Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File: 58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier: XB7xzNkalV8JxQ+R6YmUGMqF7VC5VBlVOoudUxaTbj0=
Subject key identifier: 09:E8:87:8F:41:4D:77:6C:40:05:9F:50:5A:7B:AF:71:A5:17:6B:66
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 0199326D3F251B9D600F42C352A3EF77E631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number: 0B33
Signing time: Wed 10 Sep 2025 07:00:44 +0000
Manifest this update: Wed 10 Sep 2025 07:00:44 +0000
Manifest next update: Thu 11 Sep 2025 07:00:44 +0000
Files and hashes: 1: 3pxtcoitrFP84ablFN0e1N99UbU.roa (hash: 3rHwb/LGbKBgtS++gv9s6PE/pIkC8kqsGTnPOdr75VM=)
2: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: M3GLbZkNyVfUyzeAlpSnqi5QbW52wCFUJN7EjYQZ6J4=)
3: 83jnw3_iQXavgLNpPArd0mjD8v0.roa (hash: SHfszJ5S+RcUzQDWjfFykPyoXsOFj+P+O7U1p7lsd+k=)
4: 9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa (hash: ladwpTnVncQtchwvagqScI9AqnIAoqG+BVd9xXCXOlU=)
5: _sBQ-iEtTw6n3_2GUf1kdKinw6k.roa (hash: 2pQWnwaXMMFBZzZKZwaCBzryPcNsmH6tse3213iQbEg=)
6: hsyRrTmHUFy-dvGlMuWHGJoh8Ws.roa (hash: uXGOwuMsPP7paFlNgchG8Ort4AQoj239eYXxGZv6OVk=)
7: la2dPjbXAEn7TCutV5FDNd87YgY.roa (hash: Cy/GkdDa8H/gyDAs0CMDjYPIaE/yLrgi+H+nowssrsc=)
8: wrGzB70sU_9SIqxlx-1pOzK4ufs.roa (hash: hctgdi4NMknx7R7SWF0OvSDThJO+cXqWTsV2GWgcQfc=)
9: xDf42bpWqRCsDPxTubWSXNuBqFg.roa (hash: YkhsAjaT83vQpIvIVaLxfqKkzhztD+nQzU/2yzJtmvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:3f:25:1b:9d:60:0f:42:c3:52:a3:ef:77:e6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: Sep 10 07:00:44 2025 GMT
Not After : Sep 11 07:00:44 2025 GMT
Subject: CN=09e8878f414d776c40059f505a7baf71a5176b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:07:53:88:7e:de:0b:2f:30:31:69:a5:bc:
b9:4d:3d:f0:6e:2e:60:a9:78:3b:e3:4b:59:7f:ef:
4c:d0:03:2d:02:69:eb:6f:80:b2:a7:04:b5:a8:01:
1d:9c:2b:db:66:61:db:c4:54:ed:33:5d:f2:92:2e:
81:b1:a9:0a:90:6b:27:d2:77:81:49:00:eb:4e:68:
c0:5b:0e:3d:b6:41:de:14:b9:c0:c3:15:be:71:d5:
8c:17:4d:f7:88:2a:d2:8c:0e:87:80:c6:c7:7d:ef:
8f:31:8f:8d:9d:82:9d:5e:1d:ee:cb:98:72:17:6f:
48:2e:b0:6b:52:c0:3a:b9:00:f7:cd:72:f5:d2:59:
9f:e4:eb:81:d2:69:b7:31:91:35:7a:f5:f1:a3:f6:
e7:12:ab:b5:31:b5:ba:36:f8:85:50:a9:b8:36:18:
b1:86:07:1d:4b:1f:84:60:3e:da:00:9b:fa:f6:1e:
bb:79:de:b3:c4:9f:31:ba:80:97:3c:49:ab:36:66:
2f:e6:d6:0f:b7:77:35:70:17:3c:1b:ba:8a:94:f4:
95:90:c3:79:7f:f4:ec:09:8d:53:35:ef:b0:f1:10:
42:ac:13:1a:d1:d2:27:48:26:6d:3a:c5:fc:33:be:
29:c6:e4:d7:9c:79:18:75:1d:69:e9:07:f6:01:55:
4a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E8:87:8F:41:4D:77:6C:40:05:9F:50:5A:7B:AF:71:A5:17:6B:66
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:9d:41:36:fe:4e:17:d3:33:ec:57:a3:18:eb:59:e7:49:17:
f5:b2:b8:42:55:31:ce:66:b0:ad:e8:4d:7b:7c:fa:c8:1c:d8:
7b:49:76:6e:41:12:48:53:af:da:80:77:a5:a2:8f:ae:ef:b8:
98:9a:b1:18:a2:65:2e:06:d6:ae:28:88:72:e8:1e:fb:ec:2a:
5c:32:f7:6f:c1:e6:b4:ea:19:c6:06:20:45:8d:b0:e2:35:e3:
74:2a:fa:4a:38:c1:65:15:9d:bd:a7:88:d0:83:90:28:d8:61:
01:a3:2d:f5:53:38:45:4e:26:ea:32:1f:e0:b1:59:46:cf:90:
47:d3:43:53:b2:2c:85:1a:e9:b4:c2:4c:e8:f0:6d:ee:8c:ec:
62:b5:74:ba:22:c0:f2:4e:46:1c:b1:9f:c9:ae:89:2c:ad:7d:
91:e7:f8:86:47:7c:ef:60:e1:9a:ac:60:2f:5a:43:3f:a0:13:
fe:78:4d:ae:30:09:bc:84:f8:06:c4:f1:77:67:ff:33:76:fc:
f7:1f:fd:fb:d0:f4:55:79:dd:40:a5:d3:77:58:98:c3:3f:1a:
99:11:9f:3e:3c:27:6c:5f:2e:7a:96:61:d7:3d:c7:b4:63:99:
b6:c7:38:4c:b6:f3:06:51:36:50:03:07:0b:0b:25:9b:57:5e:
4d:5d:f6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:59:45 2025 by rpki-client