Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
File: 53OduQwc6YQx3zSKE3blOsbgUjw.mft (raw, json)
Hash identifier: varhd7La5fGhnv5Xaa2nvCyx5sEovJ6v2i9J7zkJPJ8=
Subject key identifier: 93:A3:09:19:E5:06:85:29:EE:B5:F5:DA:95:22:85:A9:5D:09:4F:21
Authority key identifier: E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
Certificate issuer: /CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Certificate serial: 0199FEB50A332E41A31B5C61AEC9216946A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
Manifest number: 0C01
Signing time: Sun 19 Oct 2025 23:01:41 +0000
Manifest this update: Sun 19 Oct 2025 23:01:41 +0000
Manifest next update: Mon 20 Oct 2025 23:01:41 +0000
Files and hashes: 1: 53OduQwc6YQx3zSKE3blOsbgUjw.crl (hash: Jy7vw9GXS5iApJAe5/KsBZpbLwVx3V5dE74xxsIHeBk=)
2: 5lxNCVmtG-eGQDzqS31HH90R7gQ.roa (hash: UMFun1XpckbWJBcsjucwYOiUnMjxn3AfVM2MpuImkbQ=)
3: J7gZFbpwbQ3l58heUCupO_rw9SI.roa (hash: 3O3YSRLT+CEf3bqQzHcFcD73p8jJc1vMJRrl8kOmCOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:0a:33:2e:41:a3:1b:5c:61:ae:c9:21:69:46:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Validity
Not Before: Oct 19 23:01:41 2025 GMT
Not After : Oct 20 23:01:41 2025 GMT
Subject: CN=93a30919e5068529eeb5f5da952285a95d094f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:39:12:91:02:b3:3e:3f:af:b8:74:2b:ab:
cb:2c:9b:83:a5:66:73:0e:e8:67:c0:77:80:8c:6a:
e0:46:b7:2f:35:03:76:77:3f:0b:10:24:f3:94:7e:
77:aa:d8:d4:08:12:64:eb:90:55:b6:49:a1:84:d5:
d3:ce:8b:bf:f4:c8:57:1b:98:ad:86:34:d8:f5:8e:
bc:fd:f8:2c:31:88:c0:14:74:e1:a6:de:d8:e9:00:
e1:ae:fb:b2:f4:ad:82:3b:6a:17:58:58:b8:4e:db:
62:83:64:ed:ac:bb:26:7d:41:0c:d5:97:c1:92:d4:
37:e7:01:6e:65:f0:4e:00:d8:53:c6:aa:a9:c8:e4:
ed:01:22:6a:5a:47:6f:15:d7:61:3f:e2:73:fb:fd:
65:1d:73:5d:f6:f6:35:eb:bc:15:4c:65:3a:f6:09:
4c:7f:64:8d:1e:55:c2:9b:26:af:53:ce:24:f8:3d:
41:00:8f:a3:b4:00:8f:bb:63:20:c3:88:f4:92:70:
fc:57:62:16:5f:92:3e:b6:c7:17:c5:bd:bf:73:d4:
3a:8b:a1:b8:40:54:7e:69:ca:ea:14:62:1d:36:c1:
03:94:08:7e:88:08:32:d9:61:66:5a:e8:d5:e6:97:
54:ba:27:f8:2a:73:b6:eb:3a:23:0c:8d:14:09:7a:
af:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A3:09:19:E5:06:85:29:EE:B5:F5:DA:95:22:85:A9:5D:09:4F:21
X509v3 Authority Key Identifier:
keyid:E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a6:a4:36:35:ee:69:0c:1f:52:51:55:c4:4e:d9:c2:3e:cb:
aa:6b:4a:ee:b1:64:c5:3e:e0:fd:4a:61:5e:f7:93:8f:a2:2d:
02:16:9a:3d:df:e1:05:c0:33:97:9b:ad:a6:7a:96:04:35:2d:
e7:58:6e:b3:d1:3c:9a:45:3b:10:c4:5c:df:a8:c2:04:7f:bb:
d8:fd:14:b5:62:b9:ff:ed:13:93:e4:cb:f0:25:0f:3a:f9:e6:
c6:15:15:45:a3:fb:98:0b:63:a2:ac:e0:61:bc:f9:61:5c:9b:
f9:60:5e:4b:3e:bc:70:8a:fc:7f:e5:3a:e8:a1:98:13:e9:e3:
87:45:af:63:00:1d:1b:a3:3b:5d:28:65:b2:3e:43:f2:fa:00:
42:7c:ca:70:c6:5d:32:62:28:dd:18:2e:dc:34:bd:8b:f6:20:
e6:2e:5a:a0:51:b4:31:b8:0f:20:e2:9e:20:6c:6a:8c:18:8e:
cd:97:01:4c:d8:15:42:41:16:74:7b:58:a1:7e:12:b9:dd:6d:
6d:f7:6a:93:4d:bf:d8:02:0d:ed:d2:88:ac:5a:2a:0d:90:a5:
37:7b:89:2e:6b:96:92:cf:a4:91:71:9f:46:5b:0e:ae:73:f1:
74:b3:91:fe:90:55:d1:e5:e4:95:97:c7:04:7a:24:95:2f:22:
be:ad:40:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:02:24 2025 by rpki-client