Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
File: 553FQ1otyX42X_SVcMBNUT9vztI.mft (raw, json)
Hash identifier: 52a44tDgoEuQCDdv4AkPhppxaa41IR/NC/DjHNLjcfA=
Subject key identifier: 89:4B:D0:E6:DC:DA:81:EC:26:A2:49:CB:4F:57:3B:4F:BE:6F:1F:C4
Authority key identifier: E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2
Certificate issuer: /CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
Certificate serial: 019895FFDA0A72B491BCDDA15BD2A2CB9BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
Manifest number: 0F79
Signing time: Sun 10 Aug 2025 22:00:29 +0000
Manifest this update: Sun 10 Aug 2025 22:00:29 +0000
Manifest next update: Mon 11 Aug 2025 22:00:29 +0000
Files and hashes: 1: 553FQ1otyX42X_SVcMBNUT9vztI.crl (hash: f5I9dJAWLrze9q5RABGLitr2srX8qPvx765/TizClkg=)
2: BxGf4lSFYKHeuXnAyFK6i1JNIxE.roa (hash: CPX9KaqdGijt5ka4UvJo37MrT8M4No8zXRKHLnaECVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:ff:da:0a:72:b4:91:bc:dd:a1:5b:d2:a2:cb:9b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
Validity
Not Before: Aug 10 22:00:29 2025 GMT
Not After : Aug 11 22:00:29 2025 GMT
Subject: CN=894bd0e6dcda81ec26a249cb4f573b4fbe6f1fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:c1:8f:06:45:ce:eb:13:7f:35:5c:52:fe:
cb:84:01:aa:41:f0:f0:6b:ae:ee:07:bb:a6:e3:f4:
51:15:1f:12:ea:28:06:10:4b:e2:31:1d:b7:99:6b:
3d:9e:48:7a:70:70:5e:9a:44:0b:05:e1:4c:27:ab:
c3:03:fe:fb:72:f4:2e:46:0d:64:80:90:56:7e:37:
02:66:a9:cf:4e:6d:b0:e7:d6:6b:4c:1a:c4:1d:94:
8d:7d:81:0a:fb:75:44:05:3d:a9:ee:51:2b:18:9d:
98:4d:ff:6a:d4:6f:c5:3d:41:76:67:08:c9:a9:79:
0b:a5:2b:06:7d:88:b9:1a:c7:fe:6c:f8:19:45:05:
a5:06:fc:7f:db:49:4b:97:54:be:ca:0d:f2:f1:ce:
48:f7:82:bc:59:fc:4c:e6:73:ea:65:85:03:90:30:
b9:18:38:51:c6:00:86:a3:1c:70:d0:14:84:c5:df:
60:96:c5:bb:68:81:ca:cc:2a:18:0a:45:aa:d7:19:
39:47:d0:6d:8e:ec:fc:37:2b:f6:33:4e:35:33:45:
e5:89:63:d5:0f:40:f3:bb:eb:27:3c:44:f8:0b:a1:
22:58:11:19:19:02:3d:a0:a4:0c:a6:f5:79:e3:17:
93:01:0b:95:00:f1:c5:16:6a:65:e4:7a:60:6f:ef:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4B:D0:E6:DC:DA:81:EC:26:A2:49:CB:4F:57:3B:4F:BE:6F:1F:C4
X509v3 Authority Key Identifier:
keyid:E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6c:7f:c5:ca:02:24:65:b7:96:a1:e3:ac:2d:1e:06:95:ac:
e3:e5:3f:ea:be:c8:7c:9e:1c:5c:d9:4d:b3:46:19:ee:12:52:
ed:0c:76:83:fa:db:93:e6:da:00:b0:e1:1a:3d:df:be:06:ee:
28:09:fc:82:a7:fd:12:16:a9:b0:f5:b2:28:43:13:ed:16:fa:
ad:53:50:fe:91:20:2f:da:e8:6b:42:ab:91:12:91:c5:4b:2b:
d8:2d:d7:0e:b8:79:ec:05:7f:80:bf:6a:cd:d8:22:06:dc:44:
8e:bf:24:83:46:12:2a:fa:0d:b0:25:73:98:5f:fc:11:05:5e:
77:d0:1f:b6:fa:99:c4:5a:aa:dc:d5:c9:fe:6f:c8:11:63:2f:
14:23:e7:47:b3:c1:53:fd:de:8b:98:70:ec:18:ee:ff:c9:88:
7e:9d:7b:6a:1c:4b:fb:d5:39:79:b7:03:40:26:19:46:39:f1:
0f:5d:ec:3b:6e:4e:41:78:42:01:1a:9c:de:a5:f3:8a:15:60:
ec:20:6c:de:ab:85:ca:23:af:f5:64:ab:c8:4e:10:dd:4c:13:
01:a3:d0:53:0c:41:0c:14:3e:22:25:44:df:12:8b:68:71:23:
43:bb:56:1c:1e:2b:f2:8d:e1:7f:54:5e:89:db:51:52:40:c5:
16:67:4c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:29 2025 by rpki-client