Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
File: 54z133frZmwE77frs8o0BK3sNPs.mft (raw, json)
Hash identifier: vnpiDtI7WnKbwIofL6LsSDUbvRpNnGnX0iYhVHCaPxk=
Subject key identifier: FE:3E:7D:37:04:C6:98:97:C0:3C:1B:52:71:0F:A2:53:3F:E9:0D:C5
Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
Certificate issuer: /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Certificate serial: 0199228C67F307E2434A2042580EFC24549B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
Manifest number: 0D51
Signing time: Sun 07 Sep 2025 05:00:50 +0000
Manifest this update: Sun 07 Sep 2025 05:00:50 +0000
Manifest next update: Mon 08 Sep 2025 05:00:50 +0000
Files and hashes: 1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: d70LCHiuVA+Qf2jWCcWkMfSEiZlZ0UYGS+nBFlTJ3oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:67:f3:07:e2:43:4a:20:42:58:0e:fc:24:54:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Validity
Not Before: Sep 7 05:00:50 2025 GMT
Not After : Sep 8 05:00:50 2025 GMT
Subject: CN=fe3e7d3704c69897c03c1b52710fa2533fe90dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:54:e6:b2:f0:c8:b7:a1:42:85:4c:08:8a:
14:1f:d1:83:f6:57:2c:34:4b:e2:c1:4a:40:01:c8:
c8:e1:ee:17:8b:0c:c6:39:99:40:2a:4b:7d:ee:94:
91:78:de:1e:c8:8e:96:ce:d0:ad:f0:1c:c9:bc:62:
be:11:1f:7b:f1:c7:67:8b:b7:e9:48:f6:47:b5:ff:
72:74:ef:d2:00:dc:b4:95:79:cf:ae:cc:55:50:ca:
d9:ca:eb:c9:97:9f:0c:67:cd:8c:6e:c0:9d:d9:90:
10:62:61:63:89:7b:33:c9:e7:61:ba:05:79:53:b4:
32:23:2b:93:e1:1d:a9:ba:ec:9e:b8:85:ad:78:b7:
d5:08:c8:5b:38:3f:16:cf:61:46:45:69:0e:be:89:
6d:c6:61:01:d3:2a:12:87:0c:3f:a9:21:a4:0a:16:
f3:87:cb:cf:e2:10:52:5a:93:2c:b1:d5:15:ab:15:
f4:6a:14:78:6e:1c:bc:bb:ac:07:fb:aa:bf:56:b3:
24:a7:56:af:6e:0c:8c:4a:e3:17:a2:d3:b4:1f:fa:
c2:4c:23:2e:68:ad:65:b2:5c:ee:3c:2b:1b:c4:8f:
22:1b:99:48:d1:d3:db:27:eb:a9:7d:e3:95:19:32:
0f:ba:2a:04:fe:dc:96:94:ec:b1:23:d7:1b:42:25:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3E:7D:37:04:C6:98:97:C0:3C:1B:52:71:0F:A2:53:3F:E9:0D:C5
X509v3 Authority Key Identifier:
keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:87:f0:1a:56:87:c0:91:fe:84:c0:e7:51:d8:3a:85:41:a3:
7b:a9:17:51:43:f2:fb:17:1b:d4:c9:19:77:21:16:a4:1f:7c:
92:86:ed:26:74:25:2c:62:2c:2b:30:39:a1:f8:82:c7:ea:2c:
43:c4:33:ee:d1:e3:85:8a:4d:fd:6b:83:3e:54:22:e8:67:0e:
c6:ae:28:3d:5c:39:6c:99:4e:c7:b3:1d:33:e6:fd:9d:78:3d:
57:a1:5a:48:c0:2f:f2:1e:0e:6e:df:70:eb:3d:59:90:01:5f:
54:09:23:f1:25:4d:72:9b:7c:de:8b:37:c8:d7:99:00:9b:e0:
fe:a7:15:ff:6a:f3:18:5f:23:6e:ae:34:17:f9:41:8c:ed:00:
c1:33:5f:69:54:a5:ee:b2:dd:d6:e4:ff:45:70:68:37:d0:00:
96:5c:2a:6e:ff:8a:a0:7d:75:2f:b8:77:21:bb:62:5e:eb:d0:
aa:ab:04:cf:77:ee:f8:60:82:2b:97:ab:80:14:9f:c5:02:aa:
d5:e6:6a:89:76:4b:26:a7:f0:97:3d:b6:10:8f:2b:9b:1b:b8:
3f:c0:63:71:15:b2:96:c5:d8:ca:da:d0:e1:29:14:76:b0:cb:
15:47:41:93:62:8f:59:98:3f:e1:1a:f6:d3:39:9f:8c:83:5d:
cd:d8:77:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:40 2025 by rpki-client