Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
File: 53A2AA1601CC09214461D03CA771ED50EC1D6325.mft (raw, json)
Hash identifier: DZFaFr9/1zryN0BIPaBjqcXglAn9VdpieGKyvQlZX2g=
Subject key identifier: 4F:27:6F:91:2D:4B:52:04:93:15:DE:5A:13:41:27:B0:2F:C2:2B:A2
Authority key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
Certificate issuer: /CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Certificate serial: 5957C273050B1BDCC12F8F2F5D4327CB8C03D99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
Manifest number: 021E
Signing time: Sat 23 Aug 2025 12:05:31 +0000
Manifest this update: Sat 23 Aug 2025 12:00:31 +0000
Manifest next update: Sun 24 Aug 2025 15:43:31 +0000
Files and hashes: 1: 53A2AA1601CC09214461D03CA771ED50EC1D6325.crl (hash: SMF9byJRSE7h27YT2z2W8h8+h8m3KHGduczjkcdVMDY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:57:c2:73:05:0b:1b:dc:c1:2f:8f:2f:5d:43:27:cb:8c:03:d9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Validity
Not Before: Aug 23 12:00:31 2025 GMT
Not After : Aug 24 15:43:31 2025 GMT
Subject: CN=4F276F912D4B52049315DE5A134127B02FC22BA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:23:aa:ed:85:2a:41:69:90:37:43:f4:80:6b:
a8:58:a2:50:29:4e:63:04:03:41:0d:50:37:00:a8:
38:92:0c:58:e0:39:a0:1a:0b:4a:dd:44:dd:05:7e:
81:ca:05:ef:fc:93:be:71:1e:02:df:da:e8:14:37:
58:c4:8f:56:84:ec:6c:96:3c:31:bd:de:34:b1:3f:
4b:2d:64:2c:2d:2e:67:f5:55:37:ad:ad:b8:6b:7c:
d1:95:f2:42:6e:41:85:b9:13:a0:b9:26:54:82:3f:
6a:1f:19:3b:ec:61:7b:dd:87:a7:4f:a5:60:eb:ab:
34:e6:dc:ba:95:df:ba:71:5f:04:b6:9a:ce:ea:98:
12:df:28:60:74:2b:47:ee:98:76:c5:4d:c1:83:9e:
ed:34:f7:65:3a:d0:dc:72:82:88:e8:10:0a:29:c0:
d1:6e:8d:55:21:c6:07:c5:0f:35:61:86:e4:6c:79:
25:a4:be:6e:09:40:79:10:f3:08:58:5b:8e:22:fb:
52:e2:00:29:16:3e:03:6a:b5:af:5a:9d:53:d0:69:
af:23:04:0e:1b:b8:1d:25:4b:ff:5d:94:cf:7c:e0:
e8:22:90:69:ce:39:d7:4d:fc:77:02:c1:ad:30:12:
8d:33:b5:44:53:e6:15:d0:ed:11:ee:6a:0c:73:b7:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:27:6F:91:2D:4B:52:04:93:15:DE:5A:13:41:27:B0:2F:C2:2B:A2
X509v3 Authority Key Identifier:
keyid:53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f9:45:61:aa:05:a6:c1:a2:2f:05:55:77:92:b2:91:c8:2b:
6d:b4:14:ef:e8:d4:d5:50:9f:5b:00:8c:bc:14:eb:bd:d1:75:
27:d0:fd:ac:50:be:1c:df:3b:6a:b1:93:68:2a:78:94:37:94:
6c:34:5f:10:73:e0:4b:0b:c2:a6:f9:c1:9e:23:df:19:83:13:
df:3a:24:d8:00:d9:40:33:e3:78:db:b8:40:c9:cf:91:77:88:
cb:75:07:25:a6:b7:cb:74:56:8b:3e:45:22:27:cf:b4:5c:b3:
64:fb:2d:61:0f:7d:85:e9:93:d6:18:cb:dd:76:cd:62:af:ff:
48:54:bf:dd:14:d5:a4:02:a3:27:0f:a4:04:b5:12:74:25:ea:
99:d1:fa:17:6c:26:0f:27:03:3c:4e:e0:b0:91:9d:9d:52:a1:
8c:03:f4:c6:c5:15:e1:9d:92:d3:08:a2:47:36:65:90:38:16:
67:7a:a2:96:c2:1c:87:e8:93:79:48:c8:89:58:9a:a6:f5:9b:
fa:96:38:91:e2:0d:55:c8:81:4d:12:30:7f:e8:6d:c6:b2:61:
f9:56:1c:2b:da:aa:80:03:80:62:8b:0f:c6:b4:6c:3b:48:85:
9e:e6:3a:32:f0:fb:fa:2d:fc:86:26:e8:be:ee:ae:08:5f:9f:
c8:30:c1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:25 2025 by rpki-client