Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
File: 55XJYXylpqO_8mP8GDeZL9GsR_I.mft (raw, json)
Hash identifier: 9F2DiwT3k3x/vHEi4FeKsO0d0GHbGL15iWZcCELb2L8=
Subject key identifier: 83:7A:C4:9C:2B:7D:9F:3D:01:A4:66:CE:0F:7C:A8:63:65:59:5D:B7
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 0198D54DD01D93E16D0C12A0563F8D856B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
Manifest number: 1329
Signing time: Sat 23 Aug 2025 05:01:43 +0000
Manifest this update: Sat 23 Aug 2025 05:01:43 +0000
Manifest next update: Sun 24 Aug 2025 05:01:43 +0000
Files and hashes: 1: 55XJYXylpqO_8mP8GDeZL9GsR_I.crl (hash: lDEcNHMsn1GIUqTNz9fDpPuIgmoLhXRE5roFe2sjAPk=)
2: fdmY21hE8c4ebVfH7Y8PeaGR1rs.roa (hash: podpEHI3zXhpsNN3dsQSymn1ceGiInhTkIusl9LVsm8=)
3: nx0Nx3RUcjg69TXrkEufTSbs61w.roa (hash: KMtfn4uZNi8ih3qU7QWNp/Rahsd8G3VcGheyTA9UvAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d0:1d:93:e1:6d:0c:12:a0:56:3f:8d:85:6b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Aug 23 05:01:43 2025 GMT
Not After : Aug 24 05:01:43 2025 GMT
Subject: CN=837ac49c2b7d9f3d01a466ce0f7ca86365595db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:34:de:1e:f7:fd:18:f2:31:22:43:f5:38:
6d:96:95:a5:26:5b:d9:11:26:37:14:6c:f9:1b:c4:
b1:f5:4d:57:2e:ec:61:10:b6:7d:e9:ea:f7:f6:83:
fb:d0:32:d9:ae:c1:fc:8c:2e:96:20:1b:03:5e:23:
9a:c3:41:37:9e:00:fd:3e:aa:c7:cb:e3:ae:db:7a:
84:cb:0c:13:13:6b:d2:d3:49:38:5c:3b:ae:e9:f0:
8a:4a:8d:99:66:f0:d9:b0:29:b7:e5:37:c5:76:f0:
74:2b:0f:c9:b1:7c:a4:31:b7:64:54:5e:4c:97:08:
55:1a:c6:66:a2:8a:65:74:d5:69:07:63:65:75:56:
4a:1f:ed:72:ab:30:00:59:4c:86:53:2e:e0:ce:10:
11:58:86:63:5c:d4:89:17:ed:1d:12:14:c6:11:4e:
91:73:60:92:bf:17:12:56:fb:b0:49:86:24:96:fa:
c8:0b:d7:61:5b:0d:b4:4f:8e:50:9b:a3:e9:ee:64:
d9:f0:1d:30:78:99:a0:58:e6:b0:20:78:73:b1:e7:
31:d7:ef:7a:0b:b1:6e:c7:28:b2:d2:7c:b7:8d:64:
39:9a:49:11:69:ea:f8:b4:71:b4:63:0e:e5:e7:94:
de:0a:09:fe:b0:42:0c:24:86:de:1f:56:20:88:00:
19:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7A:C4:9C:2B:7D:9F:3D:01:A4:66:CE:0F:7C:A8:63:65:59:5D:B7
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:de:1f:ec:f0:fa:ef:a3:d2:62:3d:53:44:e2:fc:1b:c6:4b:
50:be:ec:a5:ed:f1:b5:81:c7:4d:56:75:2b:ed:e9:3e:c3:21:
4e:72:9a:a6:40:21:a0:25:b3:9b:11:71:62:48:45:6a:3e:21:
78:5b:87:b5:6b:af:f0:2b:a1:5c:f7:7e:bd:3b:2b:12:34:fc:
c7:d2:89:cf:19:45:0a:a6:00:8f:64:ef:d3:cb:55:7a:a4:ec:
f1:f9:ff:d2:73:d6:82:12:17:1f:7a:50:5c:77:81:51:61:a4:
de:07:0c:86:e3:f2:b0:58:68:2a:90:cb:8e:76:3e:31:2a:36:
56:30:2a:69:71:ef:7d:9c:ee:ab:a9:8c:2a:7f:c6:51:92:37:
aa:b9:81:66:1a:61:95:31:1a:e2:c4:2e:78:ce:78:7a:8e:6d:
d8:ff:d5:1b:49:17:19:75:2d:2b:99:86:1b:12:b3:28:57:36:
b5:8f:70:7c:31:f3:cb:a2:b9:62:5e:1b:b1:44:ab:c2:52:69:
d4:9d:c5:0d:30:c4:ed:48:ef:5d:55:72:0d:95:3c:59:de:12:
3d:24:81:bb:87:91:bd:1d:af:d8:c0:4b:4c:95:ca:b3:b6:de:
68:bf:a3:c7:5b:d6:68:28:ee:69:c5:45:3b:d1:1c:50:2e:f5:
d1:29:e7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:33 2025 by rpki-client