Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
File: 55rcKmJwJwixoO4N87TPkiiW3NY.mft (raw, json)
Hash identifier: Uf8qHACSfFFyprU4Y1P9gHc3dT2TiBr2Olr1WiqJkKA=
Subject key identifier: 52:45:A6:58:FA:2C:1C:3B:18:45:8A:B1:43:2C:76:8D:C0:50:18:DA
Authority key identifier: E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
Certificate issuer: /CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Certificate serial: 0198A0843CE17AA01D4B64F129B9A85B5050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
Manifest number: 037D
Signing time: Tue 12 Aug 2025 23:01:17 +0000
Manifest this update: Tue 12 Aug 2025 23:01:17 +0000
Manifest next update: Wed 13 Aug 2025 23:01:17 +0000
Files and hashes: 1: 55rcKmJwJwixoO4N87TPkiiW3NY.crl (hash: QA95My015CmqbcJuGLh/5uwFto4iGjkcDft+x/LE8hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:3c:e1:7a:a0:1d:4b:64:f1:29:b9:a8:5b:50:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Validity
Not Before: Aug 12 23:01:17 2025 GMT
Not After : Aug 13 23:01:17 2025 GMT
Subject: CN=5245a658fa2c1c3b18458ab1432c768dc05018da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:4c:90:61:88:94:24:f2:df:8d:1d:c8:e3:
0f:ff:65:46:d7:61:e4:0a:02:9e:75:da:c4:b0:e4:
4a:32:a6:b0:0e:5b:34:81:ac:74:a7:21:12:79:b0:
1b:20:1e:82:b0:d7:58:e0:96:3d:7d:97:4d:64:5b:
70:ea:e8:5f:97:31:28:f5:5c:3d:2d:c9:41:15:ef:
29:60:d1:4a:e9:ae:d8:02:0b:29:16:08:dd:10:5c:
13:3b:f0:ac:2f:56:d3:49:fd:0d:32:ad:f8:20:9d:
48:85:b1:52:1a:ce:d2:5c:cf:4a:99:f1:39:b5:68:
6b:df:17:57:3e:83:0b:10:be:f9:29:57:24:59:ae:
fc:b9:a0:1a:6a:92:6e:53:d8:fb:d4:9a:39:db:78:
f3:1a:8e:07:dd:9e:f1:be:32:bb:3e:bc:ea:80:bb:
f3:b3:88:e2:dc:cb:14:83:32:30:a7:c0:d7:0f:e7:
ce:eb:ed:29:9e:9c:b4:40:96:2c:9e:56:bc:78:6d:
a9:1d:62:94:27:7a:f1:e4:ca:c1:3f:9f:2a:7d:fb:
1c:e2:85:e8:e6:b5:cc:b1:05:46:32:57:b1:25:59:
8e:b1:29:be:89:9b:ac:85:d3:1d:25:2f:27:4c:3e:
d8:7e:f1:b7:c8:e3:89:4e:62:86:22:0e:16:42:99:
e7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:45:A6:58:FA:2C:1C:3B:18:45:8A:B1:43:2C:76:8D:C0:50:18:DA
X509v3 Authority Key Identifier:
keyid:E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:91:ea:5c:d4:a4:aa:c3:1a:b9:04:0a:b8:47:2c:57:24:e4:
dd:46:01:d9:4a:4b:65:a2:a7:00:75:90:82:91:1f:e8:c9:f7:
d4:78:cb:47:83:c6:48:62:3c:58:38:75:f5:29:70:62:eb:ad:
f1:1c:c5:f5:9f:22:c5:aa:fd:90:c8:ae:7f:5a:14:cf:ed:0c:
a2:8c:8b:8b:83:13:3d:8e:24:e9:7a:09:40:ed:a3:da:bf:6b:
44:63:b7:62:4f:be:90:77:d5:c2:1a:3d:41:9f:99:34:44:e7:
cf:6e:13:e1:9d:d8:0d:8d:a1:83:07:14:66:d8:40:e1:c9:c6:
04:a4:b7:84:11:1b:2a:2d:35:7a:49:47:ad:4f:45:65:18:09:
5d:70:22:9e:e9:84:17:40:cb:9b:82:e1:ff:0b:27:f1:15:5e:
cd:d6:86:67:ff:c3:14:5c:ff:e6:ed:d2:7b:bd:f1:24:6c:3a:
dc:1f:e9:f7:ad:35:df:6d:1b:94:73:db:57:ee:47:ba:52:a6:
64:b5:c1:37:8c:31:8b:a8:96:0c:f4:ff:d8:62:88:2d:0c:61:
0a:e2:d0:f9:58:1a:17:81:94:0f:39:a1:ee:87:82:c5:a2:1f:
40:77:51:8d:63:37:be:5f:02:b3:ca:79:e7:d0:3a:f5:cc:18:
d8:d4:13:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:27:26 2025 by rpki-client