Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
File: 53OduQwc6YQx3zSKE3blOsbgUjw.mft (raw, json)
Hash identifier: pEly3gQ9uqPHCI9RJYc+ZpVXuspN7BxbtHU3O6eGZAs=
Subject key identifier: 45:1E:85:3C:68:96:87:BF:C2:62:8B:F8:18:CE:07:F8:9A:A9:39:D1
Authority key identifier: E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
Certificate issuer: /CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Certificate serial: 01974D44CFCBD32CC0127B3FFDCA79105725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
Manifest number: 0A9C
Signing time: Sun 08 Jun 2025 02:00:44 +0000
Manifest this update: Sun 08 Jun 2025 02:00:44 +0000
Manifest next update: Mon 09 Jun 2025 02:00:44 +0000
Files and hashes: 1: 53OduQwc6YQx3zSKE3blOsbgUjw.crl (hash: NOpNyXi88sMKtNM253A/926+ONRYOsigjiF77KFew7Q=)
2: 5lxNCVmtG-eGQDzqS31HH90R7gQ.roa (hash: UMFun1XpckbWJBcsjucwYOiUnMjxn3AfVM2MpuImkbQ=)
3: J7gZFbpwbQ3l58heUCupO_rw9SI.roa (hash: 3O3YSRLT+CEf3bqQzHcFcD73p8jJc1vMJRrl8kOmCOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:cf:cb:d3:2c:c0:12:7b:3f:fd:ca:79:10:57:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Validity
Not Before: Jun 8 02:00:44 2025 GMT
Not After : Jun 9 02:00:44 2025 GMT
Subject: CN=451e853c689687bfc2628bf818ce07f89aa939d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:a2:70:9a:29:38:32:d9:11:30:fc:94:2f:
96:08:a5:f9:e8:53:0e:e8:9f:72:70:5c:00:1d:cc:
84:f3:67:b0:1e:5e:7f:5c:0a:1e:e7:ae:e6:91:11:
2e:9e:b2:72:77:8d:43:db:8c:36:62:3e:7e:5b:e9:
f1:1c:94:93:b4:1d:6d:ff:53:aa:ca:d8:cc:e4:2a:
1e:9f:80:4f:8d:d3:e0:02:c6:09:89:50:bb:59:cd:
9b:7c:5b:55:69:e1:48:75:52:b8:b5:72:e4:4e:a0:
b2:b5:ba:4c:a9:ce:0c:70:0c:5b:f2:ef:af:dc:d7:
59:e7:cb:94:4a:42:fa:67:82:c3:2c:0e:cd:1e:75:
3a:46:e4:d1:c2:14:da:15:95:c5:ba:f2:c7:6f:c3:
58:e2:5b:0a:b8:6c:3b:93:81:ee:89:80:12:3e:90:
d3:b1:01:4d:8c:da:90:cf:22:51:ea:a9:3f:b9:2d:
10:2c:d9:a2:db:0f:37:ed:05:23:4c:37:fc:59:df:
93:93:4f:2b:69:ed:7a:d6:fd:23:d5:0c:b0:ed:4e:
69:67:30:3b:23:aa:9b:a9:ec:ae:ee:73:58:b5:fe:
de:da:80:0f:37:b8:21:2e:20:9a:55:60:85:3d:3f:
fd:85:1e:e5:e8:91:f4:a4:b4:5d:62:c6:ab:c2:c4:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1E:85:3C:68:96:87:BF:C2:62:8B:F8:18:CE:07:F8:9A:A9:39:D1
X509v3 Authority Key Identifier:
keyid:E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5b:af:13:b0:9e:18:cd:73:3e:89:2e:04:16:dc:9a:d5:af:
ae:99:d8:fa:d9:af:ad:58:aa:64:4a:2b:ee:2b:2e:dc:b1:ea:
03:fb:cf:3e:3f:93:3c:1f:fc:49:6a:8b:a7:be:79:fe:9d:a9:
17:09:11:ac:3d:ad:b4:fa:49:6f:20:16:1f:19:a8:db:b8:5b:
f2:73:90:91:96:83:57:5c:16:d0:c5:bd:da:ad:41:86:70:fb:
ff:c2:84:76:64:ad:22:cb:fc:38:72:ad:b8:59:76:18:fc:fe:
92:3c:4b:9e:90:85:38:5f:aa:bd:b4:52:2f:e6:4b:7e:64:22:
1b:f8:d6:a9:fa:38:00:54:8d:c8:40:b3:35:13:3d:53:2f:24:
06:e2:d9:14:62:db:71:77:bb:5f:a9:d6:7b:ed:b9:9f:07:02:
81:8d:bd:9f:a1:9a:aa:e1:21:7f:c9:42:6b:48:b4:2f:56:71:
2a:d5:51:5c:c0:83:7a:31:80:5c:e4:10:7f:a6:3f:02:2b:09:
26:dc:f6:df:7b:8f:3e:9a:5c:d4:b3:89:68:f0:b8:0f:01:ca:
0a:26:2c:3f:44:20:b5:f7:c6:6b:f9:e7:49:bf:cb:d9:a1:6f:
87:1b:fa:0d:5c:c5:30:4a:39:cd:2e:f3:44:6f:48:91:7d:a7:
78:bf:f1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:01:07 2025 by rpki-client