Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
File: 53ltjBnzKhyvvVt49Sds6N-ZXQo.mft (raw, json)
Hash identifier: 0H1dcQmCFjI37KS46VKLO5GwV8sLCsDoivF0Zg76IYw=
Subject key identifier: 0D:CF:35:64:26:4F:EB:8E:E5:F7:77:4C:B0:AE:F5:09:F3:B9:F6:1F
Authority key identifier: E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
Certificate issuer: /CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Certificate serial: 019A552DD8D219FCB373A89D02F7BE4593B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 18:00:59 +0000
Manifest this update: Wed 05 Nov 2025 18:00:59 +0000
Manifest next update: Thu 06 Nov 2025 18:00:59 +0000
Files and hashes: 1: 53ltjBnzKhyvvVt49Sds6N-ZXQo.crl (hash: G2vSWpcpbbzdOSqFjro5IfScUMqeRxOgJEbh45HHD5I=)
2: tUZHDdFwry8ADa4Cy4cgEjcwGpA.roa (hash: khx6M/GES6UZBMxotwf4KeFJV0Wp8E9iWqwkSmvOz7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:d8:d2:19:fc:b3:73:a8:9d:02:f7:be:45:93:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Validity
Not Before: Nov 5 18:00:59 2025 GMT
Not After : Nov 6 18:00:59 2025 GMT
Subject: CN=0dcf3564264feb8ee5f7774cb0aef509f3b9f61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:7d:16:2f:17:e3:e7:92:5c:2e:fa:ed:76:
04:49:88:11:32:a9:4a:b1:40:99:7f:29:6e:61:5b:
bb:89:9c:49:e1:14:00:57:ee:63:d8:3d:d6:4d:3f:
64:e0:61:61:8d:cf:6f:32:35:95:a5:95:57:f3:ab:
db:25:15:18:5f:bf:d6:bd:ea:77:74:cf:71:68:9f:
45:3a:83:a9:75:43:53:79:54:10:62:04:35:7d:c4:
b2:1d:69:7b:ca:e2:b6:a3:b4:e9:84:f3:9b:04:80:
96:69:4f:e5:7c:96:11:f4:49:59:ce:85:e6:ad:5e:
9b:fa:31:bf:eb:0e:9c:d4:0c:e0:5a:f6:f6:0a:82:
3b:f9:f3:46:00:9a:df:56:07:56:06:75:e4:58:7d:
4e:b4:92:8d:2d:27:9e:28:6c:f7:45:1f:98:17:0c:
9e:46:98:f7:53:ff:d5:b8:dd:58:67:67:78:c2:8f:
c7:9b:f5:61:e6:9b:cc:3f:dd:49:6e:d8:67:a2:60:
0e:14:46:7b:a2:1c:b2:fa:38:c0:81:28:c1:a6:1b:
b9:dd:78:eb:1b:17:cc:76:e6:59:3f:45:88:ad:ac:
fb:18:8d:67:c4:05:b7:15:f5:95:90:13:ba:c9:8f:
db:96:1b:73:e0:1e:ff:c8:d4:cc:59:29:ac:6d:b3:
d1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CF:35:64:26:4F:EB:8E:E5:F7:77:4C:B0:AE:F5:09:F3:B9:F6:1F
X509v3 Authority Key Identifier:
keyid:E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:56:e5:6b:24:d9:e8:1f:15:4d:b9:fa:fd:1a:45:39:ed:cc:
14:a9:f8:73:61:8d:50:37:29:59:f9:54:7b:2f:0d:db:87:c4:
ab:8a:40:a3:26:56:12:97:53:97:b6:e3:08:7c:7f:d8:a6:0f:
f0:7f:ba:47:2d:24:bd:84:79:0f:f7:9d:58:7f:05:2d:a0:9a:
94:45:16:0e:6b:fa:29:2a:63:75:c0:6a:1c:34:be:8c:f0:2e:
71:50:6a:25:e2:67:ac:79:1a:45:ca:30:47:e6:bd:26:76:fb:
79:cd:76:54:e0:e1:8d:91:da:19:c0:30:58:bc:c6:35:fd:7e:
e6:38:09:ba:cb:41:18:17:46:90:15:cc:1f:e2:31:63:1a:b3:
9a:dd:c9:bf:d1:a3:0e:89:07:42:d4:cb:6b:1d:c6:d4:38:54:
e6:b3:d6:ef:42:25:f4:5a:da:ab:e6:57:7c:46:46:a9:50:df:
2b:6a:cb:be:52:5b:f7:a0:03:60:69:16:4a:d3:4b:c7:c0:c9:
c7:9e:80:8e:4f:09:eb:d0:9a:51:29:ff:16:09:f4:ff:82:9e:
f8:d6:6b:50:e7:5a:bd:aa:4c:a5:56:0d:96:0e:4f:35:74:5b:
af:78:bb:6c:a5:10:70:be:ca:4e:3f:f9:88:af:ad:a4:9f:43:
fd:32:6b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:05:18 2025 by rpki-client