Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
File: 52m60wYYMt6bfXw3Nzf0NGxsBuY.mft (raw, json)
Hash identifier: R1QlyJavCOXcg+Qi0/5TzZPXngXIdW7eJeqR3kQxhNE=
Subject key identifier: C4:40:E7:93:F0:7F:A8:5F:37:FC:B3:34:EC:A1:A6:9E:12:5A:CB:B7
Authority key identifier: E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
Certificate issuer: /CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Certificate serial: 0199FBEB0D03A7911414CB6C9CD04874EFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
Manifest number: 0B88
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: 52m60wYYMt6bfXw3Nzf0NGxsBuY.crl (hash: Ndi/9ttD0nbD1sQgR9h4XIdpD7Sz2HHf8cJM/QbcPyc=)
2: lxXNUCeQItpUU-WIqT27d6PPlu0.roa (hash: gRV2uGVItKOTTis9BRa/lRn5duot/VIpG4JMEM2dMPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0d:03:a7:91:14:14:cb:6c:9c:d0:48:74:ef:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=c440e793f07fa85f37fcb334eca1a69e125acbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:15:b9:4a:3c:08:44:59:27:eb:9a:bd:b0:f7:
23:fc:f9:f0:83:af:ce:64:8a:82:c6:43:c9:3f:fe:
85:49:79:8c:27:ff:f4:76:f8:08:f1:b6:f0:c5:a0:
ff:9a:c6:64:43:83:a9:e9:2a:eb:d0:dd:46:b8:ed:
1f:ba:0e:61:0c:65:6b:e8:df:64:60:ee:3c:95:7a:
fe:34:12:e3:9e:f5:b0:c1:dc:16:ac:db:1d:f9:f7:
c8:25:df:fe:a9:cf:44:6a:a3:b9:13:39:84:d0:d4:
f9:5c:84:60:62:09:5c:c4:de:9d:07:fc:80:2e:f1:
d4:0f:8b:c1:55:70:5c:30:ec:9e:74:bb:44:51:31:
7e:92:c3:96:8d:9c:ef:ce:a9:c0:01:69:7d:6e:74:
c8:a3:e4:2f:67:03:79:b0:15:5f:b7:2b:bb:ab:d1:
19:e9:8a:48:9c:d9:fc:5a:c1:82:f3:70:cc:df:60:
aa:8c:eb:3d:00:e3:55:5f:b3:4f:e3:03:1f:33:66:
b8:66:dc:01:e9:f3:d0:13:89:91:2e:28:5f:aa:1b:
d9:01:8c:90:51:30:9a:37:be:df:70:32:e0:ea:da:
60:5a:fe:26:1c:48:ba:9d:76:41:32:90:15:76:26:
2c:70:2c:3d:11:a5:18:17:8f:24:7f:17:ab:2d:81:
b4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:40:E7:93:F0:7F:A8:5F:37:FC:B3:34:EC:A1:A6:9E:12:5A:CB:B7
X509v3 Authority Key Identifier:
keyid:E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1b:a5:88:8e:ad:ae:22:ae:91:d0:b0:16:3b:ad:ea:07:96:
1f:dd:cf:a1:2f:c9:93:86:d6:95:04:a8:94:fd:4a:63:81:db:
45:ca:28:99:23:6e:07:2e:14:0c:d9:a2:07:9c:56:e9:ba:36:
5d:28:e4:61:b9:f5:0b:6a:6e:86:26:77:21:b3:33:7d:a2:48:
63:6a:81:d0:86:79:39:87:35:be:a5:fc:0d:d3:91:f4:bc:3e:
85:c7:b3:a7:3e:9e:96:e3:04:28:83:a3:36:b5:ab:fc:05:32:
11:73:84:e9:c3:1f:8a:c8:40:63:65:3d:e2:75:37:3e:ca:26:
59:aa:58:ae:4e:c2:91:7a:e6:4e:aa:91:2e:16:89:5a:e3:8d:
82:5e:79:d6:bc:36:3d:2b:ae:0e:d5:e2:a1:34:1f:6f:fa:ae:
e8:b1:3c:5c:61:9d:94:b7:85:a1:de:8a:57:cb:f1:5b:ba:96:
5d:c1:4e:42:30:14:b2:23:03:af:65:e5:6e:13:2b:76:2b:ac:
f1:47:f1:1c:c0:78:e7:c7:b2:47:b9:08:5e:90:74:5a:6f:6f:
d3:0b:ec:de:65:6b:71:47:d2:bb:eb:15:9d:dc:bf:62:4c:29:
5e:e5:2e:af:b7:8d:90:a9:0e:ba:70:01:09:ac:3d:9c:fc:2b:
a2:5b:ba:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:55 2025 by rpki-client