Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
File: 53bFGYDHUepeMd3ayO9h-1bJcA8.mft (raw, json)
Hash identifier: FUPuAlMhaoGZRvIYp2XBxbYwYHLshHq1duin00zZ4ug=
Subject key identifier: E6:CD:FA:50:D5:50:C1:14:06:C5:31:E9:3C:D9:44:B1:09:9C:50:3B
Authority key identifier: E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
Certificate issuer: /CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Certificate serial: 019A1918A548A137057E7CD75467BD92C887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
Manifest number: 0304
Signing time: Sat 25 Oct 2025 02:00:36 +0000
Manifest this update: Sat 25 Oct 2025 02:00:36 +0000
Manifest next update: Sun 26 Oct 2025 02:00:36 +0000
Files and hashes: 1: 53bFGYDHUepeMd3ayO9h-1bJcA8.crl (hash: B7pDWg3R39VSTLpavrxJHkj3yliF7+mHYxbMGZdKC0k=)
2: MSnHBIOL0Bltj-Q0mkBqryaUsS4.roa (hash: R8xRgK2CEN6mE5gSyGtBAs14gnmUzJFq4i62UURLtRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:18:a5:48:a1:37:05:7e:7c:d7:54:67:bd:92:c8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Validity
Not Before: Oct 25 02:00:36 2025 GMT
Not After : Oct 26 02:00:36 2025 GMT
Subject: CN=e6cdfa50d550c11406c531e93cd944b1099c503b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:85:f2:e5:e2:bb:b8:77:c4:ad:aa:60:c0:
ea:0a:55:0d:3f:27:d9:cb:f0:5f:ed:40:d2:ce:2e:
9a:f8:68:75:ba:d5:41:dd:54:47:6a:8c:e2:f2:6f:
64:a8:20:e1:d6:90:32:b1:e2:e4:88:5b:eb:8e:cf:
43:8f:d1:31:96:0e:7a:89:da:06:81:cd:4e:a7:67:
a4:8c:65:40:f7:7d:7d:b0:73:c5:2c:41:e7:8a:7b:
5b:7c:b0:15:dd:63:20:e5:b5:15:88:bb:55:50:a1:
1a:96:b0:f8:9f:6e:3f:ea:e2:78:7f:02:94:cd:89:
2e:a5:1f:ac:5d:29:91:26:c8:eb:2d:e1:5a:55:b4:
e2:d6:f6:29:79:e4:19:e6:85:5f:b1:7b:c4:21:6d:
f0:26:66:41:67:cb:0e:5a:f2:77:35:9c:06:69:86:
a9:9a:6a:7e:4f:81:ea:ab:d4:2a:27:08:0d:97:1c:
6c:5d:fe:8b:f4:26:57:d6:fd:04:3a:6c:24:f9:6d:
af:7c:66:6e:85:73:18:8b:be:17:52:b8:fd:ff:0f:
35:f6:05:28:20:b6:44:8c:87:85:48:05:95:a4:1d:
4b:53:34:3a:56:94:a7:1d:cf:ff:7c:e9:1a:06:1c:
a0:d2:7b:2b:24:17:dd:84:04:d9:49:35:2b:a3:28:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CD:FA:50:D5:50:C1:14:06:C5:31:E9:3C:D9:44:B1:09:9C:50:3B
X509v3 Authority Key Identifier:
keyid:E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3b:59:ba:5b:b3:7a:74:a0:1c:bb:e4:d0:e6:62:b4:1c:aa:
1f:64:43:06:b2:7f:3d:a7:c2:6f:e4:c7:3c:51:c2:3a:23:99:
f6:44:c7:0a:0c:9a:95:f1:35:65:79:c6:12:fe:c6:a0:ee:bb:
5c:d7:8f:ad:b5:b0:ab:3b:cd:f9:83:60:f3:82:f7:5a:18:44:
1f:42:3d:76:23:f5:21:05:d5:23:64:ef:6e:67:a8:d0:04:3f:
d8:1a:9f:d3:d7:35:6e:33:1a:12:e0:9a:af:e9:d4:e4:40:d3:
7a:b6:a7:3e:f7:c1:b4:37:7d:08:90:75:b5:7b:94:33:ab:5a:
ff:4d:25:5e:b4:70:f8:da:2e:71:8d:1c:2a:e0:b5:55:aa:93:
76:f5:1b:da:78:bc:b9:50:61:b3:1a:8a:a6:85:42:f9:b1:a2:
3b:a0:c8:68:9b:af:24:d1:93:ae:c0:06:42:80:3d:15:99:32:
84:78:f3:00:09:d8:c3:e7:1b:bb:77:1e:29:59:7a:b0:e2:a1:
6f:a1:f3:99:69:c4:61:89:48:bb:b7:2b:d3:8b:61:9e:68:d7:
c4:26:63:f4:0e:00:31:17:d1:09:41:6e:4c:49:d2:fb:0c:34:
47:97:cf:f7:a1:99:0e:6c:4e:25:2e:d2:10:0d:ec:c4:ba:53:
c5:17:03:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:24:18 2025 by rpki-client