Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
File: 553FQ1otyX42X_SVcMBNUT9vztI.mft (raw, json)
Hash identifier: hVkNAC+b2cwMQMZu7EtsbtZDIOWvFDRyibZiLevH4nw=
Subject key identifier: C2:F4:BA:D7:63:02:70:9F:77:BA:EA:61:15:FD:89:95:9E:84:6D:8B
Authority key identifier: E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2
Certificate issuer: /CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
Certificate serial: 0197B7EA75F2DDBA17632AA85D94CA202D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
Manifest number: 0F06
Signing time: Sat 28 Jun 2025 19:01:25 +0000
Manifest this update: Sat 28 Jun 2025 19:01:25 +0000
Manifest next update: Sun 29 Jun 2025 19:01:25 +0000
Files and hashes: 1: 553FQ1otyX42X_SVcMBNUT9vztI.crl (hash: JGQ5mTwv5tu90j60YBQY/cDKixq8bhNUHb+to1hFdkA=)
2: BxGf4lSFYKHeuXnAyFK6i1JNIxE.roa (hash: CPX9KaqdGijt5ka4UvJo37MrT8M4No8zXRKHLnaECVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:75:f2:dd:ba:17:63:2a:a8:5d:94:ca:20:2d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
Validity
Not Before: Jun 28 19:01:25 2025 GMT
Not After : Jun 29 19:01:25 2025 GMT
Subject: CN=c2f4bad76302709f77baea6115fd89959e846d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:43:31:c6:f4:0e:e8:3b:a0:b0:26:e3:0b:
a4:05:0e:ac:74:5b:af:04:d4:5e:e0:45:80:f1:bc:
e1:25:2c:bd:c2:a6:18:ff:cf:8b:be:f3:7e:06:5c:
1c:3e:5a:ab:39:7f:1c:5e:56:9e:34:16:ef:02:7b:
56:ec:bf:62:c1:76:6c:c5:1e:09:3f:c0:b5:52:a2:
c1:12:bf:7e:76:84:5d:d6:3c:ae:7c:ba:70:96:41:
8b:db:6b:1c:bf:b5:4d:39:d7:e8:cf:72:eb:cd:b6:
b4:3b:11:9e:be:00:3f:87:76:fa:96:29:36:90:70:
31:37:75:a7:30:36:7e:c0:ad:e1:92:61:ca:62:05:
0d:4d:22:65:be:15:47:9f:dd:ec:24:c4:f7:c4:4f:
52:a0:fd:dc:13:dd:51:a8:d7:85:43:5b:99:04:c6:
fe:1f:d0:ba:31:d6:8a:4c:6b:a1:c5:39:92:f4:41:
53:60:20:9c:69:25:dd:82:5c:70:d5:05:62:f8:be:
0f:64:cb:23:1a:8d:41:b3:70:1f:da:8e:61:72:cb:
cb:11:0e:91:ff:21:76:d4:0f:59:63:68:81:1c:0f:
bd:9a:86:05:d7:59:44:83:bf:c0:b2:1d:95:83:be:
8e:85:31:e8:4f:17:04:5f:9c:20:4e:68:5f:1c:e6:
28:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F4:BA:D7:63:02:70:9F:77:BA:EA:61:15:FD:89:95:9E:84:6D:8B
X509v3 Authority Key Identifier:
keyid:E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b1:d2:39:12:29:11:25:00:e3:bd:70:64:5d:51:fb:d2:44:
34:88:20:67:a6:eb:e3:5a:18:67:c6:a0:18:f5:0e:1c:19:77:
2f:77:18:ea:29:9a:7e:ce:00:1b:77:a5:d0:de:93:38:fa:6d:
6a:c9:ed:17:dc:15:69:fa:5d:e9:54:40:64:c3:9d:c8:1f:c2:
d8:4a:ec:d0:da:89:ff:11:ff:f6:54:55:d5:54:60:53:5d:e2:
07:f0:dd:1d:af:0c:f2:95:1b:e4:05:d5:9f:91:41:5a:e5:57:
e9:a4:1b:00:00:79:5c:74:56:03:10:11:22:aa:2e:09:e2:89:
ae:db:8f:5f:7a:17:2c:37:10:85:a5:c0:3e:77:b6:51:71:ba:
2a:b7:cc:0f:af:d3:4f:f8:7a:ec:a7:fc:e7:51:d0:cb:13:74:
28:80:34:fd:1d:cb:3e:22:6a:60:01:05:25:64:78:28:d2:d1:
bb:c2:d6:05:63:bc:76:d2:58:e7:85:5b:b8:e8:c3:7e:6b:cd:
74:29:e9:a1:68:94:04:50:5a:6c:5e:1a:9d:42:3b:99:da:91:
e2:53:b5:68:95:1d:5b:53:ba:04:c2:40:68:f1:db:61:58:d7:
7d:d0:40:34:8c:7f:94:a0:c1:f8:12:86:d4:24:bb:2c:e9:4d:
21:77:05:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:53 2025 by rpki-client