
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
File: 59PkY_EcytBV0WYuAIwqlPQt6d4.mft (raw, json)
Hash identifier: UE6LPyATvYy8kbOU0sxyivHjyv9n8yiQPkou6x/+vbA=
Subject key identifier: 97:DC:28:70:65:1A:74:B1:BD:E0:B1:54:FB:D4:6A:61:57:4F:18:CF
Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
Certificate issuer: /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Certificate serial: 0198D697E853F1E8F5B3B1BB9EDA8E57D853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
Manifest number: 148F
Signing time: Sat 23 Aug 2025 11:02:16 +0000
Manifest this update: Sat 23 Aug 2025 11:02:16 +0000
Manifest next update: Sun 24 Aug 2025 11:02:16 +0000
Files and hashes: 1: 1-mxTaqS9jnMIVzPA52AOuEvFZm4.roa (hash: 1RjRiQMb+qYiL+Zpi5jDEokqMnjDRUg4dGO0fKP7lfA=)
2: 59PkY_EcytBV0WYuAIwqlPQt6d4.crl (hash: uIZY/0GsfGiDjhPSFjMO0UaMa/rgTOujZTlW0Jl+lfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:e8:53:f1:e8:f5:b3:b1:bb:9e:da:8e:57:d8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Validity
Not Before: Aug 23 11:02:16 2025 GMT
Not After : Aug 24 11:02:16 2025 GMT
Subject: CN=97dc2870651a74b1bde0b154fbd46a61574f18cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:46:eb:1a:0a:9d:5f:ac:04:3b:bd:e2:d7:53:
0a:40:0a:83:1c:bd:b5:11:3a:93:bb:ab:ce:91:c1:
3e:cb:a8:77:ce:f6:8e:94:0f:37:42:5a:3b:b8:66:
f7:9a:76:cb:b4:5a:9b:19:51:0b:01:61:03:f1:68:
3c:38:c0:71:f7:c2:2b:44:a3:4c:65:cf:e2:23:d5:
a0:6d:58:80:b6:5e:94:da:e3:7c:69:25:f8:9a:3b:
5c:0b:d6:cb:73:cb:df:75:06:7a:c3:5e:58:cc:d5:
20:e9:85:97:31:68:17:fa:92:d9:84:43:a1:04:1f:
e7:c1:a4:69:e7:d4:3b:78:eb:c4:ef:16:1d:34:e7:
6e:a7:ee:64:cb:18:5e:34:bb:2d:fd:5f:da:8b:2e:
96:65:56:a9:e6:03:d1:01:7a:68:c8:b3:da:13:4d:
fc:35:2d:5e:49:53:12:bd:74:90:08:ec:c5:e0:c6:
83:74:66:bd:91:04:7f:38:29:ac:ab:5a:cf:16:ca:
d0:55:23:54:c1:d0:d8:72:23:d3:a4:43:45:fc:d4:
49:d9:64:c1:fc:dc:84:8f:9b:27:02:b0:62:d4:a9:
a8:c2:6a:14:63:a0:58:fb:ed:04:68:b0:be:c6:3a:
14:c8:cf:a4:69:a1:65:0d:18:bf:fc:f9:ab:0b:3b:
60:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DC:28:70:65:1A:74:B1:BD:E0:B1:54:FB:D4:6A:61:57:4F:18:CF
X509v3 Authority Key Identifier:
keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c9:38:2e:44:68:11:83:eb:1c:9e:99:1c:5a:ad:59:48:b5:
4e:36:9a:ad:42:3a:20:35:28:b7:7c:3c:03:64:22:ef:e9:bb:
3c:e5:aa:a6:a9:03:eb:0a:40:9d:11:a8:b6:54:e1:af:14:cd:
e1:79:38:3f:f7:ac:2c:6e:08:e3:ef:d8:60:19:ff:27:02:5d:
bb:77:5f:14:52:52:5f:42:9a:96:d9:ed:96:ac:0a:cc:e2:61:
de:79:ea:6d:7a:a9:27:a4:95:0a:9f:c3:13:65:cc:9b:ef:65:
d6:d7:a7:12:71:78:47:72:64:4f:7e:83:0f:e7:79:87:fa:98:
2e:e9:95:9b:08:87:45:22:bb:2c:b8:e0:a5:1f:9d:25:4f:85:
ef:3a:88:c0:77:12:82:3c:b5:5b:27:cb:e8:f1:64:f0:72:62:
d6:cb:be:31:e2:a6:3a:66:55:8f:95:8e:77:3b:d7:9b:67:8c:
89:b0:31:e0:23:4d:60:d1:8f:85:26:27:b3:21:25:55:49:d4:
f0:21:d1:21:f0:61:9d:dc:c4:55:a8:e9:32:fa:fc:10:28:e6:
ae:79:01:80:4f:01:da:54:5d:91:a5:7b:41:b8:8a:91:4f:3f:
9f:a6:31:63:c9:df:c8:ed:54:8f:37:87:b3:d6:3f:aa:e4:bd:
dc:9d:6a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:14 2025 by rpki-client