Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
File: 54z133frZmwE77frs8o0BK3sNPs.mft (raw, json)
Hash identifier: 2foNmykq7JBEkyHKb/haf/HonImHej7D6DpIkdEN1nM=
Subject key identifier: 59:FD:E9:1A:8A:AE:03:BD:B6:80:DC:A9:2C:F6:D1:23:F6:CF:CC:54
Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
Certificate issuer: /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Certificate serial: 01988FC73280DBD74B2BDF282B2AFD0CF700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
Manifest number: 0D05
Signing time: Sat 09 Aug 2025 17:00:53 +0000
Manifest this update: Sat 09 Aug 2025 17:00:53 +0000
Manifest next update: Sun 10 Aug 2025 17:00:53 +0000
Files and hashes: 1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: xi+T8kZldJOTBoDvwcFgtzWilxHbD2tcrrpcyVBEsfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:32:80:db:d7:4b:2b:df:28:2b:2a:fd:0c:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Validity
Not Before: Aug 9 17:00:53 2025 GMT
Not After : Aug 10 17:00:53 2025 GMT
Subject: CN=59fde91a8aae03bdb680dca92cf6d123f6cfcc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:16:54:ab:c3:19:8c:98:43:96:b2:79:15:e1:
d7:32:d6:68:75:6b:9c:e6:f7:6e:89:7d:7b:42:93:
06:a2:43:8c:e0:69:7e:04:2d:bb:f0:36:90:bc:30:
af:6a:bd:f0:f5:d1:6a:99:c5:ea:d1:31:07:80:bd:
86:07:33:90:21:41:00:ea:45:a4:99:3e:b8:ff:f0:
4a:89:6f:ae:8c:ec:80:d9:ac:a6:09:bb:26:a8:21:
fe:1f:09:1f:95:9b:19:58:1d:6f:76:3e:89:7a:39:
79:1b:2b:a1:96:a3:2b:4d:4a:20:71:f6:ca:8d:f0:
51:78:c0:08:a6:30:e6:ff:44:ca:c0:e3:10:a5:64:
0d:58:a2:13:78:31:6d:29:33:21:64:bd:b5:03:13:
e7:48:05:46:4d:ed:8d:60:2a:e1:74:ff:eb:20:11:
6f:b3:cc:55:3b:44:66:5f:3c:e1:44:6c:bb:e6:b9:
61:f8:ce:03:39:da:b1:3d:f6:65:d5:8a:e3:b0:d6:
ec:d4:4b:62:83:65:d8:cd:39:5d:a7:7c:0a:93:16:
1f:fd:79:e2:94:c7:3d:3c:19:01:8a:86:9f:99:71:
be:4d:ee:6e:b6:2d:f0:12:16:4d:e9:fe:cd:06:35:
97:31:56:0c:b3:8a:f2:c7:3b:bf:60:75:0a:2d:32:
86:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FD:E9:1A:8A:AE:03:BD:B6:80:DC:A9:2C:F6:D1:23:F6:CF:CC:54
X509v3 Authority Key Identifier:
keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f8:34:ba:83:4d:ce:da:33:a1:2d:25:6b:97:12:9c:4b:52:
5d:c5:b2:d9:ff:24:4a:81:c7:b8:41:16:be:42:df:ac:72:76:
7c:94:2f:25:47:ad:7c:69:f5:48:ea:2f:26:8c:d0:1d:1d:b2:
db:e8:f5:10:1a:4c:78:02:92:ea:35:05:a9:fd:41:2f:c0:4a:
b4:0f:9a:6c:b7:c3:b5:44:64:d3:c5:39:b6:95:0a:ce:96:9c:
e3:26:2a:44:a2:ca:cc:46:ad:00:8c:46:f2:18:04:cc:27:dd:
4f:76:3a:65:cc:b6:cb:d8:32:8a:a2:df:c1:3b:1f:77:bd:11:
bb:3a:d9:9f:67:6c:53:03:b0:2e:3f:4a:b5:cd:6a:25:c5:23:
c8:12:4a:05:46:2f:0f:67:ea:3a:c2:e0:15:2f:2b:f6:24:16:
01:12:bd:6a:27:e2:04:99:2e:b4:8c:86:fe:73:e0:01:7b:64:
03:8f:c1:d3:79:1e:54:11:a8:cc:83:53:a3:10:33:16:19:0d:
d8:a9:e2:08:93:b6:fd:2e:48:0c:f3:5e:9c:2b:9e:d3:4d:73:
33:82:51:1f:f2:ee:d7:77:e3:0f:8a:51:ca:ea:f4:8a:35:32:
66:cf:c4:ee:e8:28:c4:40:b7:88:62:0f:5c:50:c9:24:ef:3c:
53:05:35:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:23:07 2025 by rpki-client