Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
File: t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft (raw, json)
Hash identifier: rLA2jt6Ca1xFDlYhrIaiYvYrzW2lKKTapuRtespNn+w=
Subject key identifier: D2:CA:AD:19:27:99:4C:27:23:AE:E6:36:D9:16:C6:F3:8D:72:77:87
Authority key identifier: B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
Certificate issuer: /CN=b79de9458d190e634329f9df1503b5222c1624ee
Certificate serial: 0198D660AF4AAD0B8D556474C20A21BAFC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
Manifest number: 085A
Signing time: Sat 23 Aug 2025 10:01:57 +0000
Manifest this update: Sat 23 Aug 2025 10:01:57 +0000
Manifest next update: Sun 24 Aug 2025 10:01:57 +0000
Files and hashes: 1: 33E6U-90LI21C0lkTnzQ6VfaiXI.roa (hash: t0pnwqLcy2OtfvtukL13J3l3uzKc9VJEEKWY4aTDjS8=)
2: KTNKEz9B68iNvMGQpqql8Umd6Rg.roa (hash: 4c3WZli6HrqpP5XT4I7aYzD+h8A8/oNoRJSDq9oByhk=)
3: t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl (hash: wTDTpnOQOPK3R12wDpGm5Hmluzyn/XFXIkBPtgGsPx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:af:4a:ad:0b:8d:55:64:74:c2:0a:21:ba:fc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79de9458d190e634329f9df1503b5222c1624ee
Validity
Not Before: Aug 23 10:01:57 2025 GMT
Not After : Aug 24 10:01:57 2025 GMT
Subject: CN=d2caad1927994c2723aee636d916c6f38d727787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:83:8e:00:fb:bd:1c:7f:5b:45:2d:09:22:
d5:e4:00:84:63:2d:cd:be:4a:78:c0:2e:b5:ea:d8:
db:5a:98:49:77:fd:17:b3:9e:36:99:da:a1:2c:f1:
a9:6c:26:25:ef:11:06:1e:c7:44:c0:45:46:77:41:
9f:d8:d1:aa:26:60:82:b6:e7:34:0a:5d:ba:41:f7:
8c:6a:a9:a1:a6:c3:c3:4d:6d:ab:1e:30:ec:6f:0c:
97:08:39:43:72:c1:05:ca:fc:a2:b2:b5:64:f8:d6:
d0:77:5b:57:23:aa:58:97:ab:67:e9:32:cb:54:8a:
88:69:54:fc:04:53:99:98:14:f2:a1:f6:07:38:ff:
bd:52:b7:b6:bb:02:a1:c2:52:ad:38:c2:16:af:02:
0d:6f:9d:2b:d9:9a:12:ad:48:db:c2:8f:55:22:8d:
e4:2e:7a:f4:d8:38:2c:91:1f:16:e7:c2:33:be:a2:
91:5b:04:1c:f7:a8:19:ae:78:90:7b:f4:b0:7f:4b:
75:a0:2d:0b:a5:ec:04:56:a2:62:c0:a9:98:ef:ff:
83:e5:96:47:14:0c:89:c4:41:39:e0:94:8b:73:0a:
bb:54:6f:01:c6:cb:b0:37:83:db:da:8f:10:b1:8f:
71:9d:98:6a:20:9c:6c:5d:da:ce:e6:dc:68:ae:a9:
fa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CA:AD:19:27:99:4C:27:23:AE:E6:36:D9:16:C6:F3:8D:72:77:87
X509v3 Authority Key Identifier:
keyid:B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f3:ff:dd:cb:9a:a1:eb:86:d0:03:42:41:39:79:50:97:b2:
f2:ba:34:59:ca:14:5c:18:4b:4c:e6:4a:0b:e2:42:70:52:e5:
4e:8b:f0:32:47:bc:f8:f4:fd:d6:f2:1f:02:a5:9e:ee:2a:c9:
c4:97:aa:19:2c:a4:0f:f3:dc:d5:c3:89:c2:62:86:69:e8:fb:
60:ee:29:73:9f:dc:66:b6:c4:c6:2e:9b:46:fe:b0:5e:16:62:
ac:e5:74:9a:93:43:2e:96:b6:e0:78:3e:62:23:0c:3e:cf:6d:
9b:d1:50:13:50:ed:ad:42:47:88:0d:d8:fc:02:c5:61:47:0e:
ce:e1:35:f0:76:30:f1:aa:d1:47:27:59:49:b4:59:a7:df:89:
7b:69:5e:27:fb:fa:ce:24:b6:49:c0:f9:fc:ab:e9:cd:46:e5:
e2:10:46:64:3b:c1:7e:8e:a4:73:fc:8b:90:3c:2f:56:b9:27:
33:68:24:28:c7:a4:aa:09:37:ec:3f:e9:7c:e8:c7:89:9c:48:
5c:60:5e:66:da:47:28:b3:60:5f:65:6c:d5:d6:79:53:27:5d:
91:4c:a5:c9:d8:d8:cf:55:11:e0:cd:3a:4f:e0:72:4f:ce:66:
1e:31:39:c9:c3:64:38:2a:55:87:02:b7:4a:a0:e3:96:7a:73:
e0:ed:bb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:18 2025 by rpki-client