Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: I9v4hskjG967kbqNhPc/gLfvOv44wZoFskBqHUxj20w=
Subject key identifier: DA:77:1E:A1:1B:DC:B7:BA:32:69:9D:95:77:24:AF:52:27:AA:47:F4
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 0199FBEA9D7B50FA8557325E04A35BBAE8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 0537
Signing time: Sun 19 Oct 2025 10:01:20 +0000
Manifest this update: Sun 19 Oct 2025 10:01:20 +0000
Manifest next update: Mon 20 Oct 2025 10:01:20 +0000
Files and hashes: 1: 4ZmOjsOwgULv_B_QMvBBmXG9f0w.roa (hash: x7k9BFugEad58s4inzjh5oIEa4SPB8OHd1xRzbFg5n8=)
2: BuhLOhQsyBTsy289mKisTf0E47Q.roa (hash: aKuhf01k9TU7vUcFwfvkZL/qxoA5uBGJCmVJQlfg6tY=)
3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: fy171qX2OdCA7qaBPkKsci3FQQbfEBxRycAqJehXv6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9d:7b:50:fa:85:57:32:5e:04:a3:5b:ba:e8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Oct 19 10:01:20 2025 GMT
Not After : Oct 20 10:01:20 2025 GMT
Subject: CN=da771ea11bdcb7ba32699d957724af5227aa47f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:ab:82:27:43:fa:c7:9b:ea:67:f4:9b:f0:
91:16:b9:1e:6f:e7:ad:22:d4:a3:9f:f1:93:98:6c:
10:80:24:d2:a4:cf:b5:12:a2:1a:2b:2d:eb:03:be:
d0:a8:87:88:0a:22:d9:fb:fc:e3:45:59:a7:d7:b4:
2b:ed:cd:d4:ff:ea:f6:03:0a:75:a0:58:6e:36:8c:
12:bf:b0:98:95:fb:81:19:3e:82:44:f1:22:1a:44:
91:ff:7a:fc:1c:2e:fb:5e:04:a4:fb:88:7d:2d:e0:
55:5c:79:ab:4b:4a:4b:74:55:97:6a:3a:5e:45:2d:
de:57:6f:68:f8:84:6c:98:b0:01:2b:b4:c1:4c:07:
b3:40:60:12:0c:9a:b2:53:51:9b:c9:b6:8a:8d:a6:
58:03:31:9c:c8:19:23:2b:90:36:7a:64:46:9c:58:
f3:c2:40:3a:40:81:9a:33:fb:07:61:f5:3e:bc:6c:
c4:fa:e3:e3:b0:04:b7:e6:f6:70:d0:1d:e1:98:d7:
90:95:9f:02:dd:94:9d:b0:8d:6b:03:70:09:e7:96:
09:26:af:c3:fb:8a:25:dd:68:b5:6a:cf:e8:4e:09:
6c:1b:26:41:e7:ed:78:bd:16:74:84:46:ae:28:dd:
7a:ad:b2:9f:74:8f:f7:c1:45:5a:96:2b:1b:cf:65:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:77:1E:A1:1B:DC:B7:BA:32:69:9D:95:77:24:AF:52:27:AA:47:F4
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d8:d8:7b:67:dc:05:b4:c6:d0:6a:d0:42:78:1f:31:3f:18:
45:21:20:c8:0f:27:eb:82:31:f0:b3:34:64:be:63:5a:b7:02:
1b:53:aa:0d:8f:29:e4:26:1f:04:9d:31:5e:67:4f:3f:32:2d:
c5:1b:7e:1b:47:05:2a:e8:ac:c0:f0:93:03:b5:19:1a:f9:d6:
6f:a1:1a:04:cb:d2:10:d7:0b:2f:e4:53:25:fa:55:7e:eb:84:
f4:cd:97:59:21:e9:5b:99:96:ca:42:20:45:66:91:6c:bf:ef:
05:02:8c:ad:0a:fd:03:09:17:59:4a:2a:e7:2f:39:c1:55:a5:
c8:2d:b6:a4:87:de:fd:4f:7b:a1:23:69:1f:f0:d6:e6:b3:07:
c7:17:1c:1e:f5:c0:b7:82:d0:de:d6:50:ac:17:2b:90:8d:c1:
60:7e:4c:cf:e8:15:b3:09:01:61:14:25:81:65:76:3a:09:d9:
a0:2f:c4:b4:3f:ba:9d:3b:65:c4:e0:99:63:06:80:12:db:b7:
10:1e:44:85:58:0e:c7:a5:08:4a:49:ba:6d:70:93:d9:0f:70:
cc:1e:9e:25:7e:75:30:0a:79:fc:40:3d:f6:d8:d9:98:3a:5a:
04:9a:6e:41:64:cd:8b:0d:83:f7:e5:16:4a:18:15:56:69:99:
34:77:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:55 2025 by rpki-client