Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
File: 58OrlrdMKsTwSuYqt-gs3xmI7UA.mft (raw, json)
Hash identifier: eOKitPkuHjgNxWSTdpwSr/bSjJqDsGBIsXzTPD6TafY=
Subject key identifier: A4:2A:01:C0:5E:CD:41:0A:82:18:31:89:25:86:83:26:F2:ED:EA:4C
Authority key identifier: E7:C3:AB:96:B7:4C:2A:C4:F0:4A:E6:2A:B7:E8:2C:DF:19:88:ED:40
Certificate issuer: /CN=e7c3ab96b74c2ac4f04ae62ab7e82cdf1988ed40
Certificate serial: 0199FEEC26F62C93997D942A1F44B456DE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58OrlrdMKsTwSuYqt-gs3xmI7UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
Manifest number: 0865
Signing time: Mon 20 Oct 2025 00:01:53 +0000
Manifest this update: Mon 20 Oct 2025 00:01:53 +0000
Manifest next update: Tue 21 Oct 2025 00:01:53 +0000
Files and hashes: 1: 58OrlrdMKsTwSuYqt-gs3xmI7UA.crl (hash: /jJAtU/R6zb4nMa02RtGg/2dzws17gPySDApwQAg0wU=)
2: tRQVAZPhSI7yY2YBf58wHloNtVk.roa (hash: x6U/gqCwfyDYCGrA4HX4YKbEtJbHihcQ4Z9Ks5Bgn58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/58OrlrdMKsTwSuYqt-gs3xmI7UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:26:f6:2c:93:99:7d:94:2a:1f:44:b4:56:de:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c3ab96b74c2ac4f04ae62ab7e82cdf1988ed40
Validity
Not Before: Oct 20 00:01:53 2025 GMT
Not After : Oct 21 00:01:53 2025 GMT
Subject: CN=a42a01c05ecd410a8218318925868326f2edea4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:07:c4:9f:83:e3:4f:15:23:0f:b2:49:5d:
de:4a:11:72:33:80:af:2f:fa:bf:e8:05:f8:79:f4:
3a:6d:ef:e9:79:a5:09:9e:a8:ae:a2:99:79:2e:ce:
93:0d:ce:3d:a0:f0:8b:09:b1:32:f4:38:44:45:85:
e3:f9:6f:99:b4:80:e6:42:de:e4:24:92:7c:1c:73:
93:92:89:17:cf:56:0d:e7:0e:d5:51:3a:cd:c4:4b:
4a:54:b1:30:96:79:67:bb:ac:10:7a:56:0f:eb:e9:
18:c1:11:ad:25:16:23:30:ea:59:50:96:0b:72:41:
88:4f:a2:c1:4e:cf:2f:0a:3a:45:50:3b:95:af:d2:
3e:0e:30:e5:96:7d:1b:28:cb:f5:73:2e:3a:bb:93:
db:c7:67:84:f9:b8:fe:b4:54:5a:6b:05:63:08:89:
d9:ee:23:5f:8a:2f:c1:b6:e8:ef:5b:29:08:41:46:
bf:7a:d5:bd:16:6c:7b:15:66:d9:04:bf:73:e8:01:
b4:b8:92:62:e9:b2:e3:f2:2a:21:32:0b:64:8f:7d:
aa:8f:b1:65:88:46:db:8f:f5:5e:3d:41:5a:44:4a:
92:4f:82:c4:d6:80:69:f0:7c:0c:4d:d0:66:d1:86:
6b:c8:39:26:2c:1a:24:61:27:3f:20:d4:2d:17:dc:
bc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2A:01:C0:5E:CD:41:0A:82:18:31:89:25:86:83:26:F2:ED:EA:4C
X509v3 Authority Key Identifier:
keyid:E7:C3:AB:96:B7:4C:2A:C4:F0:4A:E6:2A:B7:E8:2C:DF:19:88:ED:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58OrlrdMKsTwSuYqt-gs3xmI7UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:57:77:bc:55:1d:94:f6:3a:97:df:68:de:da:57:67:29:1a:
d2:d2:51:9c:10:32:92:75:d5:5b:ea:09:93:e7:4a:24:4d:5c:
5f:3f:fe:1a:bb:dc:38:f4:fb:24:75:40:96:ec:79:f8:4d:97:
d3:e8:e8:be:57:df:79:43:4e:01:5e:1a:56:e8:74:25:47:e2:
db:e6:cb:53:d4:4f:3a:ad:f5:83:66:c6:28:c7:7e:b3:b0:a3:
89:76:db:3c:da:5d:20:5f:27:42:be:2e:28:37:9b:66:2e:b5:
26:c7:3e:ed:70:b0:65:af:f2:00:06:80:b3:9f:51:97:b5:2d:
22:2d:51:7f:f3:ff:7b:52:59:b7:c4:b8:db:4c:ee:a9:4e:e5:
33:e1:8e:0e:12:cf:53:94:fb:67:69:81:72:f7:1e:93:cc:53:
7a:ef:39:54:00:f2:d9:0e:25:62:7e:11:0c:ff:36:f7:0f:37:
43:b5:93:32:92:09:88:dd:f6:d0:cb:02:01:02:65:a7:cf:fb:
67:71:9e:59:b2:28:27:d8:ee:c2:95:5c:0a:20:39:c1:b2:fc:
42:68:92:80:ae:f1:7a:74:e3:e8:34:31:fe:d3:2b:7c:92:ed:
09:29:12:ba:70:36:4e:b5:ac:c0:07:c2:f8:90:e7:15:39:22:
a4:a3:6c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:28 2025 by rpki-client