8:8d:b8:46:75:23:6b:d6:8f:bd:a4:cf:2a:
9e:69:2e:fe:bb:a3:d1:95:9d:c9:63:bd:6c:61:dd:
ab:8e:58:e0:65:b6:f1:89:8d:cb:56:4b:07:e6:4d:
a0:96:47:5a:89:f1:fd:df:62:68:09:d8:64:1c:b5:
d5:30:b0:00:ed:66:eb:77:88:29:8f:f0:d9:08:75:
87:17:a5:bb:1f:59:e5:24:9b:5f:50:96:6d:3a:91:
33:a3:c3:7f:49:78:d5:a7:1d:01:60:d9:c8:ee:c8:
c8:1e:72:67:ad:a0:01:ef:9e:75:f4:f6:d9:55:48:
b3:33:f8:6c:5f:de:66:59:cf:de:65:9c:ee:1e:3d:
d3:7a:6f:48:5e:35:6a:3b:d1:e2:d8:51:ae:3c:b9:
0a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:68:7B:6E:1D:46:9A:07:42:F3:85:BA:C2:50:94:68:F4:9F:23:18
X509v3 Authority Key Identifier:
keyid:E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:22:76:18:e2:3c:61:57:fe:86:54:df:b0:9d:04:97:9f:21:
00:e0:6c:73:6e:a4:9c:ed:b3:12:2e:79:24:0b:0a:2a:c4:bb:
f6:4a:d7:f4:86:24:ea:d7:e6:f5:8a:68:96:36:45:b2:29:f9:
8e:ac:9c:47:0a:76:5e:ea:07:b7:fc:45:93:ce:19:f2:e9:22:
1f:32:ea:fb:4a:4d:65:a1:6a:a3:89:a0:05:7f:4a:42:80:2e:
d1:8d:0d:14:26:1d:24:a2:d7:c0:66:20:1e:22:30:d8:32:c6:
29:fb:c8:8f:60:4d:bc:68:c4:81:76:3a:ae:b5:85:c8:a3:77:
dc:17:79:02:7c:ab:83:a3:7a:dd:ff:d1:47:d8:a8:3f:42:ba:
d7:74:d7:93:8a:73:f8:bc:14:db:b2:3d:85:02:ef:a5:e9:a9:
42:b1:3f:1e:2b:92:20:19:9e:7d:01:c9:e8:5e:87:73:ec:10:
3f:6e:a7:53:12:65:6d:43:12:0a:c7:2e:1d:5f:66:5a:50:67:
c9:0c:5a:3b:a0:e6:f7:16:80:3c:2e:65:78:85:af:df:6a:fe:
4e:80:41:a4:a2:66:bc:e0:dd:3e:ab:af:26:49:41:e2:76:d6:
76:9f:3f:c2:c6:20:cd:a2:38:11:43:ec:5a:32:da:7e:01:8c:
fa:04:fd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:11 2025 by rpki-client