Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File: 58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier: B19JCHburZ1CZGYkpGeHYC+nJZQnmJxtU+DPMIfwHJw=
Subject key identifier: 3E:CC:91:85:93:67:97:C9:3C:FA:7B:03:7E:75:69:BF:A2:46:39:23
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 019A21E52EF438010D9079B0BA3B540C3FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number: 0BAF
Signing time: Sun 26 Oct 2025 19:00:59 +0000
Manifest this update: Sun 26 Oct 2025 19:00:59 +0000
Manifest next update: Mon 27 Oct 2025 19:00:59 +0000
Files and hashes: 1: 3pxtcoitrFP84ablFN0e1N99UbU.roa (hash: 3rHwb/LGbKBgtS++gv9s6PE/pIkC8kqsGTnPOdr75VM=)
2: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: AaDwv6CUfgOAzuFndO0viaiTGPIdxWMCWC7AzE+9SlU=)
3: 83jnw3_iQXavgLNpPArd0mjD8v0.roa (hash: SHfszJ5S+RcUzQDWjfFykPyoXsOFj+P+O7U1p7lsd+k=)
4: 9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa (hash: ladwpTnVncQtchwvagqScI9AqnIAoqG+BVd9xXCXOlU=)
5: _sBQ-iEtTw6n3_2GUf1kdKinw6k.roa (hash: 2pQWnwaXMMFBZzZKZwaCBzryPcNsmH6tse3213iQbEg=)
6: hsyRrTmHUFy-dvGlMuWHGJoh8Ws.roa (hash: uXGOwuMsPP7paFlNgchG8Ort4AQoj239eYXxGZv6OVk=)
7: la2dPjbXAEn7TCutV5FDNd87YgY.roa (hash: Cy/GkdDa8H/gyDAs0CMDjYPIaE/yLrgi+H+nowssrsc=)
8: wrGzB70sU_9SIqxlx-1pOzK4ufs.roa (hash: hctgdi4NMknx7R7SWF0OvSDThJO+cXqWTsV2GWgcQfc=)
9: xDf42bpWqRCsDPxTubWSXNuBqFg.roa (hash: YkhsAjaT83vQpIvIVaLxfqKkzhztD+nQzU/2yzJtmvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e5:2e:f4:38:01:0d:90:79:b0:ba:3b:54:0c:3f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: Oct 26 19:00:59 2025 GMT
Not After : Oct 27 19:00:59 2025 GMT
Subject: CN=3ecc9185936797c93cfa7b037e7569bfa2463923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:bb:41:e6:22:47:e8:fb:be:51:62:0b:f5:
29:be:2b:62:1d:6e:df:0a:bc:11:53:9a:b0:ce:53:
67:41:23:b0:e4:e4:53:30:39:66:43:5c:34:5c:00:
3a:9c:dd:03:e8:12:88:a5:c6:4c:54:98:98:81:2f:
2f:e2:3f:79:d3:cb:60:1c:8e:f7:6a:89:ef:96:36:
a3:7a:ae:5e:c1:d0:1d:7b:69:03:bd:4d:b5:23:09:
0b:13:8c:e9:f1:e3:e4:5f:06:40:46:46:d7:8a:87:
1a:0a:c0:c8:39:ac:05:dc:7a:39:c7:7d:88:73:92:
d7:45:79:3c:0b:83:74:5d:c5:ed:1b:48:8b:43:da:
a9:c4:8f:dc:03:41:d3:e6:d6:f1:b0:1a:d7:18:75:
bb:4c:96:d8:29:e1:e2:4e:3a:3e:2b:e7:8b:37:b0:
43:76:e9:79:20:af:0b:91:51:8b:6f:7a:02:22:44:
da:28:0a:2f:94:05:c4:63:ac:3d:5d:1a:23:21:4f:
d6:80:35:9a:96:45:02:e9:f7:3a:fe:0a:54:c8:f3:
2a:89:e6:62:c3:ef:e6:8a:2b:30:72:13:30:1f:1b:
5e:76:b4:33:bd:3e:c5:0f:1b:b7:da:5a:b0:85:7b:
4b:18:b8:7c:8b:22:2b:2f:41:24:44:89:43:bf:0e:
11:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CC:91:85:93:67:97:C9:3C:FA:7B:03:7E:75:69:BF:A2:46:39:23
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:67:bf:bf:5c:54:86:2c:87:61:6f:b6:f0:56:b1:b4:84:34:
11:70:34:e3:9f:04:63:24:8c:2f:fd:2e:79:9e:d5:13:dd:41:
b5:f7:74:01:76:6d:07:f6:7b:f3:44:6d:b0:04:65:d0:85:3a:
12:f9:24:d6:8d:35:85:ba:2a:b3:b6:ff:3a:6f:39:5b:cc:71:
c4:cb:71:5f:fa:a6:0e:a7:99:91:83:d9:e6:52:55:64:11:b7:
c7:ad:53:10:db:60:e3:5c:cb:fe:29:c0:91:2e:1d:0c:9a:b8:
be:d2:76:28:f6:3b:1f:3d:c6:54:d3:c5:11:36:d5:9b:22:0c:
87:9b:e3:3c:56:2e:c0:5c:86:01:ab:90:96:f7:df:b7:ab:14:
81:44:51:97:70:26:f1:c3:c8:ac:db:87:60:91:ca:df:07:9a:
c9:50:91:e6:5c:eb:ce:9b:57:81:7f:ed:5d:38:ab:b4:d8:8e:
27:80:ac:9b:aa:29:44:11:39:75:58:0b:8e:14:76:91:72:26:
f9:6e:e6:6d:21:b8:41:d5:33:1d:85:01:30:0f:76:0b:eb:4a:
4d:6e:85:34:b5:31:05:5f:bb:9b:b5:76:26:5b:d9:1f:0e:d7:
4a:b0:8a:1e:b8:dc:f8:71:6d:f3:07:be:57:f9:96:7f:f4:75:
5d:1f:48:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:44:12 2025 by rpki-client