Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
File: 58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json)
Hash identifier: A5dLWUNB0hvjerojXZaJVrvtRTB4DKHcisheEIjChGo=
Subject key identifier: A1:9F:0A:52:4B:B8:84:4B:BE:97:6D:23:C3:18:F6:CF:0A:52:00:EB
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Certificate issuer: /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial: 0196BFDC67147976FC1D121BCD0772704951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
Manifest number: 0877
Signing time: Sun 11 May 2025 15:00:14 +0000
Manifest this update: Sun 11 May 2025 15:00:14 +0000
Manifest next update: Mon 12 May 2025 15:00:14 +0000
Files and hashes: 1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: Ccx6DS6Hq9AA2dwNAyS8//4O1dfpZPNoZHPYKeNNAfA=)
2: rj-L1Ht9KU4SpqytVvSZ8FykJs0.roa (hash: o5/pUFEbXRLCOB5XslmeCnU9+6JRYi7PIpvUyWlOL2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:67:14:79:76:fc:1d:12:1b:cd:07:72:70:49:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Validity
Not Before: May 11 15:00:14 2025 GMT
Not After : May 12 15:00:14 2025 GMT
Subject: CN=a19f0a524bb8844bbe976d23c318f6cf0a5200eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:32:83:85:ce:9c:2e:dc:76:f8:77:53:5e:
dd:b4:49:ff:3e:98:26:48:3d:1f:09:cd:fd:6f:60:
ed:1e:d2:78:2c:5f:27:34:48:7e:a5:b0:db:8e:3c:
7b:f5:45:bc:4b:a1:02:b6:b8:84:27:5d:e3:c9:5e:
42:86:ed:aa:17:38:0e:1d:1d:e2:eb:e2:13:c4:aa:
1c:4f:0d:0d:e3:e6:ae:4e:76:ed:54:93:97:dd:9d:
3a:b9:7b:e4:d6:9e:b3:48:8b:91:f0:fd:f7:0b:16:
be:93:ac:d1:b5:a1:56:11:32:00:7b:ed:6a:d5:5a:
be:96:59:c3:8a:c8:01:3d:60:85:2c:e8:88:ec:a0:
16:11:32:73:a8:bf:7b:ed:a1:7e:7a:1b:18:28:90:
58:53:7c:bc:44:6d:b3:82:ff:af:9c:f5:d0:01:62:
77:07:b6:f7:07:e9:ed:77:bc:01:be:26:2f:e2:72:
48:72:3f:38:c6:db:f1:58:30:80:e8:b0:d1:c5:17:
39:c1:9e:2e:e5:00:18:58:fa:f5:20:86:7a:f6:4b:
c1:b5:95:69:c7:ee:0d:3e:e2:b1:84:22:81:e1:89:
a1:d8:1f:0c:58:77:3d:af:15:90:43:ff:88:ba:88:
a0:36:6b:68:c3:4b:13:1a:a8:1f:65:56:8d:7c:af:
7e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9F:0A:52:4B:B8:84:4B:BE:97:6D:23:C3:18:F6:CF:0A:52:00:EB
X509v3 Authority Key Identifier:
keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b6:a1:1b:e2:9b:68:ef:d4:93:ff:0e:0a:ea:92:08:f3:85:
0b:9a:07:b3:4e:59:1f:13:6e:0d:f3:93:c4:d7:2e:45:6c:6e:
b3:6a:70:a1:05:c5:3e:7d:81:3e:15:7a:2e:8c:29:11:32:69:
ce:04:11:85:1c:f6:73:21:96:07:e2:25:4a:b2:c8:18:0b:cb:
3f:25:e2:c7:76:17:62:59:5b:fd:28:fb:97:87:8c:5c:74:ca:
d9:4c:e7:69:2b:29:3b:d7:b5:c2:30:1b:f4:dd:c5:93:31:ce:
ab:52:9f:90:cb:b3:02:6a:26:03:bf:61:41:7b:a9:12:f7:da:
13:75:95:90:6b:3d:96:1b:49:39:2a:d3:86:b9:f3:a7:d1:8b:
87:df:45:a5:d8:50:84:84:ff:1d:e7:03:d9:bc:ad:bb:8a:8a:
05:4e:97:4e:5f:07:cd:40:ae:3b:9a:34:f9:71:b9:e6:31:8f:
27:07:77:73:fd:6e:67:3b:5f:df:9b:9e:16:8f:03:fe:60:e8:
f6:fc:98:d6:a8:bb:82:57:f6:c6:50:06:90:60:5a:17:12:02:
ef:78:2b:34:60:ed:a4:b2:ae:f2:c7:2a:a0:f0:b1:75:ff:72:
7c:29:28:59:9d:c3:7a:4b:d9:ac:8f:a0:d5:28:a9:c4:a5:7b:
83:56:e6:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/3GcUeXb8HRIbzQdycElRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2M4NjI2MTM4YmYxZTljYjNmZDFmZWMyNmM2OGM0YTYz
NDA5NmIwHhcNMjUwNTExMTUwMDE0WhcNMjUwNTEyMTUwMDE0WjAzMTEwLwYDVQQD
EyhhMTlmMGE1MjRiYjg4NDRiYmU5NzZkMjNjMzE4ZjZjZjBhNTIwMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt44yg4XOnC7cdvh3U17dtEn/Ppgm
SD0fCc39b2DtHtJ4LF8nNEh+pbDbjjx79UW8S6ECtriEJ13jyV5Chu2qFzgOHR3i
6+ITxKocTw0N4+auTnbtVJOX3Z06uXvk1p6zSIuR8P33Cxa+k6zRtaFWETIAe+1q
1Vq+llnDisgBPWCFLOiI7KAWETJzqL977aF+ehsYKJBYU3y8RG2zgv+vnPXQAWJ3
B7b3B+ntd7wBviYv4nJIcj84xtvxWDCA6LDRxRc5wZ4u5QAYWPr1IIZ69kvBtZVp
x+4NPuKxhCKB4Ymh2B8MWHc9rxWQQ/+IuoigNmtow0sTGqgfZVaNfK9+DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGfClJLuIRLvpdtI8MY9s8KUgDrMB8GA1UdIwQY
MBaAFOfMhiYTi/Hpyz/R/sJsaMSmNAlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWIt
ZjVjMDlmZjM4YTAwLzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWItZjVjMDlmZjM4YTAw
LzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLahG+Kb
aO/Uk/8OCuqSCPOFC5oHs05ZHxNuDfOTxNcuRWxus2pwoQXFPn2BPhV6LowpETJp
zgQRhRz2cyGWB+IlSrLIGAvLPyXix3YXYllb/Sj7l4eMXHTK2UznaSspO9e1wjAb
9N3FkzHOq1KfkMuzAmomA79hQXupEvfaE3WVkGs9lhtJOSrThrnzp9GLh99FpdhQ
hIT/HecD2bytu4qKBU6XTl8HzUCuO5o0+XG55jGPJwd3c/1uZztf35ueFo8D/mDo
9vyY1qi7glf2xlAGkGBaFxIC73grNGDtpLKu8scqoPCxdf9yfCkoWZ3DekvZrI+g
1SipxKV7g1bmSQ==
-----END CERTIFICATE-----
Generated at Sun May 11 22:31:47 2025 by rpki-client