Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
File: 55rcKmJwJwixoO4N87TPkiiW3NY.mft (raw, json)
Hash identifier: FfS+y0n2zbR0JjAtbbiwVkj5hEuYsSJH8goNWoKpbEg=
Subject key identifier: DD:01:DF:B3:2E:68:39:8D:14:AB:9D:BE:94:D9:9F:5B:97:C9:F4:BC
Authority key identifier: E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
Certificate issuer: /CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Certificate serial: 019A4F2B1C9B883DF71E08BFD027AD3F4C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
Manifest number: 045C
Signing time: Tue 04 Nov 2025 14:00:16 +0000
Manifest this update: Tue 04 Nov 2025 14:00:16 +0000
Manifest next update: Wed 05 Nov 2025 14:00:16 +0000
Files and hashes: 1: 55rcKmJwJwixoO4N87TPkiiW3NY.crl (hash: PS3TKjds3+4F1W38Binj1WK38GddCmJy+aP/MC02D+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:1c:9b:88:3d:f7:1e:08:bf:d0:27:ad:3f:4c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Validity
Not Before: Nov 4 14:00:16 2025 GMT
Not After : Nov 5 14:00:16 2025 GMT
Subject: CN=dd01dfb32e68398d14ab9dbe94d99f5b97c9f4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:aa:80:01:40:00:63:4a:db:bb:6b:1c:56:
70:50:eb:a4:cc:83:72:0e:49:b0:c6:e7:3c:be:fb:
90:cf:73:2f:3c:ff:e9:fe:44:51:96:9c:45:76:78:
e7:28:4f:55:22:29:36:35:c1:9f:e0:00:5a:f3:3c:
df:00:1f:3f:b7:ef:e0:5a:c8:a4:d5:40:2c:b4:f0:
f8:97:b0:6e:10:f6:3f:7f:49:08:2c:d3:95:15:d8:
e2:8d:c5:4f:81:79:77:21:27:74:e8:17:52:4e:bb:
27:2f:8a:ab:be:c5:2d:e2:3e:c5:de:1e:9d:e3:bf:
10:fd:3e:f8:68:27:4a:8b:75:66:ff:9f:83:f2:83:
80:06:2b:66:93:a4:21:7b:08:9b:b2:cf:07:3f:89:
2a:30:84:2e:28:88:87:be:50:41:43:18:3f:51:a5:
1f:0a:d6:42:b6:3b:96:cf:67:83:4e:e1:ce:f2:c1:
b6:90:a2:0f:43:de:c6:39:08:fb:43:8d:8a:6f:1e:
db:ff:6a:c8:e4:b2:fd:07:52:df:23:c4:f6:26:48:
bb:24:bc:55:0c:40:01:6b:2b:19:2b:ab:0a:92:f6:
1a:28:b9:9b:e7:29:9e:4c:1e:5e:99:88:1d:50:2d:
50:ec:d4:e1:d8:95:14:81:de:43:f5:9c:6a:82:3a:
fe:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:01:DF:B3:2E:68:39:8D:14:AB:9D:BE:94:D9:9F:5B:97:C9:F4:BC
X509v3 Authority Key Identifier:
keyid:E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:48:f0:73:49:04:f8:cd:83:2a:c9:7c:06:18:e0:8f:36:95:
dc:f7:03:9b:33:be:cf:78:b9:b0:d7:7e:8b:60:2f:b3:08:fc:
66:a6:9d:a5:f2:fe:be:a2:fb:ac:7e:50:d4:29:a5:b2:08:d0:
42:ef:c8:55:04:6c:58:ca:ee:1e:af:b2:d1:7f:49:c6:74:cc:
15:e3:ff:9c:64:36:57:a7:fe:39:e6:df:08:7c:02:52:b0:92:
7b:b6:9e:08:be:fc:59:09:17:9b:ca:0c:4b:41:e1:ec:8c:27:
5a:b7:60:aa:0d:c1:01:06:ea:6e:61:1c:ff:1d:f3:08:1b:0d:
80:68:14:03:82:cd:89:0e:3c:11:3d:25:12:57:d9:f9:34:cf:
b5:26:f3:5b:c5:85:51:a7:bf:27:76:80:25:a9:2e:a5:b5:6a:
7e:b4:88:1b:6e:c9:21:de:51:7b:01:4f:82:ec:ac:af:c1:ef:
40:df:be:1e:43:8d:ba:34:0f:31:7a:bb:0a:2c:6c:58:04:8c:
df:66:21:c8:10:08:b4:29:4b:90:15:10:38:9e:88:05:9a:c0:
bb:c6:b5:e9:3f:e7:dc:e8:96:de:ed:8b:39:71:8e:03:f2:3e:
8f:ab:3b:67:9f:fb:d8:90:76:60:a2:f2:4c:41:ef:49:86:c2:
88:6b:16:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:25:11 2025 by rpki-client