Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File: 01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier: Mc9UgMImVIWg3hWNx08A+kOGHulvMVZD3/w/HimMCYo=
Subject key identifier: A2:D7:46:16:45:AA:F6:75:39:4F:D9:B4:2C:F7:56:E0:6D:1D:5F:14
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer: /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial: 0198D51608933CEEF4DBA7ACFA8DA4FF6996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number: 0553
Signing time: Sat 23 Aug 2025 04:00:47 +0000
Manifest this update: Sat 23 Aug 2025 04:00:47 +0000
Manifest next update: Sun 24 Aug 2025 04:00:47 +0000
Files and hashes: 1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: sYAeYF/ufMuuzCWPr4Sl579Ld1EVmAisLxOP0+4+Pic=)
2: WJYo92ZVpAUd1BuZPEnAl356iuU.roa (hash: zcoBYroeH3hhjkU4dDCY2xfjvG2eq71PoTaXan33w2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:08:93:3c:ee:f4:db:a7:ac:fa:8d:a4:ff:69:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Validity
Not Before: Aug 23 04:00:47 2025 GMT
Not After : Aug 24 04:00:47 2025 GMT
Subject: CN=a2d7461645aaf675394fd9b42cf756e06d1d5f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:96:12:f5:96:ec:5a:03:88:fe:a9:dd:e5:
68:57:ab:8d:e7:90:86:0c:21:98:07:f7:ee:e3:89:
58:92:4f:36:05:98:92:73:69:07:4f:89:79:ca:83:
b7:fe:29:1f:73:d6:61:ed:60:65:6e:93:5a:50:a5:
6c:1d:a5:8f:9c:5a:f7:9b:61:50:e2:bc:91:e6:f0:
5a:17:e6:6f:1e:f2:be:e2:cf:95:be:4c:c1:7d:f7:
de:15:fa:84:b5:39:b9:3f:ac:42:c1:76:58:db:e9:
fc:7c:9a:d4:86:41:3d:16:23:85:f1:e6:7b:f1:67:
0d:1f:11:54:69:4b:8a:22:31:c7:f9:db:d7:54:62:
21:bf:ff:c4:ad:c5:17:ce:68:9c:9c:0f:10:23:67:
77:54:67:8b:6f:b2:ce:ad:93:4b:8a:7f:b8:b2:94:
1c:a2:07:d5:59:e8:6f:f7:e7:9b:3a:7d:bc:28:c1:
be:aa:ed:c4:82:6d:8a:7e:51:3b:21:19:8d:ad:0d:
bd:6a:a8:4d:66:d6:98:d2:8b:c5:39:f6:50:54:7b:
6c:53:da:4f:80:4e:3e:74:fd:0e:27:13:43:36:99:
16:0c:99:9a:58:01:7b:46:41:c9:22:8c:8f:f2:f4:
d0:85:15:5f:ec:e3:80:d6:84:8c:79:94:b2:54:e3:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D7:46:16:45:AA:F6:75:39:4F:D9:B4:2C:F7:56:E0:6D:1D:5F:14
X509v3 Authority Key Identifier:
keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:24:45:bd:3a:d5:96:fa:e9:6e:8f:9f:cc:0c:0d:20:59:2e:
36:40:19:78:0c:5b:fe:1b:b4:b6:0b:9c:38:df:f9:c1:36:2e:
15:34:92:93:80:ce:3e:d9:8e:fe:d5:84:5c:46:20:97:1e:ca:
80:59:01:77:7d:41:79:72:a5:08:bb:73:b9:50:b3:18:fb:f5:
37:6e:0e:ba:e4:06:70:98:40:5e:20:33:a9:7a:80:ce:41:b8:
0a:7b:3c:b4:19:73:00:75:7c:f2:0c:82:f8:ef:57:7f:bf:58:
7c:e8:a7:08:1d:ca:0b:b0:1c:70:2c:93:94:be:64:56:d7:31:
d1:cd:85:36:59:6f:b1:07:e0:a0:28:80:92:06:95:ae:ee:df:
01:5f:e2:bc:7a:8f:59:88:19:34:8f:30:3f:fa:96:e7:6b:54:
63:fc:b8:1f:13:75:52:32:d4:a8:77:08:e3:be:33:a2:bc:db:
d6:6c:4e:21:9a:53:fc:24:ec:30:0d:45:93:21:a1:9f:ff:70:
b3:6e:37:dc:2c:ad:ae:9b:ab:5f:5f:2c:14:1c:a0:a6:03:2d:
fd:af:ca:0f:34:8b:70:2c:4f:2c:6e:3f:e5:54:65:1b:f3:24:
36:a3:28:3f:95:e7:e0:a1:8a:4f:22:59:0f:71:89:9b:56:38:
71:3c:d5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:23 2025 by rpki-client