Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
File: 54ul2Y1Izr1a0EwIvwkIKxKn46s.mft (raw, json)
Hash identifier: 62r6S/AwZxZx+nu08rRXizJr7BIxDEi2IdF+HKN30gI=
Subject key identifier: 98:89:AD:81:77:9D:1A:61:07:6B:CD:DD:DB:86:19:48:92:18:27:27
Authority key identifier: E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
Certificate issuer: /CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Certificate serial: 0199FAA16DA974DFDF8FDFEB54167D8E931E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
Manifest number: 0A41
Signing time: Sun 19 Oct 2025 04:01:47 +0000
Manifest this update: Sun 19 Oct 2025 04:01:47 +0000
Manifest next update: Mon 20 Oct 2025 04:01:47 +0000
Files and hashes: 1: 54ul2Y1Izr1a0EwIvwkIKxKn46s.crl (hash: llPcMRpJRny/0x4t/kDG8qZI9MZcoFvildvpvldj7IQ=)
2: QHaAgYTixdhk1ePZKybxFMUfPdM.roa (hash: Jd+34KxJqDnIgGzG2TDhmQ4nztMHifN1bC7dBSLpDiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:6d:a9:74:df:df:8f:df:eb:54:16:7d:8e:93:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Validity
Not Before: Oct 19 04:01:47 2025 GMT
Not After : Oct 20 04:01:47 2025 GMT
Subject: CN=9889ad81779d1a61076bcddddb86194892182727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:eb:1d:c3:21:a6:5d:21:8e:1e:33:ba:a6:dd:
1d:84:2c:2a:c3:c9:48:15:82:b4:a7:b4:7d:06:f5:
88:c2:a9:dd:fd:21:cf:75:4c:38:2d:4e:19:16:4f:
da:29:07:bd:2b:2e:cc:f9:fa:05:4d:ae:a8:79:0b:
30:74:b7:50:c2:fb:02:bd:e1:91:cb:f4:d8:cd:02:
d8:eb:6d:33:f8:ab:27:5d:1b:c5:a4:83:1a:a2:8d:
ba:9a:d8:6c:6e:f5:7b:3f:16:4e:6e:ca:2c:05:a5:
ce:ed:ff:b9:15:11:c3:ca:8b:b0:ce:be:fb:1f:f1:
1e:f4:a6:97:3f:b4:d5:77:08:2d:81:e7:54:a8:6c:
89:82:1c:cd:b7:75:87:c9:d5:6e:a3:1f:d1:be:cd:
8e:30:be:77:05:af:dd:d6:91:e4:83:51:69:6a:ca:
61:f0:87:7b:20:a7:3b:ed:b5:99:16:f7:1f:a2:8c:
98:18:3a:03:fb:cf:ce:04:49:8e:b1:96:38:f5:44:
03:be:91:a1:29:58:27:af:0b:fc:20:a8:a7:c6:f0:
9d:ec:8b:78:2d:02:ca:37:e2:07:a9:0d:05:23:b6:
98:5e:7d:3e:4c:f3:ec:53:bf:4d:37:f8:20:bd:6d:
a8:40:2b:eb:5d:3c:b5:cd:1f:28:d2:4e:f8:b1:9c:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:89:AD:81:77:9D:1A:61:07:6B:CD:DD:DB:86:19:48:92:18:27:27
X509v3 Authority Key Identifier:
keyid:E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f6:be:11:2c:3b:38:f4:d4:5c:d6:b9:5c:1b:b1:fd:f1:2b:
2c:f5:a5:de:f8:f1:41:17:98:47:91:ab:d2:37:2a:b0:58:19:
99:7c:a0:05:34:cc:ce:94:43:e8:ae:80:b3:11:e0:56:38:a9:
6c:36:48:70:66:87:71:f9:ea:3a:69:0d:b2:a8:a7:70:0c:ab:
9c:73:d4:7f:dc:f6:b4:d8:79:e4:f9:74:d5:c8:02:90:68:c5:
a4:d1:db:5f:c4:50:cd:05:be:a0:08:9e:3e:05:ac:30:8d:25:
41:e8:9f:98:66:c1:a3:22:92:07:e6:85:23:a6:33:84:9d:53:
ad:7d:7d:20:c0:4f:89:60:9e:88:76:05:c7:05:ff:7a:05:5e:
8d:90:7a:58:55:03:d9:50:3a:60:97:e5:99:c8:0d:4f:7b:31:
37:76:74:f7:53:66:f7:3c:77:b3:c4:d5:11:3a:0a:12:01:2b:
5f:1d:0b:f6:df:45:44:52:dc:a7:b4:94:00:08:6f:bf:89:7c:
7d:bb:64:7a:c9:37:3a:b4:79:a7:bf:cf:91:7e:a1:49:9b:bc:
75:81:83:19:81:2f:33:29:bd:b0:89:c0:63:3d:0d:47:af:4a:
f0:63:00:a1:b4:ee:95:5a:4d:d6:50:4b:99:72:ee:77:7a:85:
06:7e:20:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:12 2025 by rpki-client