Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
File: 53OduQwc6YQx3zSKE3blOsbgUjw.mft (raw, json)
Hash identifier: mTJifSL2v5hQLKyJUp6WOxAnYXX0iKirSGoMH8+OyvQ=
Subject key identifier: 12:9F:B5:05:EA:E5:C6:CC:A1:3F:18:49:AF:18:BE:71:E1:4D:11:CC
Authority key identifier: E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
Certificate issuer: /CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Certificate serial: 0198D54E44C6DE7F4E1E54031A23271DE09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
Manifest number: 0B67
Signing time: Sat 23 Aug 2025 05:02:12 +0000
Manifest this update: Sat 23 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 05:02:12 +0000
Files and hashes: 1: 53OduQwc6YQx3zSKE3blOsbgUjw.crl (hash: bd7IuqMtUttYBVjmk7osk9jpwwBAWFqd1j1a8kBFWDY=)
2: 5lxNCVmtG-eGQDzqS31HH90R7gQ.roa (hash: UMFun1XpckbWJBcsjucwYOiUnMjxn3AfVM2MpuImkbQ=)
3: J7gZFbpwbQ3l58heUCupO_rw9SI.roa (hash: 3O3YSRLT+CEf3bqQzHcFcD73p8jJc1vMJRrl8kOmCOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:44:c6:de:7f:4e:1e:54:03:1a:23:27:1d:e0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Validity
Not Before: Aug 23 05:02:12 2025 GMT
Not After : Aug 24 05:02:12 2025 GMT
Subject: CN=129fb505eae5c6cca13f1849af18be71e14d11cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9f:f5:3e:80:b9:ac:b9:73:74:c7:0f:ea:64:
6d:d5:90:bf:5d:d6:c6:7e:6a:ad:de:4f:cd:82:e7:
99:6a:a5:94:1f:72:27:04:ea:53:13:fc:7e:f8:66:
da:0c:e2:1d:78:54:d8:c7:5c:22:76:62:c9:f5:ea:
49:b4:03:10:ed:51:66:c1:c7:63:5b:b1:24:b2:d4:
c3:dc:79:d1:9a:4b:cc:b3:2f:78:70:ad:56:95:d9:
11:54:18:fb:91:ac:43:84:94:e6:86:9b:f2:ec:0e:
bf:c3:55:01:59:81:c8:b1:56:92:f5:2e:59:90:5d:
5d:33:dd:30:7e:1b:f6:cd:61:64:f4:2b:1b:af:12:
ce:38:06:ba:93:35:f4:bd:07:23:cb:f1:e4:f8:22:
da:00:6a:76:b4:b2:11:55:b5:44:4f:f3:80:d9:85:
d1:6d:4f:73:e9:6b:39:54:f2:5c:98:83:60:49:df:
e6:99:66:0b:97:d2:b0:5f:11:6f:ff:c2:9a:74:e7:
17:c0:1a:70:cf:ad:fb:d4:58:9e:89:d8:8d:83:3a:
dd:84:08:39:67:74:5e:12:d0:8b:86:9e:85:4f:19:
74:e4:7f:b2:eb:49:62:bf:19:f2:3a:44:df:af:9d:
6e:a3:d0:f2:47:10:21:f4:f2:7a:82:46:fa:cd:70:
f3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9F:B5:05:EA:E5:C6:CC:A1:3F:18:49:AF:18:BE:71:E1:4D:11:CC
X509v3 Authority Key Identifier:
keyid:E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e4:45:18:28:7e:92:4d:af:d1:b2:25:ca:61:d4:ef:53:6b:
73:70:1a:d9:aa:39:87:5d:dd:82:7c:a4:c1:1e:78:9e:4a:1c:
0d:a8:76:82:8a:3a:a2:7b:aa:79:92:5a:d5:5c:77:61:19:76:
ea:68:b2:1b:44:c0:1e:b6:24:23:73:34:ff:de:d6:d2:a3:c2:
4b:c3:a2:53:3e:46:ce:73:b1:56:85:eb:77:9b:9d:8f:4d:d5:
8a:77:57:25:a9:db:f4:e6:f1:8a:eb:66:64:9d:b5:c7:ed:d2:
cb:2f:ab:55:89:38:c1:58:63:0a:60:ad:c8:fc:a7:20:a6:71:
e4:ad:87:4b:b9:f8:29:a7:41:3b:1b:5b:99:1a:87:36:f2:fa:
58:88:de:cb:54:45:c6:92:80:d6:0f:31:91:39:f4:14:ab:da:
e6:2c:8b:1a:b9:0e:36:ee:27:f0:b8:a0:ed:a8:e8:10:94:1c:
e7:f6:0a:7c:a3:58:65:79:ae:4c:e5:82:50:6b:5d:20:68:23:
fe:f0:f2:8a:5d:b1:7b:31:65:2d:57:c4:bd:5d:b8:90:ca:40:
c1:6f:d1:f3:b8:e4:22:5a:08:32:3b:87:2b:18:9b:da:11:46:
45:56:29:21:4d:f8:5e:8b:b9:04:54:50:5a:ec:21:4b:76:2c:
e8:6c:98:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:58 2025 by rpki-client