Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
File: 55GFFoC3LJaRIl4b82xHJg6iRPo.mft (raw, json)
Hash identifier: kx0hSezbHiWH3QnWWFu8F0XS6mIBJQ9/UVbz7Wxgp30=
Subject key identifier: C9:36:C3:4A:8E:22:3B:48:FA:B0:69:CE:18:BE:70:2C:70:5D:64:FA
Authority key identifier: E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
Certificate issuer: /CN=e791851680b72c9691225e1bf36c47260ea244fa
Certificate serial: 01976F2C272A9F38E9C261B050351ECFD874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
Manifest number: 108D
Signing time: Sat 14 Jun 2025 16:00:53 +0000
Manifest this update: Sat 14 Jun 2025 16:00:53 +0000
Manifest next update: Sun 15 Jun 2025 16:00:53 +0000
Files and hashes: 1: 55GFFoC3LJaRIl4b82xHJg6iRPo.crl (hash: SNQy8MFXxQ1EABxQyVBJWROxmqUTHLaOq5plO/wipj4=)
2: _F8TtMCr-GrK1-WadHxYHdaqsV8.roa (hash: OhF5DdkGtGDTUS9hafqNY2D1lnp3rhyFQSObJeOPCts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:27:2a:9f:38:e9:c2:61:b0:50:35:1e:cf:d8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e791851680b72c9691225e1bf36c47260ea244fa
Validity
Not Before: Jun 14 16:00:53 2025 GMT
Not After : Jun 15 16:00:53 2025 GMT
Subject: CN=c936c34a8e223b48fab069ce18be702c705d64fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:22:2a:c2:c7:7d:f1:9b:c6:92:c6:1f:c5:
b8:f3:a6:9f:4e:f0:fa:52:55:ca:34:7a:01:86:af:
b9:e6:bc:f4:ae:fd:f0:e3:bb:44:1f:0f:a1:ba:23:
02:33:c6:e5:5d:2e:a3:5a:82:aa:51:80:8b:ca:3c:
bd:04:f1:32:5d:09:ac:19:ac:c3:12:c3:ab:93:8c:
76:62:13:b8:b0:2e:fe:f4:b2:4d:2e:0c:0f:ee:97:
12:c7:d0:fc:bd:0e:ba:31:e7:1b:98:85:74:c7:6a:
4d:c2:a5:d6:04:ac:bc:5a:23:3d:ef:a6:18:0a:7b:
9a:8b:2c:7d:db:b4:91:98:91:28:a8:2c:0e:89:05:
62:42:9f:67:b4:f1:b5:87:bd:da:97:cf:70:18:9a:
e6:c3:8f:35:64:1c:d7:50:bd:a7:54:f9:eb:5a:2e:
61:49:d0:b8:b3:37:54:f0:0f:d6:06:f9:3c:92:fa:
45:c8:56:d1:55:0f:1e:73:9e:64:44:d6:cb:f9:37:
fd:76:71:67:ad:ff:f7:95:0e:46:f5:bd:ad:8b:ee:
33:84:73:48:6d:5b:c2:d2:eb:6a:3b:9b:c9:11:2e:
7e:50:e8:4a:0e:21:fe:5d:dc:3b:fa:75:30:5b:52:
6c:3c:9a:c3:8f:04:23:32:c2:59:7b:11:31:9b:7f:
1c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:36:C3:4A:8E:22:3B:48:FA:B0:69:CE:18:BE:70:2C:70:5D:64:FA
X509v3 Authority Key Identifier:
keyid:E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:96:0e:0f:69:fe:c5:17:ea:2c:d9:18:9f:44:b9:76:5c:18:
e0:5d:32:13:51:bf:1d:4b:ad:e4:c7:10:2f:36:63:4e:62:7e:
16:95:f5:2e:e6:18:b2:79:3f:a5:cc:48:32:88:0a:cc:7f:ae:
86:14:b0:86:a3:db:21:fa:85:65:ae:61:1e:c6:50:1b:26:f9:
a2:c7:ea:92:33:f3:c9:59:1c:06:bc:c6:74:82:3f:93:17:1c:
b5:4b:7f:34:eb:9d:d4:da:b9:c8:a0:45:26:e7:93:96:1d:48:
48:7a:9c:94:ce:6b:22:3d:ae:64:f3:a7:32:b7:83:0a:93:a7:
c8:f2:27:a8:aa:98:83:52:90:5b:10:df:8b:e2:ac:72:b2:a3:
11:64:98:11:71:08:88:78:c0:23:75:db:e9:fd:bd:8b:53:85:
7b:9f:88:bd:1f:d0:eb:f7:13:06:c8:88:a7:95:7c:21:bd:ac:
86:6b:d8:62:37:1e:fa:00:10:b3:25:59:70:10:ac:7b:f9:70:
be:98:ea:39:6a:40:63:ed:e3:29:52:e8:d4:71:33:53:2a:7c:
36:be:72:b2:d3:aa:74:5d:7e:21:f1:44:09:fc:e1:38:80:ed:
e2:94:39:e1:db:c4:d6:5e:36:aa:44:ab:1d:32:03:62:6f:17:
1b:ff:e6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:59:27 2025 by rpki-client