Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
File: 553FQ1otyX42X_SVcMBNUT9vztI.mft (raw, json)
Hash identifier: GZn3UB9CTuSnuRb8a8hkD11rTFMjT8jnXqTXbxhyGRQ=
Subject key identifier: CA:90:98:6D:FB:00:FA:86:BB:23:C3:4B:CF:FB:BD:4C:62:6D:81:E8
Authority key identifier: E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2
Certificate issuer: /CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
Certificate serial: 0198D5BBAD8A67098FE42549041496FD8520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
Manifest number: 0F9A
Signing time: Sat 23 Aug 2025 07:01:43 +0000
Manifest this update: Sat 23 Aug 2025 07:01:43 +0000
Manifest next update: Sun 24 Aug 2025 07:01:43 +0000
Files and hashes: 1: 553FQ1otyX42X_SVcMBNUT9vztI.crl (hash: ZwOVuyfNFpZgkVewlWSAgXhrniOeEgxCw3GOj6mxWEo=)
2: BxGf4lSFYKHeuXnAyFK6i1JNIxE.roa (hash: CPX9KaqdGijt5ka4UvJo37MrT8M4No8zXRKHLnaECVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ad:8a:67:09:8f:e4:25:49:04:14:96:fd:85:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
Validity
Not Before: Aug 23 07:01:43 2025 GMT
Not After : Aug 24 07:01:43 2025 GMT
Subject: CN=ca90986dfb00fa86bb23c34bcffbbd4c626d81e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:5d:45:d1:b0:d3:ba:19:6e:e5:3b:97:c0:
9a:a0:34:9b:38:ee:0d:2d:55:24:f6:0c:36:95:27:
74:2c:f4:ae:71:ac:55:5c:b5:aa:e4:26:fd:a6:1f:
7f:f0:6b:43:1e:94:64:d4:c2:69:84:75:be:41:e2:
8c:b3:a6:20:1c:d3:1d:e5:cc:55:39:9c:ac:a8:87:
cb:a8:05:86:d4:a2:cf:ea:27:8e:e0:04:1c:a0:4d:
cf:af:c3:52:01:2c:1b:39:98:89:33:06:6a:d1:51:
1c:91:af:e8:22:c0:4e:e1:5b:86:8e:6f:c7:49:f2:
80:a7:96:7d:0f:0b:04:9d:a1:af:a3:21:e2:45:40:
ae:ba:4f:42:95:3e:bd:57:b7:b4:a0:84:1d:56:e1:
60:ec:a5:59:9a:0a:d3:49:1b:39:cf:c3:a1:61:b2:
18:8d:c4:7c:26:3d:69:87:9a:03:0f:b1:ba:af:f8:
97:96:0d:ad:2c:a7:2f:4e:00:a5:6d:6c:0f:4d:63:
e0:71:a5:3d:52:a2:22:7c:e6:94:5d:2b:21:17:b0:
ca:8b:ac:f6:32:a7:b6:c9:17:20:9d:b8:23:eb:2d:
d9:d9:5d:4b:f2:a4:2d:87:46:1e:93:25:62:71:a7:
48:b0:d1:1f:b2:72:ff:ea:2c:c7:3d:8a:84:57:6c:
cc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:90:98:6D:FB:00:FA:86:BB:23:C3:4B:CF:FB:BD:4C:62:6D:81:E8
X509v3 Authority Key Identifier:
keyid:E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a9:f7:d1:25:17:f9:2f:e6:85:4d:e5:7b:0d:18:4b:b7:9d:
be:c9:df:8e:bc:d7:bf:fe:e7:53:07:47:b6:7d:9e:77:a4:92:
c7:9e:54:9a:ab:04:29:d2:7f:c9:07:75:f4:1a:2f:e8:31:05:
a2:57:f4:7b:08:95:6f:21:8d:1d:09:fd:53:66:1d:f6:ef:aa:
49:a6:81:70:88:69:73:59:87:9b:dc:40:56:bf:0e:fc:e3:24:
a3:31:01:0d:13:4f:6a:6c:ef:40:56:09:92:9a:90:21:85:b5:
3f:61:ec:97:eb:35:7b:db:a2:b9:07:40:e1:ef:57:68:6e:a1:
cd:d1:85:e2:af:d9:23:cd:07:b6:20:7b:16:8a:44:01:d0:ca:
d5:ca:dd:7e:41:5e:b7:14:9e:93:24:b1:e4:09:6f:15:82:15:
33:63:1a:ee:11:6f:ea:38:85:e4:30:f9:89:5a:1c:7b:09:f0:
1a:bc:2a:7a:55:f5:30:a2:4a:da:75:55:38:fd:89:b9:0e:15:
69:3e:3c:0b:e6:24:bc:91:85:9c:7a:06:43:ea:f1:1c:db:1d:
ba:cb:de:27:2f:0c:ab:55:1b:a9:b1:20:29:3d:8a:dc:93:69:
c6:0e:62:43:26:79:44:35:9a:dc:7a:f8:cf:45:9e:4e:40:af:
55:76:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:36:03 2025 by rpki-client