Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
File: 53OduQwc6YQx3zSKE3blOsbgUjw.mft (raw, json)
Hash identifier: 41+PdG3pv0jQ2O5u2oxpZJNvanHPMgt9gWd8VfxJfPc=
Subject key identifier: 3A:8C:D9:88:2E:7E:58:22:17:5A:09:AD:87:3E:74:F6:74:8C:CC:3B
Authority key identifier: E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
Certificate issuer: /CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Certificate serial: 019775D2C8C1BCCBD1FBD933D2040D910483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
Manifest number: 0AB1
Signing time: Sun 15 Jun 2025 23:00:37 +0000
Manifest this update: Sun 15 Jun 2025 23:00:37 +0000
Manifest next update: Mon 16 Jun 2025 23:00:37 +0000
Files and hashes: 1: 53OduQwc6YQx3zSKE3blOsbgUjw.crl (hash: CdECWYVFTESJeCmuCtTgUoKhakCQF/4/bXK8Bo6xyMI=)
2: 5lxNCVmtG-eGQDzqS31HH90R7gQ.roa (hash: UMFun1XpckbWJBcsjucwYOiUnMjxn3AfVM2MpuImkbQ=)
3: J7gZFbpwbQ3l58heUCupO_rw9SI.roa (hash: 3O3YSRLT+CEf3bqQzHcFcD73p8jJc1vMJRrl8kOmCOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:d2:c8:c1:bc:cb:d1:fb:d9:33:d2:04:0d:91:04:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Validity
Not Before: Jun 15 23:00:37 2025 GMT
Not After : Jun 16 23:00:37 2025 GMT
Subject: CN=3a8cd9882e7e5822175a09ad873e74f6748ccc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:88:39:54:13:d8:2f:c3:93:b6:13:aa:79:
aa:07:d0:5a:e6:f8:e3:09:8b:bb:13:c1:1a:22:dc:
df:d9:c5:4e:b7:7d:95:25:c7:ce:4b:20:19:33:ec:
45:ad:67:6e:cc:54:42:b8:5d:d7:f6:9d:55:a9:0b:
19:05:a2:16:d3:ca:f0:36:17:4c:79:ee:56:d3:5d:
a0:78:f2:cf:d3:f0:ce:90:40:f5:0b:55:77:a0:85:
4a:80:64:69:f3:b6:1d:ab:6a:51:40:1f:77:45:09:
a2:b4:bc:6f:fd:0b:95:22:8c:ff:1f:6d:41:76:3b:
24:21:f4:8c:a6:0d:55:1e:c0:c1:b4:87:36:40:9f:
e8:fb:09:5e:81:0c:c7:bf:9a:20:a1:45:b6:8f:c3:
71:f0:7f:d8:50:8f:50:6a:48:83:84:76:9f:b0:ac:
8d:6e:2f:f6:45:d3:ce:6a:e7:00:2e:67:25:de:73:
16:51:e4:5a:44:76:74:1a:e5:f1:b2:4b:df:fc:89:
9a:ad:2d:4a:08:c4:c0:e2:c7:c4:cb:c9:5a:83:c5:
c3:cf:bf:1c:52:63:d9:3a:87:ed:ae:3e:a4:e8:76:
4b:f3:ef:71:c2:35:50:de:ea:d7:13:36:ed:db:03:
71:01:d2:a4:c5:85:e3:31:80:90:08:14:40:a5:e7:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8C:D9:88:2E:7E:58:22:17:5A:09:AD:87:3E:74:F6:74:8C:CC:3B
X509v3 Authority Key Identifier:
keyid:E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0c:61:52:3b:0e:51:08:1d:1e:7f:eb:72:88:37:37:cc:a1:
ca:59:e0:56:99:69:68:b3:a7:51:28:20:d7:48:a8:2a:10:8d:
64:10:ec:94:ac:68:84:43:e1:96:6c:59:1f:5b:36:6e:42:f3:
aa:77:d3:f2:ea:91:4e:0d:c9:d6:ac:ae:95:cd:4d:78:47:30:
c9:de:0e:f4:17:fe:78:f0:6f:51:52:3b:dd:5c:1d:df:7f:b6:
ce:a8:53:eb:23:18:ed:f8:1f:ba:c3:86:5a:c0:43:2d:4b:34:
00:73:f1:55:71:2f:a9:a4:0e:7f:0c:a8:6f:10:b3:e2:2f:bc:
e6:12:a9:67:61:49:79:1d:ed:dd:2b:ff:bf:bd:03:46:63:57:
9b:ea:d6:32:ee:9e:2a:58:10:8d:e1:0d:4c:c7:74:8f:95:07:
5b:c0:69:c8:9d:c4:61:81:2b:af:4f:50:5e:a6:4f:2f:f7:24:
43:1e:9c:a0:c0:0d:38:99:2e:51:62:18:b7:30:09:99:9e:c1:
6f:c9:25:31:ff:53:35:f5:ca:b4:cf:68:0f:1b:b3:53:ce:f0:
a0:df:3c:1b:cb:3d:7a:f1:c1:31:43:c8:a4:03:d0:0d:ab:f1:
df:af:67:4b:62:2c:e8:e1:af:c1:88:1f:03:fa:90:d5:31:3e:
29:f5:51:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:12:48 2025 by rpki-client