Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier: wgJsxUQGUqZaQQj+kvlphYDr9iaQtHUmA0hCtKF8hI0=
Subject key identifier: 5D:1F:76:A9:EF:E1:48:FE:84:55:74:5E:FB:09:92:4A:70:67:25:28
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 0199FCC636249CBE9DB3C66A3FA42A42CE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:12 +0000
Manifest this update: Sun 19 Oct 2025 14:01:12 +0000
Manifest next update: Mon 20 Oct 2025 14:01:12 +0000
Files and hashes: 1: JOqhFiRetaCWX-COli2qt4epZmU.roa (hash: Tggn3wwdEvZYJd/9CH5nD5nBnaCH9L0m/C7cCJYB59s=)
2: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: OdV9NXl2i7Wj51RZ6pqf0Tg9IE6NjIJLFd1CtBY9G80=)
3: rPpO-fPVx8XfYvByx6grU3jDRqc.roa (hash: yhGIutrfrX3qPTF0PHHiWDvjrLT7q6l6BKv9z17Nw1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:36:24:9c:be:9d:b3:c6:6a:3f:a4:2a:42:ce:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Oct 19 14:01:12 2025 GMT
Not After : Oct 20 14:01:12 2025 GMT
Subject: CN=5d1f76a9efe148fe8455745efb09924a70672528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4b:d2:50:60:46:56:82:ee:75:94:f8:f7:c5:
a7:0c:ed:72:0e:97:92:ee:fb:3b:b8:df:69:d3:34:
8c:13:34:f1:47:bf:06:0e:2e:60:d4:e3:04:f3:43:
d9:a7:a0:e7:b5:d5:a1:e6:43:d5:3b:1a:76:05:58:
c3:f7:9d:79:ea:96:85:29:b2:ae:6f:82:7b:03:3c:
21:6a:a2:f9:22:54:2c:8e:b7:1a:b4:af:80:86:3e:
e0:18:47:54:48:26:4e:81:e2:1e:d2:f8:2b:2e:c3:
33:72:f1:2c:02:5e:a1:a5:6d:f3:d1:5e:c7:f8:db:
0e:3e:bc:9e:52:a4:bc:cc:42:59:55:41:bd:d1:1c:
69:ec:ef:64:b4:62:55:55:2a:04:26:dc:e7:90:51:
59:3b:07:9c:8b:2e:c1:b0:34:7d:bb:30:0f:b9:bd:
7d:2a:8c:7e:ac:21:e7:07:31:8d:22:3f:8e:8a:e5:
59:a3:6b:c6:2f:38:99:84:2c:99:a1:57:0e:94:e3:
a5:89:e7:5d:c9:81:32:80:fb:67:c1:cf:bb:5a:9e:
dd:13:da:2e:86:ca:0f:a1:86:2e:94:0b:e4:18:38:
d7:95:59:21:b6:bd:eb:b6:d7:27:4b:91:6b:1b:f5:
69:f1:91:64:e1:06:8f:b6:8e:ff:cb:54:d6:c7:9a:
98:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1F:76:A9:EF:E1:48:FE:84:55:74:5E:FB:09:92:4A:70:67:25:28
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7a:30:8a:4c:4e:55:e0:19:5a:d9:7c:f5:47:a7:b7:e3:8b:
1d:f4:dd:8c:73:b4:78:54:3e:b8:b6:15:6b:af:d1:33:65:c0:
0a:5f:98:b9:3d:5c:ce:a6:37:c6:f1:c7:c7:16:5e:a4:e8:ee:
3a:ce:e2:31:2d:0e:9c:10:ef:d2:b8:96:bd:65:7e:2d:44:70:
9a:93:4b:d7:11:2d:69:fa:2a:2b:92:9d:91:76:b4:62:ce:9d:
0b:b6:15:7b:4f:60:92:5f:ed:8c:08:76:8c:56:f7:44:08:0b:
e2:d3:b8:0c:60:fe:bc:09:0f:6c:71:1a:f3:f9:9f:21:93:6f:
72:a9:9e:9f:c5:06:55:37:6a:e9:62:10:3f:29:8c:d7:67:bb:
49:a1:a6:a1:56:2b:9d:8c:6a:8c:be:c5:86:25:e0:8b:42:5d:
fd:89:bd:28:4d:05:3b:bc:85:89:bf:6a:8c:de:5f:55:d6:3d:
c0:40:cc:95:ce:8f:e7:43:2c:ae:68:93:39:00:79:92:b7:d5:
85:68:6c:26:6b:91:81:d7:29:91:b2:a4:c4:4c:5c:cc:67:32:
b4:9e:1c:50:13:a6:3b:55:fd:39:3b:88:8c:5c:42:40:16:59:
50:5a:c2:8e:0b:dd:e5:93:5a:c7:9e:95:4f:c5:b7:62:93:65:
44:09:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:13 2025 by rpki-client