Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
File: 59CqrsABapJr7tz991g1gVW3G-8.mft (raw, json)
Hash identifier: To50wpGQiaTa9uANA3H67hufben4ADlVa4MTDHyeNao=
Subject key identifier: 9B:AE:62:66:F8:6E:0A:B8:DE:66:BE:02:3E:97:AC:7B:12:CF:6B:37
Authority key identifier: E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF
Certificate issuer: /CN=e7d0aaaec0016a926beedcfdf758358155b71bef
Certificate serial: 019A0035E04E1A8728EF1C9FB0038119BB71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
Manifest number: 0972
Signing time: Mon 20 Oct 2025 06:02:01 +0000
Manifest this update: Mon 20 Oct 2025 06:02:01 +0000
Manifest next update: Tue 21 Oct 2025 06:02:01 +0000
Files and hashes: 1: 59CqrsABapJr7tz991g1gVW3G-8.crl (hash: ADIq6MswoD0TrOpH2b5DOF4ZNONCIu5PnahQN04dfWM=)
2: TWbavJSlzl0yvrhE4VudASOWZFo.roa (hash: ur2N9sV1aoXG7CrT2cW2W2OoDmeobx2g2/VRIr5D2Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:e0:4e:1a:87:28:ef:1c:9f:b0:03:81:19:bb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d0aaaec0016a926beedcfdf758358155b71bef
Validity
Not Before: Oct 20 06:02:01 2025 GMT
Not After : Oct 21 06:02:01 2025 GMT
Subject: CN=9bae6266f86e0ab8de66be023e97ac7b12cf6b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:56:ab:17:da:6a:23:44:f6:9b:8a:61:f3:
c3:c8:bd:74:6d:70:cb:92:83:85:e3:74:9b:9f:a8:
2e:78:3d:49:5a:32:68:2b:d3:95:58:45:c0:f5:b7:
87:5e:70:55:80:44:bc:2e:80:2e:00:7f:f9:40:e1:
e8:3f:f7:84:af:bd:5b:e2:f4:63:45:89:b7:bd:d1:
76:0d:f9:9f:8c:13:15:44:85:23:2d:be:46:16:fd:
75:19:81:aa:bb:fd:9d:ed:6c:d0:e0:40:08:d7:06:
80:23:8e:f2:74:9b:1b:ac:08:cc:73:7f:1e:dc:a1:
01:30:e5:fe:bb:88:93:c1:ad:d5:b3:c6:f2:86:58:
b2:53:7e:58:54:c4:11:5e:72:ec:44:6e:cf:54:ec:
56:3f:61:03:1a:49:64:42:dc:d3:76:b6:ea:61:84:
4e:da:80:b4:db:34:8b:af:0f:21:a4:a9:ad:d0:be:
b9:36:df:2f:40:e8:10:c8:17:16:31:71:95:f6:d4:
b2:cc:88:6f:da:9e:1c:ca:83:6b:57:dc:6b:ed:c4:
51:27:f3:10:0e:8e:22:55:92:d3:e5:9b:10:59:5c:
cd:aa:79:16:35:02:0b:96:62:35:58:92:76:cb:2a:
b2:00:3c:ec:60:e3:fa:d6:35:cb:a9:78:23:e6:94:
74:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AE:62:66:F8:6E:0A:B8:DE:66:BE:02:3E:97:AC:7B:12:CF:6B:37
X509v3 Authority Key Identifier:
keyid:E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:bf:f9:8d:6e:cf:f7:d9:5a:d3:b0:78:9f:bc:87:82:aa:f0:
c6:25:af:1c:4f:bc:e3:aa:4f:1e:0e:20:12:2c:32:30:1c:48:
16:0d:69:1a:9e:2f:73:5e:a5:b9:fc:25:5b:05:dc:ce:e4:55:
0e:2e:7c:5f:7c:ce:09:d3:23:42:cb:98:b7:3d:fc:6e:52:20:
91:ff:a6:2b:8b:3e:5a:b8:9c:7e:b6:9a:1a:a5:5d:2c:90:41:
dd:07:88:e3:19:9f:1c:41:15:04:a1:a3:3d:03:46:6d:b4:f5:
8a:d3:cb:28:88:65:af:ab:61:db:51:86:ae:72:6e:37:74:68:
99:79:fd:6d:8f:75:ef:f0:f3:fd:5d:88:d8:9a:f2:d4:ef:e3:
4c:33:4d:4c:45:b8:41:64:b1:79:0e:83:4b:e5:28:b4:11:fc:
9e:d0:c6:03:66:5d:8e:64:80:1f:ab:33:8a:0d:b8:02:55:96:
a6:ec:fa:c0:70:18:52:f7:64:74:87:1f:28:68:ca:14:47:94:
08:92:ad:a6:69:1a:2c:60:b9:6b:99:39:a3:64:84:03:8e:b6:
a5:d8:ab:d6:a5:2a:95:13:50:b2:9f:0f:a0:01:5f:74:8b:8d:
b8:f2:be:a8:1f:06:4f:17:ad:c5:cb:03:c1:cf:c9:03:08:3b:
08:93:2a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:57 2025 by rpki-client