Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
File: 58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json)
Hash identifier: 7hSuJb0mC/5YgoPoczQ0i9XVQJrERZ7wzDnvJCqSXhc=
Subject key identifier: BB:EC:7A:24:37:74:52:07:CD:56:BE:D1:9E:78:AF:45:A9:E4:43:D5
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Certificate issuer: /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial: 019A72266562C15777A0DBF030184F28368A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
Manifest number: 0A61
Signing time: Tue 11 Nov 2025 09:01:50 +0000
Manifest this update: Tue 11 Nov 2025 09:01:50 +0000
Manifest next update: Wed 12 Nov 2025 09:01:50 +0000
Files and hashes: 1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: fcMpSyw3fEd5+du4D6WPy3aKuj866cTbqcMfVBqlbSg=)
2: rj-L1Ht9KU4SpqytVvSZ8FykJs0.roa (hash: o5/pUFEbXRLCOB5XslmeCnU9+6JRYi7PIpvUyWlOL2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:65:62:c1:57:77:a0:db:f0:30:18:4f:28:36:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Validity
Not Before: Nov 11 09:01:50 2025 GMT
Not After : Nov 12 09:01:50 2025 GMT
Subject: CN=bbec7a2437745207cd56bed19e78af45a9e443d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:36:56:c0:78:2e:bd:41:b6:f2:eb:78:cc:
43:ac:28:08:dc:8f:59:c8:93:0b:ae:13:cd:f3:0e:
8a:8a:a7:30:1a:4f:82:08:1c:d4:d0:03:8d:e7:36:
e6:32:73:6e:3e:23:2e:08:b4:46:c2:f8:d5:63:cd:
8d:a3:2f:c5:8f:ef:6f:98:33:79:90:62:a3:8f:d6:
39:21:77:8f:a6:75:13:1b:45:36:e3:73:0b:28:34:
92:26:01:4a:a7:d7:4b:12:68:1e:71:ac:cb:65:b3:
3b:b0:d2:61:c6:dc:de:9f:04:2a:17:a5:b7:e6:e1:
b3:94:85:ac:4d:1d:6b:df:d4:18:21:b5:5f:11:09:
b6:31:9e:3d:e9:83:20:5b:9a:c8:13:54:98:3d:73:
91:02:f2:d4:77:f7:09:b4:59:38:49:74:ec:d1:45:
1d:70:30:90:6c:7b:a9:a3:98:4a:9d:a3:99:32:74:
9f:e2:c9:8f:a8:54:73:27:d1:92:35:2b:1a:52:93:
db:cc:39:5d:e2:74:c8:46:81:20:96:83:6f:e3:11:
a4:71:32:5e:71:ea:8e:5a:84:e7:62:ca:d2:a1:d3:
b1:00:8f:7e:51:1a:f4:8e:d4:96:d8:18:dc:be:b1:
50:34:8a:e9:62:d3:82:d0:65:05:cb:22:19:16:60:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EC:7A:24:37:74:52:07:CD:56:BE:D1:9E:78:AF:45:A9:E4:43:D5
X509v3 Authority Key Identifier:
keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2f:19:7c:0e:41:05:ce:cb:f4:61:c0:94:15:a1:be:bc:a6:
59:c5:fc:b8:55:f8:ca:83:c0:7b:62:39:2f:99:b7:5c:ce:7a:
a7:4d:52:a0:3d:5f:85:bb:b2:2b:70:74:b2:3a:4c:13:16:4a:
2b:a3:63:74:52:9c:8b:44:4d:ca:77:ab:24:b7:1c:af:ae:ff:
a3:48:38:62:a5:f0:1e:ac:b8:b3:04:64:b9:5c:b2:7b:66:8f:
f1:14:2a:da:6e:0f:c8:de:44:0a:09:cb:a1:81:b4:25:ed:cd:
ed:a7:4d:d7:d0:cc:29:5d:a5:03:a8:aa:92:90:a6:46:1a:5f:
9b:cc:4b:d7:c6:ff:07:82:3c:0e:38:3e:ee:77:5f:c3:c7:f1:
fe:ed:cd:76:56:8c:b5:eb:a3:d5:c4:11:14:f6:84:96:be:75:
cd:7b:3e:a9:34:f7:e8:dc:dd:17:93:d2:9a:73:82:11:fe:81:
c1:13:71:1b:db:4b:5b:0f:60:dc:d3:83:44:f4:59:f0:47:5d:
88:ad:c1:92:c2:db:46:a7:0c:f9:81:2f:77:69:d0:4d:e7:cb:
82:c7:65:e3:b4:ce:dd:04:b8:d5:e3:e0:c0:9f:d1:b4:ad:dc:
af:a2:15:4b:d1:47:a0:3f:e6:54:b6:69:0c:88:4c:16:4f:3f:
a2:30:53:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:34 2025 by rpki-client