Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
File: 53A2AA1601CC09214461D03CA771ED50EC1D6325.mft (raw, json)
Hash identifier: EIcEbQM5j2nsNTvWfzGn1hHdZ0SNsbVHKUHuOeXvHNw=
Subject key identifier: C1:9D:53:4D:EF:6E:F0:6B:92:65:B0:DE:B4:A6:7A:FF:64:2E:31:1B
Authority key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
Certificate issuer: /CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Certificate serial: 35787317ED9FCDFEB866FEF082E4FBBA7C61CE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
Manifest number: 0266
Signing time: Tue 04 Nov 2025 07:03:43 +0000
Manifest this update: Tue 04 Nov 2025 06:58:43 +0000
Manifest next update: Wed 05 Nov 2025 09:51:43 +0000
Files and hashes: 1: 53A2AA1601CC09214461D03CA771ED50EC1D6325.crl (hash: DxTzzEGcdcNVs7lH41E7p49V12ONibSKLvis9SJv0+w=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:51:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:78:73:17:ed:9f:cd:fe:b8:66:fe:f0:82:e4:fb:ba:7c:61:ce:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Validity
Not Before: Nov 4 06:58:43 2025 GMT
Not After : Nov 5 09:51:43 2025 GMT
Subject: CN=C19D534DEF6EF06B9265B0DEB4A67AFF642E311B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:36:0a:6b:d8:d2:84:d1:d5:69:b1:17:64:
a6:e6:54:15:0f:03:0c:32:46:34:ce:44:73:6c:da:
03:1a:8b:80:9b:5b:9d:31:ba:96:56:36:44:39:c3:
98:9a:d0:14:7a:e7:f9:c4:5d:72:17:1e:89:e8:e9:
4a:7f:de:6a:67:4b:c9:fb:a3:e0:ea:c9:59:ea:d0:
cc:81:30:bf:25:b3:c2:df:6d:7b:5f:63:3a:7e:e1:
80:d7:7c:8a:71:d7:70:5f:6c:37:d0:68:f8:19:4d:
f8:9b:8a:16:58:61:5c:f3:eb:17:47:3b:25:70:32:
b8:1d:65:83:02:17:fa:3d:5b:c6:a3:c9:c8:21:e6:
d6:94:84:91:de:b8:37:9e:b8:4a:e7:66:a2:64:d0:
e6:d9:e7:60:c8:aa:02:12:8e:8f:12:be:d8:bc:b2:
79:b5:26:34:54:51:b4:2d:fa:28:b6:48:4c:5e:a6:
bd:fd:a1:7e:e3:70:4b:16:45:75:7f:12:ad:a6:75:
dd:91:ee:65:ee:7c:21:ab:71:b0:6a:b4:ec:c8:5f:
35:b9:ca:76:c8:1a:06:bd:47:a5:6f:4a:3a:d1:46:
ba:84:9f:97:43:50:1f:bb:fe:96:74:19:48:85:84:
9d:5e:61:bb:29:06:80:fb:9e:bc:6c:39:c9:0f:5d:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9D:53:4D:EF:6E:F0:6B:92:65:B0:DE:B4:A6:7A:FF:64:2E:31:1B
X509v3 Authority Key Identifier:
keyid:53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9c:7d:f8:88:5e:1c:2c:ab:61:0b:db:c9:eb:11:dc:ea:1f:
44:cc:32:b5:25:6d:b4:11:4f:4c:41:31:51:a6:7c:60:fd:c6:
90:76:57:03:f1:47:e8:5b:bb:56:3a:dd:02:bd:9c:90:01:a2:
ae:05:9c:32:98:8b:dd:3a:ac:a8:60:c8:f8:da:47:31:db:f9:
1d:e1:16:d7:df:4d:8b:e5:23:db:11:fa:11:da:bf:0d:3f:c7:
a2:a1:3a:ae:4a:ca:e0:34:73:1f:4a:f2:80:00:39:12:f2:e3:
30:29:76:8b:53:12:48:dc:e4:d9:6c:26:e3:39:9b:17:2a:ef:
55:d7:ba:fb:42:98:8b:ee:b2:d7:a0:b2:00:18:5f:07:12:9d:
1d:38:6b:02:55:6b:fe:63:97:f2:1b:a3:69:83:5e:b9:db:f2:
8d:1d:18:6e:3b:e8:27:b2:1c:37:12:22:15:c9:f5:ee:2c:97:
4b:57:b5:f0:2c:e9:89:91:4e:86:01:73:6d:02:10:9b:b4:99:
fe:be:51:39:a8:f1:48:bf:8f:16:67:44:f4:1d:80:e8:2c:97:
f2:33:8f:8c:5d:19:92:0f:65:51:8f:79:db:d8:eb:78:27:f8:
4a:9d:cd:ff:5e:8a:c9:d5:1e:b3:69:df:b0:e5:c6:4b:44:db:
a2:06:57:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:49 2025 by rpki-client