Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier: bdrJbwU1HNW19SQ5uMrPo0juYG8OYQvaJgRZL+NawFI=
Subject key identifier: A1:27:C6:74:F4:23:81:84:DE:9C:5F:F0:71:66:EF:97:A1:E7:C3:78
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 0199FDD979E66E4A91BD73A2CB5592A84BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number: 0BB4
Signing time: Sun 19 Oct 2025 19:01:52 +0000
Manifest this update: Sun 19 Oct 2025 19:01:52 +0000
Manifest next update: Mon 20 Oct 2025 19:01:52 +0000
Files and hashes: 1: 4T7ohvim9PbetIc4Qlo9d9QA59Y.roa (hash: mTKqtI5PGB6Qq88qvBp2p7P3TnbGVtFteHmcAmCxgPg=)
2: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: CXbK3jJLuQzJsiqWSvnl1LqZ0exA5WmK53p8Azz+quo=)
3: hoeiky0Yvquu-vh4T1lTnZlhbwc.roa (hash: TG3DycSrjgCYww4lJAKepUSf5xECf8vQNK+sCZjEIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:79:e6:6e:4a:91:bd:73:a2:cb:55:92:a8:4b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: Oct 19 19:01:52 2025 GMT
Not After : Oct 20 19:01:52 2025 GMT
Subject: CN=a127c674f4238184de9c5ff07166ef97a1e7c378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:59:81:4f:f0:a2:bf:70:bf:83:5d:17:39:dc:
44:61:5d:00:29:af:83:0f:d2:cf:05:1f:e0:22:11:
32:33:85:6d:ba:4d:af:08:6f:29:ba:d6:ed:46:a8:
37:94:f1:03:ba:24:18:88:94:19:c4:8e:16:7b:6a:
71:6d:1a:27:72:14:db:de:71:df:c0:68:8c:e3:8a:
0c:31:20:44:4d:8a:9d:1a:f8:d4:04:07:20:4a:84:
d9:d0:1d:9a:51:ee:9d:79:41:50:5b:cc:22:14:f6:
f5:f9:a2:44:e3:db:71:9d:a0:dc:be:b7:c9:e7:17:
72:a5:9a:5f:29:be:88:8e:fc:c8:81:20:da:00:b5:
c7:1c:bd:12:69:51:b3:46:0d:8f:a5:42:38:95:39:
0c:7b:ba:31:c5:ac:4e:91:93:1d:0c:41:1f:b8:c2:
0b:11:11:8b:77:25:9f:b1:a2:0f:0f:77:91:21:76:
2c:a1:9b:54:f1:c4:95:54:1c:6c:75:34:32:38:1c:
e5:3f:de:0e:4c:84:8f:59:27:de:69:8b:8b:5e:2b:
18:a6:c8:12:1e:a2:72:7f:3e:8b:6b:22:59:73:1e:
35:17:79:04:ec:4e:58:26:b8:50:a0:9d:a0:2a:6e:
7c:b9:61:2c:73:83:78:3e:76:29:e7:5c:a6:e2:96:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:27:C6:74:F4:23:81:84:DE:9C:5F:F0:71:66:EF:97:A1:E7:C3:78
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:75:a1:5f:ec:4c:83:d3:27:6e:3d:c6:d9:a8:67:19:65:8f:
93:21:c9:1c:48:f4:51:27:be:f8:01:f0:b3:df:4a:76:a6:2d:
5e:5e:3f:74:24:cf:f1:32:ee:e1:86:ae:c5:22:86:48:1d:ce:
05:c3:50:db:04:61:84:ff:62:e7:b4:ed:72:7a:48:7f:57:fb:
0e:82:ee:d5:47:66:9a:ac:e6:41:db:04:fb:4a:2b:c6:e1:58:
64:2b:ee:7f:d6:5b:06:6f:a6:9c:9b:48:00:83:9a:39:04:54:
67:86:cd:1b:fd:c0:14:a8:96:6c:31:d6:50:8f:7a:2b:bb:78:
ff:78:20:96:41:7c:51:c1:21:12:72:6d:0a:6f:74:62:5b:69:
90:44:82:6a:fc:e9:4a:0f:a8:a1:bd:32:f6:3f:1a:4f:8b:e1:
78:02:b3:39:d7:12:86:ca:a0:e9:43:19:59:3b:19:58:d0:1e:
47:05:9a:9c:d5:b3:c2:10:0b:31:49:15:71:36:23:f1:ce:e7:
14:d9:f2:1d:ba:6e:8b:d4:d2:e2:cf:37:ae:80:68:83:df:eb:
10:8c:b2:74:8e:15:c5:33:f0:d5:76:cd:52:ee:fb:97:7a:f4:
cc:a1:b4:b5:30:1e:26:0a:d7:6d:de:43:7e:d8:b3:05:85:e0:
be:fe:aa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:21 2025 by rpki-client