Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
File: 53OduQwc6YQx3zSKE3blOsbgUjw.mft (raw, json)
Hash identifier: +rkRZLHdnofo9xdAzk95GRsVTGwV/4kpg6t9tS7+qI8=
Subject key identifier: A4:2C:C2:0A:1B:DA:58:41:8F:5F:FA:95:3E:19:22:CE:A2:AF:95:53
Authority key identifier: E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
Certificate issuer: /CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Certificate serial: 01984A40FD18872602DC2DCB6EE71D29825E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
Manifest number: 0B1F
Signing time: Sun 27 Jul 2025 05:00:29 +0000
Manifest this update: Sun 27 Jul 2025 05:00:29 +0000
Manifest next update: Mon 28 Jul 2025 05:00:29 +0000
Files and hashes: 1: 53OduQwc6YQx3zSKE3blOsbgUjw.crl (hash: hge3niiKIIGDLnUxxNvMBbSNqQMyV7JMdkNs+bjRh1s=)
2: 5lxNCVmtG-eGQDzqS31HH90R7gQ.roa (hash: UMFun1XpckbWJBcsjucwYOiUnMjxn3AfVM2MpuImkbQ=)
3: J7gZFbpwbQ3l58heUCupO_rw9SI.roa (hash: 3O3YSRLT+CEf3bqQzHcFcD73p8jJc1vMJRrl8kOmCOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:fd:18:87:26:02:dc:2d:cb:6e:e7:1d:29:82:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Validity
Not Before: Jul 27 05:00:29 2025 GMT
Not After : Jul 28 05:00:29 2025 GMT
Subject: CN=a42cc20a1bda58418f5ffa953e1922cea2af9553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:ce:1c:ec:3c:9a:b0:9c:f0:3f:04:63:2a:
e2:a7:a4:51:99:4b:2d:39:d0:b1:0c:da:58:f9:e2:
79:b6:06:01:08:65:dd:4e:0e:4b:b3:d1:55:2c:62:
3c:cb:db:3d:17:d4:9e:b0:a3:47:bf:f9:95:fc:e3:
17:c8:80:07:4c:a9:45:7d:b4:10:20:6b:4e:6d:93:
76:3f:b1:3c:2d:73:5b:ff:2e:7f:3d:ee:0f:06:ef:
d0:ee:3b:8f:20:d4:33:1d:97:32:c5:9c:d7:a3:72:
c3:d2:c5:52:97:40:09:35:55:ba:5c:e1:b7:3e:34:
ab:52:fa:f6:1e:f7:a3:8a:91:be:e9:69:92:5a:2e:
da:89:00:b4:e0:bf:98:f9:44:ce:5e:c0:16:e5:9b:
cd:35:35:91:2b:c3:8f:28:82:aa:e1:aa:d4:e6:0b:
22:fe:dd:b2:de:b8:e9:eb:2a:c0:ae:04:7e:e2:d4:
5a:c1:c5:48:19:53:1b:3a:cc:4f:c3:0d:65:6d:04:
84:c4:f7:e7:9d:4f:e1:28:e0:b9:b4:99:78:c0:6c:
61:5a:d3:df:e0:62:60:cf:fa:69:e2:0b:9e:ed:93:
95:5e:c3:d6:1b:db:31:21:aa:f2:5c:2b:cb:e7:53:
c4:1a:a2:3e:72:3f:bf:b2:fe:2e:ea:5b:94:69:dc:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2C:C2:0A:1B:DA:58:41:8F:5F:FA:95:3E:19:22:CE:A2:AF:95:53
X509v3 Authority Key Identifier:
keyid:E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b8:40:63:29:1c:84:11:0c:ef:95:02:ad:5f:a6:6a:fa:2b:
57:45:66:e4:6e:5b:43:db:27:2b:e7:94:51:96:20:2c:4d:6f:
c1:69:b5:b8:7c:44:39:ec:0a:57:56:7a:44:17:6b:76:4c:1f:
86:a7:5c:35:34:d4:13:c8:3d:24:30:bc:b8:57:1a:df:a3:76:
47:3f:0f:2b:61:27:12:a8:5a:bf:e3:e5:13:76:bf:4a:4f:27:
79:60:ed:40:c7:19:58:5f:70:b7:a8:be:b5:30:fc:50:51:b9:
58:e5:98:f5:7d:18:4e:9c:c7:93:be:3f:8d:63:f0:06:e2:df:
21:bd:47:b0:a0:96:f6:5a:34:93:b2:8d:bf:c9:e6:c8:ff:08:
bc:e0:4d:93:e0:7f:60:d4:a7:a5:4d:88:cf:cc:89:e8:80:a6:
17:64:2d:ce:f5:ea:fc:56:aa:c9:22:bb:e0:59:ef:89:ff:e4:
88:24:1c:f7:f8:15:2f:34:a4:49:b6:f5:c2:9a:b9:00:8b:bb:
13:20:fc:34:ad:41:ff:26:46:1b:45:20:72:e2:6e:ef:b3:35:
a9:74:ba:c2:9e:5b:be:5c:80:45:11:7d:96:05:9c:55:df:6d:
95:af:f2:e2:f7:e4:32:30:af:22:06:c2:6b:2e:a5:e3:8e:fe:
c0:eb:35:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:16:56 2025 by rpki-client