Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
File: 59PkY_EcytBV0WYuAIwqlPQt6d4.mft (raw, json)
Hash identifier: ldOHEcUC+eDAc5AS+tByIvXQZKORgQch7Ma1FC/nzb0=
Subject key identifier: E5:C5:7D:5A:77:8E:28:2C:B2:A7:32:6F:39:69:DD:4B:5A:59:E1:6E
Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
Certificate issuer: /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Certificate serial: 0199FFFEA3935F16A6783629A254B3E053A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
Manifest number: 1529
Signing time: Mon 20 Oct 2025 05:01:41 +0000
Manifest this update: Mon 20 Oct 2025 05:01:41 +0000
Manifest next update: Tue 21 Oct 2025 05:01:41 +0000
Files and hashes: 1: 1-mxTaqS9jnMIVzPA52AOuEvFZm4.roa (hash: 1RjRiQMb+qYiL+Zpi5jDEokqMnjDRUg4dGO0fKP7lfA=)
2: 59PkY_EcytBV0WYuAIwqlPQt6d4.crl (hash: qN9oXkIkmeBOHRQYjvCFOmYBFpAgI9xQz5AQgJGj7bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:a3:93:5f:16:a6:78:36:29:a2:54:b3:e0:53:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Validity
Not Before: Oct 20 05:01:41 2025 GMT
Not After : Oct 21 05:01:41 2025 GMT
Subject: CN=e5c57d5a778e282cb2a7326f3969dd4b5a59e16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:5b:80:b8:73:ae:31:cd:d2:00:30:ad:77:
d7:0a:d4:7c:f8:d0:01:59:3e:8c:20:9c:4b:45:d4:
45:87:5d:4f:36:66:d6:4c:58:ac:86:3d:dd:3d:e9:
df:e3:79:82:fe:97:2c:dc:74:7d:51:64:7b:27:99:
22:fd:e3:f0:c6:ce:d1:35:c0:19:4d:ee:68:47:15:
a8:97:4f:a7:d3:af:3b:56:de:ee:81:fe:a4:d7:6e:
56:a5:b4:d7:59:8d:3c:58:53:e6:ef:dd:8b:5c:5d:
9e:ff:a5:fc:52:be:f8:b7:02:58:74:4e:7e:71:90:
e8:4f:6f:88:b8:ac:22:ce:56:71:e2:82:42:f4:ae:
1c:79:14:3b:29:39:28:ca:10:f1:11:4c:8c:23:f4:
a3:5d:03:78:37:b1:2e:9d:e9:79:8f:1a:29:3e:5d:
33:ef:f6:50:89:0b:f1:c8:a1:6d:3a:92:72:c6:7b:
dd:c5:19:a6:1c:c6:c9:48:a7:7d:f6:4b:cc:b1:24:
ec:3e:d4:9e:5d:9b:ff:26:a6:49:aa:8f:56:63:40:
47:9d:8d:d4:66:bf:68:7d:4e:7c:3a:96:ba:96:df:
cf:f9:4c:73:bc:80:33:da:9b:b2:af:43:01:4a:9b:
4f:2d:5b:84:45:08:0d:80:c0:0f:78:a5:62:b2:75:
59:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C5:7D:5A:77:8E:28:2C:B2:A7:32:6F:39:69:DD:4B:5A:59:E1:6E
X509v3 Authority Key Identifier:
keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8c:d2:87:22:ac:21:c7:34:22:13:d3:1e:b6:a6:ec:44:a7:
df:a8:c5:9c:f0:82:e9:12:25:13:78:3a:29:7c:71:a6:38:90:
36:a4:1e:39:a6:5d:03:7f:43:47:80:67:3c:ad:a0:7c:11:5f:
23:2f:92:72:b6:02:61:c3:5a:59:bd:1c:6b:d6:89:cb:31:ba:
0c:d7:99:fd:12:ee:95:9b:96:38:db:45:e3:da:aa:3d:82:5c:
22:26:5c:88:f1:44:7c:70:33:3c:a3:e0:60:b1:fe:16:5d:95:
43:f3:98:e3:fb:e3:91:19:0a:ea:f2:65:11:e1:3c:fe:90:9d:
bf:6c:82:67:59:27:dd:e2:2a:07:2c:92:38:dc:26:8b:cd:28:
07:94:2d:e4:c0:7b:01:61:39:3d:98:06:33:cf:de:e6:78:8e:
fe:d5:63:f3:d5:c7:38:a9:31:b1:9a:1a:b0:ba:4a:39:d8:09:
fc:aa:2f:a9:56:06:3f:02:44:fd:45:10:3c:97:e5:d6:4e:0e:
3f:33:93:e4:6d:ab:1e:ec:ca:3d:07:a9:26:4c:c3:ed:b0:5c:
1e:61:f7:1a:40:29:83:8b:e5:6e:43:94:3e:a8:cb:07:03:80:
6b:4a:04:4d:c0:cc:c8:a8:0f:f9:d6:de:44:96:d2:3d:50:53:
45:c0:47:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:12 2025 by rpki-client