Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
File: 553FQ1otyX42X_SVcMBNUT9vztI.mft (raw, json)
Hash identifier: 341vdMom6zKvCGzobZdnwRqVEmdlyvQNyixcy2URuxo=
Subject key identifier: 27:28:3A:29:EE:ED:38:31:D4:51:7A:4B:E1:8C:6F:C8:8F:00:27:3F
Authority key identifier: E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2
Certificate issuer: /CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
Certificate serial: 019922FAE2F4500C7B15193252694CD0A3B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
Manifest number: 0FC2
Signing time: Sun 07 Sep 2025 07:01:31 +0000
Manifest this update: Sun 07 Sep 2025 07:01:31 +0000
Manifest next update: Mon 08 Sep 2025 07:01:31 +0000
Files and hashes: 1: 553FQ1otyX42X_SVcMBNUT9vztI.crl (hash: 4Ukz1LrkghbITaJcsbmRjFsZqGkSrOWUFGZsGjSAL4s=)
2: BxGf4lSFYKHeuXnAyFK6i1JNIxE.roa (hash: CPX9KaqdGijt5ka4UvJo37MrT8M4No8zXRKHLnaECVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:e2:f4:50:0c:7b:15:19:32:52:69:4c:d0:a3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
Validity
Not Before: Sep 7 07:01:31 2025 GMT
Not After : Sep 8 07:01:31 2025 GMT
Subject: CN=27283a29eeed3831d4517a4be18c6fc88f00273f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:92:fe:91:11:f3:f4:80:eb:40:6f:c8:7b:
12:ac:31:92:f5:7c:4b:3a:ed:9e:cd:2a:1b:3c:ef:
34:5a:2c:8e:e3:cf:48:ee:b9:65:5d:b5:9d:d2:6b:
bb:c7:59:71:57:23:f4:01:53:31:ae:4f:fa:15:1d:
41:eb:08:7d:c9:b4:38:72:93:a6:90:09:39:9a:3f:
95:f8:b6:df:d1:f7:ff:c2:7a:94:bd:fb:1d:08:3d:
4f:18:16:7c:f7:64:bb:77:b0:7a:c3:02:21:02:22:
8d:c9:ac:ed:77:6e:9a:8e:34:b2:53:73:5a:fc:70:
d2:8c:5f:6e:7a:89:80:ff:0c:f4:6a:c9:6b:8a:14:
2c:df:db:77:3a:2d:fc:a2:d0:ba:d6:6a:61:c1:97:
6e:30:a9:64:26:49:8f:34:3f:3d:6e:24:50:85:50:
7e:dc:87:ea:c8:bc:c9:aa:42:77:d3:09:11:d6:51:
d1:36:69:f8:c1:af:e2:6f:84:00:38:3d:8d:b9:b5:
c5:6c:c4:d0:46:89:88:30:16:93:e9:a7:ca:33:7e:
1c:99:ed:34:ec:32:a2:55:54:c6:09:7b:62:2e:68:
4e:a6:e5:ee:d4:75:6c:33:09:ff:54:34:4e:7e:26:
0c:cb:53:d4:c0:cd:b9:7c:69:18:8f:3f:4d:da:b6:
27:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:28:3A:29:EE:ED:38:31:D4:51:7A:4B:E1:8C:6F:C8:8F:00:27:3F
X509v3 Authority Key Identifier:
keyid:E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:31:fd:74:f9:b5:94:74:76:e7:77:b9:5b:0e:9b:ad:7e:18:
05:e8:d3:1e:05:e1:11:a8:f2:55:28:dd:f2:5d:75:e4:65:c5:
a3:77:ff:15:78:9f:61:ed:e9:d8:a9:13:e9:1c:b9:75:8f:41:
0f:d3:f8:c6:66:68:10:0c:14:55:6a:49:02:ad:bf:fe:f4:80:
43:a2:2e:fd:09:2e:44:e8:f4:70:d7:09:ee:4d:b5:3c:e7:73:
04:a6:0d:9e:05:77:53:eb:87:44:d7:15:30:9d:8d:f7:cc:43:
68:39:0b:c9:77:ba:4f:61:c9:7f:04:62:ea:3a:bb:a6:da:7f:
3c:3e:76:66:b8:1d:ef:c7:99:d4:50:d4:30:59:1b:b6:bb:63:
0b:16:92:1b:32:6d:26:63:d4:bc:e0:cc:ed:1c:a4:33:f4:e6:
68:fa:a8:90:15:43:8d:2a:d0:65:9a:e5:a7:76:33:d3:e1:72:
ae:e4:c1:df:72:db:d3:5e:22:78:9b:61:b7:00:67:07:76:9a:
96:dd:a1:c4:f7:80:4b:84:50:87:ce:5d:48:d9:5e:9e:a2:5a:
3a:27:7e:00:50:42:4a:c5:f3:eb:6b:86:c9:a0:d4:0d:43:5a:
01:a8:70:63:47:4c:b2:f3:f4:5f:5f:0e:6d:e7:ed:30:58:d8:
ed:19:af:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:25 2025 by rpki-client