
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
File: 53OduQwc6YQx3zSKE3blOsbgUjw.mft (raw, json)
Hash identifier: 11lyrgc9OH3uRVSS6attxeplDsgvsS9Pxr1kvrK7F1g=
Subject key identifier: A0:E6:45:84:DA:50:6A:8A:53:F1:FD:15:7C:6E:E9:2B:63:9C:74:B5
Authority key identifier: E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
Certificate issuer: /CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Certificate serial: 019931FF50723F61F4D9658B51FD686F4935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
Manifest number: 0B97
Signing time: Wed 10 Sep 2025 05:00:39 +0000
Manifest this update: Wed 10 Sep 2025 05:00:39 +0000
Manifest next update: Thu 11 Sep 2025 05:00:39 +0000
Files and hashes: 1: 53OduQwc6YQx3zSKE3blOsbgUjw.crl (hash: 4FJT4JcixwTjf+x/zE0K3L0nMrlrgpQsdIGykxvTdfM=)
2: 5lxNCVmtG-eGQDzqS31HH90R7gQ.roa (hash: UMFun1XpckbWJBcsjucwYOiUnMjxn3AfVM2MpuImkbQ=)
3: J7gZFbpwbQ3l58heUCupO_rw9SI.roa (hash: 3O3YSRLT+CEf3bqQzHcFcD73p8jJc1vMJRrl8kOmCOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:50:72:3f:61:f4:d9:65:8b:51:fd:68:6f:49:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Validity
Not Before: Sep 10 05:00:39 2025 GMT
Not After : Sep 11 05:00:39 2025 GMT
Subject: CN=a0e64584da506a8a53f1fd157c6ee92b639c74b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:5f:a1:c8:46:5d:c7:b0:27:08:6b:1b:6b:
3a:fe:51:7b:b2:5f:ce:c2:00:eb:24:f7:ab:13:f2:
7c:6b:a7:6b:d4:5a:3f:75:04:e2:59:5f:f9:7f:3c:
1f:da:8f:86:3d:8d:ec:26:d9:fe:cc:01:34:f9:a3:
fa:05:43:ac:03:a9:27:0b:b4:80:af:d9:49:3d:a6:
39:9f:60:20:c8:5d:df:1c:fd:fe:f4:cc:9c:10:c6:
f3:22:bf:cf:46:90:ff:51:0e:6f:ad:24:8b:ae:9b:
9e:ca:49:8a:50:1a:c1:23:22:d3:dc:9e:5d:63:63:
91:4b:4c:7d:3c:19:05:98:e0:cf:81:c1:b6:9e:f1:
c1:68:49:bc:95:50:83:f8:d8:4b:9f:1e:ef:4a:37:
1d:86:61:69:f9:2c:dc:2d:ad:22:bc:c9:f1:6e:e0:
4a:d6:21:68:e7:43:08:b9:d2:30:0b:c5:89:28:bc:
57:e8:8a:5e:cf:11:05:4d:d9:1a:a1:09:5b:0e:85:
c0:0a:c8:7c:d3:64:a4:10:59:77:8b:f9:a2:1e:6d:
15:8a:ae:5f:28:f1:45:dd:f3:cf:96:4d:8a:fb:03:
d8:ea:df:b4:2b:6c:21:0c:4f:fb:97:dd:21:58:9a:
9c:a7:43:9e:31:f4:b1:b5:15:b0:1f:59:5f:ba:44:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E6:45:84:DA:50:6A:8A:53:F1:FD:15:7C:6E:E9:2B:63:9C:74:B5
X509v3 Authority Key Identifier:
keyid:E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:78:1b:48:48:91:5f:67:97:2a:b1:9f:22:5c:e7:46:d2:86:
74:04:46:2c:ac:34:65:45:58:11:a4:46:e2:7e:59:69:02:66:
ef:b7:10:bf:3f:cd:11:8e:fb:c1:70:4a:12:d4:ba:e9:7e:07:
6e:ad:8b:8d:e7:a1:73:c0:31:0e:1a:2e:48:86:18:53:40:dc:
fe:88:f3:4d:f6:62:75:e1:41:40:e1:cc:cf:4b:e0:68:b3:5a:
2f:66:52:90:7e:f4:3b:c4:f0:f3:63:dd:fb:37:8f:f4:1e:7b:
7c:6b:67:bb:9e:bb:5e:cb:8d:f7:40:9a:b4:a7:73:1a:de:d0:
90:fa:09:1f:6b:81:45:1a:13:1e:e3:00:b8:0b:d2:81:cd:2d:
e7:1f:36:84:81:c7:54:36:33:48:34:3f:c0:74:8c:7a:2d:e3:
17:71:d5:74:c8:4f:41:8c:f1:9a:2f:a7:94:59:ca:0a:28:4c:
db:50:80:a3:44:ea:f6:cb:a4:c7:93:21:15:cd:d0:a8:24:06:
f2:55:cd:e8:bb:ee:9e:b0:81:f8:b7:d7:b9:b8:a9:93:c1:1d:
ac:d4:ab:6f:da:6c:1b:d9:dd:99:b4:d1:ca:ad:28:9a:a1:8a:
60:3e:50:33:97:2f:67:29:c4:86:f4:08:8f:a8:c0:67:3d:b1:
89:22:2c:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkx/1ByP2H02WWLUf1ob0k1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NzM5ZGI5MGMxY2U5ODQzMWRmMzQ4YTEzNzZlNTNhYzZl
MDUyM2MwHhcNMjUwOTEwMDUwMDM5WhcNMjUwOTExMDUwMDM5WjAzMTEwLwYDVQQD
EyhhMGU2NDU4NGRhNTA2YThhNTNmMWZkMTU3YzZlZTkyYjYzOWM3NGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndBfochGXcewJwhrG2s6/lF7sl/O
wgDrJPerE/J8a6dr1Fo/dQTiWV/5fzwf2o+GPY3sJtn+zAE0+aP6BUOsA6knC7SA
r9lJPaY5n2AgyF3fHP3+9MycEMbzIr/PRpD/UQ5vrSSLrpueykmKUBrBIyLT3J5d
Y2ORS0x9PBkFmODPgcG2nvHBaEm8lVCD+NhLnx7vSjcdhmFp+SzcLa0ivMnxbuBK
1iFo50MIudIwC8WJKLxX6IpezxEFTdkaoQlbDoXACsh802SkEFl3i/miHm0Viq5f
KPFF3fPPlk2K+wPY6t+0K2whDE/7l90hWJqcp0OeMfSxtRWwH1lfukSyOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDmRYTaUGqKU/H9FXxu6StjnHS1MB8GA1UdIwQY
MBaAFOdznbkMHOmEMd80ihN25TrG4FI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTNPZHVRd2M2WVF4M3pTS0UzYmxPc2JnVWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC81NDcwMzQtMzk1Yy00M2YwLWEzNGMt
MTk0MjhmOTJjMWNjLzEvNTNPZHVRd2M2WVF4M3pTS0UzYmxPc2JnVWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC81NDcwMzQtMzk1Yy00M2YwLWEzNGMtMTk0MjhmOTJjMWNj
LzEvNTNPZHVRd2M2WVF4M3pTS0UzYmxPc2JnVWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUngbSEiR
X2eXKrGfIlznRtKGdARGLKw0ZUVYEaRG4n5ZaQJm77cQvz/NEY77wXBKEtS66X4H
bq2Ljeehc8AxDhouSIYYU0Dc/ojzTfZideFBQOHMz0vgaLNaL2ZSkH70O8Tw82Pd
+zeP9B57fGtnu567XsuN90CatKdzGt7QkPoJH2uBRRoTHuMAuAvSgc0t5x82hIHH
VDYzSDQ/wHSMei3jF3HVdMhPQYzxmi+nlFnKCihM21CAo0Tq9sukx5MhFc3QqCQG
8lXN6LvunrCB+LfXubipk8EdrNSrb9psG9ndmbTRyq0omqGKYD5QM5cvZynEhvQI
j6jAZz2xiSIs5w==
-----END CERTIFICATE-----
Generated at Wed Sep 10 10:21:37 2025 by rpki-client