Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier: mUopbvMim5AfKpeT1W9yphtic9u/MKcRIOdPoKr92OE=
Subject key identifier: 25:33:F8:8D:B2:56:D5:74:24:CD:9D:31:47:36:BF:11:E1:BA:D6:E1
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 019922FAF6B36118EA3C4A3D81DFB967CD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number: 096C
Signing time: Sun 07 Sep 2025 07:01:36 +0000
Manifest this update: Sun 07 Sep 2025 07:01:36 +0000
Manifest next update: Mon 08 Sep 2025 07:01:36 +0000
Files and hashes: 1: 0O73PaTyLOlo4DtC-zfVh-so0po.roa (hash: 8d52pgK7PtxKWsBsAJptabjpB2sUfgsDROP6Cr/a/W0=)
2: 3cLja0Qn7ryI3brAvn_huolef7k.roa (hash: uL09pyaPRqlSpX4587/io6caQs2mRPwnhcXeei1t0Y8=)
3: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: 1Sjy7L/jmD94VChdDlIf0s79/GQSmMleZyvtMjvm4Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:f6:b3:61:18:ea:3c:4a:3d:81:df:b9:67:cd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Sep 7 07:01:36 2025 GMT
Not After : Sep 8 07:01:36 2025 GMT
Subject: CN=2533f88db256d57424cd9d314736bf11e1bad6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:32:7a:87:1f:b8:16:a5:ed:16:06:fe:c5:
65:36:c8:92:7d:fc:4a:37:0f:8f:c1:8e:b6:bf:6c:
41:b3:8c:cb:dc:7c:93:c6:28:50:8f:f6:0e:02:85:
97:57:e2:ef:4f:36:e9:ce:7c:11:54:08:91:f1:5b:
99:ff:26:94:b5:0d:04:bc:35:38:61:e9:fd:7b:88:
e0:ce:f9:80:c7:3b:93:25:c2:82:a2:3c:9f:bc:ae:
79:cd:21:a7:46:0a:c0:3f:0f:67:82:a0:6f:e5:c5:
dc:b0:7d:d1:da:b4:7f:2e:54:d3:43:ac:9e:ef:c1:
8f:6d:6d:98:05:1b:80:8c:a2:eb:45:39:41:77:39:
95:48:1b:e7:9e:af:3d:3c:c1:d0:d1:c8:e6:3c:ea:
6f:8b:0c:86:54:fc:35:1e:cb:67:a0:a9:d1:e8:32:
55:ab:a6:1a:7e:a8:13:7b:be:c8:b0:09:e1:e0:5e:
76:e8:06:61:b2:7c:01:06:c0:6d:e2:b7:ff:b2:d2:
fd:1d:02:a5:50:af:95:1d:56:f7:fd:09:29:d5:cd:
8d:60:e5:ba:e3:55:20:6f:4c:55:26:65:1c:ea:4b:
32:62:28:d8:b2:ff:1e:fa:f7:1a:9b:4c:34:63:ff:
0b:a8:fb:a0:c1:a2:ae:ec:fc:8c:f6:5a:0c:a5:e4:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:33:F8:8D:B2:56:D5:74:24:CD:9D:31:47:36:BF:11:E1:BA:D6:E1
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e5:69:1e:15:19:18:fb:9e:7b:1e:b0:5c:c9:cf:98:37:02:
e1:3d:73:3a:58:0c:1e:85:d7:ef:4b:27:df:ff:9a:8b:0a:a6:
29:cc:9a:ae:c3:a6:be:6b:20:90:80:be:bc:a4:b0:6f:61:f0:
5d:1d:3b:fa:be:ca:45:7c:55:9b:75:b8:9d:1a:15:68:9a:03:
ea:46:7b:40:bd:91:75:ba:1a:df:ea:02:d0:99:c8:28:22:9b:
36:f1:57:6d:83:97:30:19:38:ab:93:81:4a:ea:1e:1f:41:89:
84:40:e6:24:25:96:8d:df:ba:cf:1c:ec:8d:bf:7c:ac:33:00:
3d:6e:e9:69:20:d9:9d:53:f6:6d:44:f7:f6:03:55:fe:2a:0d:
81:ee:12:2a:a6:e5:59:cd:87:2a:47:b2:a9:fb:12:c3:0b:f9:
3c:40:da:2f:cf:ea:83:b4:cf:d8:84:5f:7a:a8:5e:33:1b:a4:
f3:f9:76:31:b3:f5:b7:e6:14:1d:25:d5:60:cd:e7:47:b4:4d:
29:20:30:d0:02:a2:8e:14:58:c1:de:90:5f:2f:52:5f:4f:24:
32:8c:11:24:28:3f:9a:a8:f6:96:23:84:a8:de:47:9d:d9:9f:
90:16:f7:3c:5d:69:4d:4b:45:33:fa:45:e8:67:54:7f:ee:d4:
4e:81:e5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:33 2025 by rpki-client