
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
File: 54O2KriupSB3DFdAS-d3H2eewLU.mft (raw, json)
Hash identifier: 4PNsR+tin+OjjT8tlyMc1VB7ODdV51AQduNTSCc6DCs=
Subject key identifier: C4:8A:1E:5F:0C:8A:BA:7C:EC:48:04:72:BB:EC:5B:8E:B3:66:2E:98
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Certificate issuer: /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial: 019A213FB125B05FA8D57099D5A95ED78FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
Manifest number: 1688
Signing time: Sun 26 Oct 2025 16:00:13 +0000
Manifest this update: Sun 26 Oct 2025 16:00:13 +0000
Manifest next update: Mon 27 Oct 2025 16:00:13 +0000
Files and hashes: 1: 4KuSjXjGdyF1nScN1LwMlleHlmA.roa (hash: HlUuzXxOiMUBV49vY7GcCdve69QZxWM3RwORJ/36zYI=)
2: 54O2KriupSB3DFdAS-d3H2eewLU.crl (hash: gv1UjOBCKmkJJ0X543uCvIkvCCT8A0ANjpIF8cmkaC4=)
3: 7lacSGraqTGoKqaT-zAuzKx29Fk.roa (hash: FcCPAhyHMElJytjQ2WhAIPJGkfaFqPbC3K17eZo24Pw=)
4: 8yDd52yiQnWrlCx6kxIE7m9PFW0.roa (hash: B6yZTku2TmuXp6OETqEJRAmXjacawP+SH3G431U19zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:3f:b1:25:b0:5f:a8:d5:70:99:d5:a9:5e:d7:8f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
Validity
Not Before: Oct 26 16:00:13 2025 GMT
Not After : Oct 27 16:00:13 2025 GMT
Subject: CN=c48a1e5f0c8aba7cec480472bbec5b8eb3662e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:5c:4b:6e:2b:e8:ad:71:4d:94:6e:1d:ce:
17:14:5e:f7:be:b3:c3:be:90:3c:89:c3:54:83:8a:
6f:24:72:a7:ff:8e:98:be:54:33:16:6c:b7:26:f0:
de:fc:97:86:49:6c:08:9d:5c:38:ca:2d:9e:65:72:
91:da:4a:1f:47:a4:c3:c2:79:7d:f8:8b:0b:bc:83:
54:78:b0:9e:1a:7b:a3:ac:90:65:84:e5:3c:d6:6f:
b1:3f:cd:46:7c:bd:d3:0b:00:39:40:f1:a6:bb:e4:
63:c1:56:5f:8f:df:49:74:4d:13:13:b7:9c:de:7e:
37:35:7c:b5:32:e3:19:2e:8c:ad:ef:a5:8d:c8:c5:
fb:f8:b7:4f:0d:0c:69:21:8a:ee:2b:96:64:66:b8:
69:52:0d:34:ee:e7:73:38:d6:fb:2e:11:76:07:46:
9e:8e:8c:e9:8b:d2:b8:27:bd:c1:61:6a:4b:c7:83:
4a:79:b4:56:d6:88:bf:47:d1:18:8b:88:be:5f:80:
b2:0a:b9:bd:26:c8:27:f1:0d:d4:d5:21:52:18:cf:
a9:90:e5:47:d1:cc:e6:7d:dd:a0:a6:cd:04:66:06:
32:fb:c2:30:ff:4b:7c:c6:ac:e0:8d:f2:71:33:92:
33:4d:49:14:7e:91:d5:dd:14:52:cf:ae:48:7d:76:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8A:1E:5F:0C:8A:BA:7C:EC:48:04:72:BB:EC:5B:8E:B3:66:2E:98
X509v3 Authority Key Identifier:
keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:03:84:da:52:de:e1:c4:f3:c0:09:bf:f7:4c:0a:e9:82:4f:
0c:aa:44:a9:d8:fb:72:1a:56:cf:e5:e9:ec:4f:3e:55:d6:02:
84:2f:b4:73:c7:7d:75:b7:c5:b7:e7:7e:a2:6b:99:ab:9e:88:
9e:60:20:06:1c:9e:7f:b7:1d:f5:0f:93:8a:8c:0a:4e:2c:cb:
b7:f2:05:a0:74:9a:1c:33:3d:c8:69:cc:12:9e:c8:38:c8:2c:
a4:0e:fb:dd:b5:66:7f:c4:2d:f5:90:16:81:79:70:3d:f6:34:
d3:b2:f7:43:4f:66:ed:2e:cf:d7:91:e5:9d:78:34:3f:9e:4f:
40:bf:bd:b7:6a:81:60:7e:d8:be:96:62:37:9b:09:27:81:76:
fd:86:a2:93:58:cb:3c:b3:c6:3c:7e:fa:f9:b7:10:5e:30:d1:
28:43:60:19:eb:ee:a8:0e:b8:0c:b5:cf:76:35:43:6f:96:bb:
09:80:35:9d:78:b8:e6:fd:ed:d7:61:71:c9:ad:1a:c3:63:4c:
b0:d7:36:27:b2:f6:8a:6b:f1:7e:d7:81:90:15:c5:e1:d5:c6:
99:70:ea:a7:9f:67:b6:28:39:90:c2:d5:81:6b:85:51:5b:83:
46:0e:0b:18:de:c6:75:e8:fd:27:7a:5d:d2:72:d7:d2:05:b9:
45:e5:44:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:40:21 2025 by rpki-client