Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
File: 53OfCEQuIkRmIbiaV2ObNUK6NNw.mft (raw, json)
Hash identifier: ZiC1+rh3y1t6ALMOJW3M2fQcfIxc9hcBnUR21emLejg=
Subject key identifier: 82:09:1D:31:D4:E3:85:2C:41:87:41:AB:38:EB:04:F7:5B:34:5C:C4
Authority key identifier: E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
Certificate issuer: /CN=e7739f08442e22446621b89a57639b3542ba34dc
Certificate serial: 01977C79856D850CA17E190F9EA3B8CFB5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
Manifest number: 03B4
Signing time: Tue 17 Jun 2025 06:00:27 +0000
Manifest this update: Tue 17 Jun 2025 06:00:27 +0000
Manifest next update: Wed 18 Jun 2025 06:00:27 +0000
Files and hashes: 1: 53OfCEQuIkRmIbiaV2ObNUK6NNw.crl (hash: ZahUnqgD38YlU5KrWesTQuInnw/6oq2x068cnMumMr4=)
2: ynJSD2xc-CykfYa79BP9jQj40kM.roa (hash: fMb/laTqYN39Vwte4hGLXjRHIufJPIqxfdcZimxGcGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:79:85:6d:85:0c:a1:7e:19:0f:9e:a3:b8:cf:b5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739f08442e22446621b89a57639b3542ba34dc
Validity
Not Before: Jun 17 06:00:27 2025 GMT
Not After : Jun 18 06:00:27 2025 GMT
Subject: CN=82091d31d4e3852c418741ab38eb04f75b345cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:25:01:1f:92:19:c6:b8:61:90:6a:b7:c5:
88:7a:b9:9e:e0:9d:ff:81:49:64:33:ef:c4:39:76:
5e:15:c6:2e:12:f8:84:ee:8f:32:98:70:96:05:2d:
6d:b7:92:75:0f:4e:9a:90:ef:79:f4:15:a4:6a:d8:
11:02:9e:75:14:c6:61:b1:87:59:59:8d:35:6c:59:
e5:6b:f8:50:4e:cb:e9:0f:4a:d5:db:81:79:fc:89:
4f:55:91:21:b6:2a:c4:4d:17:2a:45:03:1c:d8:a9:
7b:0f:9f:18:60:90:8e:25:98:af:fd:33:a5:16:8f:
48:96:4a:f2:66:b6:64:c5:d8:a8:b0:d0:e9:ab:e7:
ae:2a:56:c3:4b:9d:d0:ef:de:17:4a:8d:b7:f9:10:
ac:fe:37:de:48:17:31:b2:04:49:69:f8:bf:ba:38:
a3:0a:41:9c:d9:04:04:cb:02:8b:e1:87:66:0f:84:
00:30:64:be:8d:d8:7a:f8:9a:a9:9f:8f:29:df:48:
01:4c:db:75:aa:bb:c7:3b:7a:5e:d7:97:8b:27:dd:
64:a8:b6:20:b8:bf:30:0e:04:b4:2a:14:b9:32:9d:
16:3b:10:3c:d9:eb:48:55:3a:00:92:c4:42:6c:21:
24:c4:3c:9a:c6:8a:0f:d9:b9:d2:44:aa:4b:e0:47:
f5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:09:1D:31:D4:E3:85:2C:41:87:41:AB:38:EB:04:F7:5B:34:5C:C4
X509v3 Authority Key Identifier:
keyid:E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:97:3d:6b:69:8d:f9:2f:dc:cd:1c:44:8d:65:a3:63:fa:0a:
6f:9f:a1:3c:6c:4f:0c:cd:e4:62:9f:15:b9:2a:e2:57:d3:93:
37:9f:5c:78:5d:fc:ad:e0:48:41:8b:1a:c9:5d:47:df:96:a1:
84:f0:38:99:7d:db:6c:b6:e9:bd:fb:98:9a:21:98:68:f2:7e:
29:c6:13:4c:d9:15:80:11:12:b5:d9:38:21:d4:e3:ef:8c:ab:
25:91:63:2d:06:35:40:9f:aa:eb:4b:a1:eb:8b:df:6c:3e:e7:
1d:0e:e3:d4:ec:62:a8:94:a6:91:5d:d6:c0:3f:ce:df:81:54:
ec:3e:2f:83:2a:4f:ab:cf:fc:eb:02:1b:b8:45:3a:8b:49:0f:
94:9d:36:26:7f:d5:61:43:58:ba:2e:65:dd:80:fd:43:e2:d9:
ec:91:0c:d8:fc:ba:3f:f3:3e:a2:8f:c8:16:fd:ee:e7:1b:6d:
02:fa:85:7f:f9:d0:5a:3a:f0:09:1b:7f:ea:82:c4:8d:53:c4:
5c:c6:83:d4:f7:4d:49:78:b4:a2:41:fc:7a:ff:52:c1:04:cf:
34:86:5f:7d:41:07:a0:2c:30:b5:ad:a2:49:8b:6f:23:03:81:
8b:cc:0c:71:e8:8a:ac:9d:49:0a:27:dd:6f:96:19:db:08:03:
d1:a4:d6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:46:16 2025 by rpki-client