Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
File: 55XJYXylpqO_8mP8GDeZL9GsR_I.mft (raw, json)
Hash identifier: oqgQomKR4gpUJf8UU8kyZ3PuY2bUXN92SGWptCGlXOo=
Subject key identifier: AF:A7:75:1B:6F:0B:9B:DB:D1:6F:23:5B:BF:39:7A:08:CE:68:1B:05
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 0198861F39BF210509AAF5307D10AB86BC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
Manifest number: 1300
Signing time: Thu 07 Aug 2025 20:00:49 +0000
Manifest this update: Thu 07 Aug 2025 20:00:49 +0000
Manifest next update: Fri 08 Aug 2025 20:00:49 +0000
Files and hashes: 1: 55XJYXylpqO_8mP8GDeZL9GsR_I.crl (hash: gaRgXXrfXbmR3sutG7wfKw3mkAC+W/WXdAbaGGuGQTg=)
2: fdmY21hE8c4ebVfH7Y8PeaGR1rs.roa (hash: podpEHI3zXhpsNN3dsQSymn1ceGiInhTkIusl9LVsm8=)
3: nx0Nx3RUcjg69TXrkEufTSbs61w.roa (hash: KMtfn4uZNi8ih3qU7QWNp/Rahsd8G3VcGheyTA9UvAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:1f:39:bf:21:05:09:aa:f5:30:7d:10:ab:86:bc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Aug 7 20:00:49 2025 GMT
Not After : Aug 8 20:00:49 2025 GMT
Subject: CN=afa7751b6f0b9bdbd16f235bbf397a08ce681b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:6c:16:b8:e4:d0:16:c3:cb:11:47:a3:37:
14:ae:0a:2d:a8:50:d4:10:74:a0:d5:48:90:c8:ad:
4b:0a:53:ff:d1:83:ba:d9:d0:24:d5:7e:66:76:69:
48:9c:58:b3:cc:56:2f:61:fc:6e:01:5d:73:d5:7b:
02:2b:49:bc:74:97:06:70:bb:9d:fe:97:99:94:72:
20:04:41:7c:49:02:0e:0f:39:de:0a:1a:73:cb:a9:
66:b3:b3:22:2f:b9:0b:87:5d:9b:49:71:ac:b4:65:
d1:f4:8f:4d:39:56:66:13:26:aa:6d:26:1a:b9:ba:
05:05:f6:90:ce:ef:d0:71:fa:36:0c:28:12:0f:c3:
60:8e:07:a1:44:0f:83:89:ad:a5:08:aa:89:6d:0e:
63:be:fb:ab:72:7b:3a:dc:68:ea:70:1f:94:75:b0:
ad:db:3a:d3:53:f8:59:1c:de:f2:de:9e:d3:84:6f:
36:5d:06:1b:6e:6d:d7:14:84:e4:42:3b:ba:36:a2:
28:90:6e:21:60:95:0f:f5:19:f3:80:92:0b:d0:6d:
49:7b:40:dd:11:45:d1:77:88:f7:46:71:56:2a:ad:
c2:fa:ae:71:5a:75:ad:f9:bf:04:72:50:7b:16:8b:
d0:79:a8:41:34:6d:09:6f:bd:49:19:ad:1b:3e:61:
f9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A7:75:1B:6F:0B:9B:DB:D1:6F:23:5B:BF:39:7A:08:CE:68:1B:05
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9d:91:9f:17:cd:ca:6c:60:fb:7b:7a:88:18:3d:dd:00:4a:
35:0c:c1:19:56:e2:48:68:49:60:c4:5d:68:df:5f:d0:e2:47:
42:c2:4e:2b:fa:58:9c:f3:c6:ef:f0:e2:3e:1f:74:00:ca:a8:
59:cf:7e:54:29:8a:7a:b7:57:89:a9:d9:f7:68:26:e8:50:f1:
91:9c:44:27:c0:81:93:bf:63:05:fe:f2:42:78:1f:0d:32:3e:
46:12:8f:4a:f8:e2:38:49:11:1d:cd:d0:4e:5a:c4:2e:24:a0:
ea:b6:37:bc:ea:68:d3:21:4d:ff:f8:9c:67:46:64:ce:63:1c:
53:9e:80:a0:5c:a8:bc:09:27:07:0a:ce:3c:38:df:84:e1:b5:
db:c7:79:6d:09:20:62:b8:a3:84:a3:6d:0c:4e:70:8f:98:00:
21:bd:d3:34:ee:fd:dc:8a:9c:6d:ff:d4:28:de:bb:7f:4b:66:
32:0b:a9:db:ad:72:9e:13:b7:ba:23:0e:f9:25:41:12:37:4b:
51:ca:16:d4:4e:13:d8:29:c5:c7:51:84:69:66:96:6c:8a:75:
a3:f0:48:ff:54:23:fb:5c:87:6b:ea:dc:aa:09:ba:f9:e2:b1:
01:bd:91:22:2c:ed:a2:2e:a2:71:9b:4b:33:de:e9:4b:e9:aa:
35:93:a4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:50:14 2025 by rpki-client