Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
File: 58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json)
Hash identifier: QCM40Oou1yPzmm3QyPL9nzW8V6P7YAuEqJgvMXNlxVI=
Subject key identifier: C8:7B:50:82:AC:FB:13:B1:44:9F:4A:CA:D3:36:B3:BF:93:C6:6E:32
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Certificate issuer: /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial: 0197B70EDCEA0A02A8099EFC64A075C92823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
Manifest number: 08F7
Signing time: Sat 28 Jun 2025 15:01:33 +0000
Manifest this update: Sat 28 Jun 2025 15:01:33 +0000
Manifest next update: Sun 29 Jun 2025 15:01:33 +0000
Files and hashes: 1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: d5DDOFZGW4lail6zWvCJGpnnc+G8HkyLokZOxXVSpvY=)
2: rj-L1Ht9KU4SpqytVvSZ8FykJs0.roa (hash: o5/pUFEbXRLCOB5XslmeCnU9+6JRYi7PIpvUyWlOL2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:dc:ea:0a:02:a8:09:9e:fc:64:a0:75:c9:28:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Validity
Not Before: Jun 28 15:01:33 2025 GMT
Not After : Jun 29 15:01:33 2025 GMT
Subject: CN=c87b5082acfb13b1449f4acad336b3bf93c66e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:45:3a:0e:5e:d0:8d:9f:9c:b0:75:16:ad:
d9:8f:30:1b:1d:73:db:41:3b:8a:de:d1:57:d2:0d:
e6:83:7e:7f:db:db:cf:52:ae:bf:c4:a2:25:20:fa:
d3:f0:cb:5e:83:f4:77:00:c7:f8:c3:a2:2a:19:b4:
a5:76:b0:ab:2b:ec:0e:b7:b6:c8:1a:2c:2e:ef:36:
02:c0:3a:8e:46:d2:f5:d0:2c:e7:4f:94:90:32:97:
52:f9:93:f3:7b:f2:76:a2:b6:b5:87:77:77:96:d3:
50:28:90:05:7a:67:ce:4a:f1:e1:7c:a8:65:9c:99:
9f:b0:b6:10:e9:1b:90:48:55:21:23:fe:8b:0d:2b:
35:ac:7d:4e:f1:8d:d1:ff:69:93:e5:e7:7f:38:50:
75:49:a6:b6:a7:63:f8:52:5c:39:66:c7:61:d4:0a:
88:0f:fe:49:37:c0:0d:88:19:e9:ed:94:6b:09:0c:
0c:72:1c:dc:05:27:e3:3e:e6:0d:dc:f7:04:4d:e6:
fd:9b:bb:ba:62:70:fc:62:4b:63:fa:2c:00:1a:33:
51:dd:4d:a6:93:c2:b5:73:4b:e8:8a:39:2f:65:c0:
15:ee:06:91:a9:ea:c2:e1:35:a3:92:31:4a:a2:cb:
86:f9:ac:ab:ac:5e:d9:62:d2:c2:58:9b:39:23:32:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7B:50:82:AC:FB:13:B1:44:9F:4A:CA:D3:36:B3:BF:93:C6:6E:32
X509v3 Authority Key Identifier:
keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e7:91:5b:85:63:dd:18:7b:2c:9b:40:4c:c8:7f:54:95:ec:
99:4d:37:31:d0:23:b1:22:40:58:fb:a2:a9:38:ca:ba:ab:a7:
58:c0:96:d4:c4:27:8a:51:e5:60:81:e8:d9:9a:ae:1b:a9:63:
bb:94:4b:15:a5:d8:6e:f6:c9:82:63:34:07:a8:4d:34:44:d7:
52:d4:2e:d5:dd:5c:9c:de:ed:ac:21:e7:17:cf:c5:0e:24:d0:
43:50:39:98:64:58:98:cb:95:cf:7d:e9:17:a7:a0:37:67:5f:
e0:1d:61:dd:43:af:17:46:22:2d:97:fd:b5:66:3c:c5:e4:56:
34:6a:22:9c:92:1d:3b:42:ab:1c:41:97:c4:32:50:58:27:5d:
6f:f4:9f:98:eb:df:93:8d:b7:21:a5:f0:b9:96:2c:94:b2:13:
26:fa:22:af:a6:45:45:3b:f5:cb:69:51:c2:67:1f:70:e7:32:
32:23:c3:50:53:29:ee:d8:9e:7c:92:42:7e:0b:96:ea:00:0a:
fe:03:d0:3b:63:23:f6:28:57:fb:ce:f8:30:b7:38:84:98:6e:
37:96:36:7c:99:0f:b0:27:f9:9a:d1:23:d6:79:fa:a0:d0:a6:
fb:e4:35:1b:8e:f6:8d:7b:0a:28:6a:f6:05:25:66:60:59:26:
22:33:52:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:46 2025 by rpki-client