Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: 9JRrSXOkO61zxRCvnIVu4HUNZs/rZ0R8GlRiV9K7xFg=
Subject key identifier: AA:26:3A:C0:E7:C8:52:99:A8:D1:59:85:0B:E0:23:80:0D:2F:AF:0C
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 019A03A41645AA0D224EAEB833850A0E117F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 053B
Signing time: Mon 20 Oct 2025 22:01:16 +0000
Manifest this update: Mon 20 Oct 2025 22:01:16 +0000
Manifest next update: Tue 21 Oct 2025 22:01:16 +0000
Files and hashes: 1: 4ZmOjsOwgULv_B_QMvBBmXG9f0w.roa (hash: x7k9BFugEad58s4inzjh5oIEa4SPB8OHd1xRzbFg5n8=)
2: BuhLOhQsyBTsy289mKisTf0E47Q.roa (hash: aKuhf01k9TU7vUcFwfvkZL/qxoA5uBGJCmVJQlfg6tY=)
3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: K4y1Tn2tv8PSQxHakJ+je5PtZ+VIIhKn7H8K3G7yvE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:16:45:aa:0d:22:4e:ae:b8:33:85:0a:0e:11:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Oct 20 22:01:16 2025 GMT
Not After : Oct 21 22:01:16 2025 GMT
Subject: CN=aa263ac0e7c85299a8d159850be023800d2faf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:55:52:1b:31:47:1e:28:81:1e:71:8c:8c:d8:
6a:ac:f6:7c:b3:4c:73:8b:4d:68:0e:ac:1d:b3:ca:
f8:bb:ca:31:48:f4:55:6d:09:00:1f:16:44:10:61:
ec:d4:e3:33:67:e3:1c:09:c5:e4:21:20:ed:fa:b7:
d1:cc:57:2a:ed:80:3b:9f:2c:7b:89:c9:d0:95:a8:
57:e6:4a:7f:23:44:bc:5b:36:5d:cf:ed:dd:fa:2c:
53:ff:58:66:a8:a1:19:d0:b3:d0:29:0a:18:03:58:
6e:02:77:2d:e3:ec:29:9a:76:52:ae:83:84:63:28:
d2:63:de:e9:8b:08:39:46:c8:ef:08:82:49:ac:c3:
bc:1c:02:ba:8b:c1:fd:b1:d7:80:63:e5:3a:36:8f:
03:44:60:51:b6:a0:99:4b:0c:1e:4e:f7:57:a0:08:
84:59:9b:08:f8:ea:0c:43:d1:5f:29:ae:cd:0f:c9:
0c:bd:21:6c:a5:45:be:51:4b:53:8a:1e:cc:53:db:
8f:df:4d:1d:e5:1c:0c:1e:6c:02:43:2b:9d:2a:e8:
84:53:88:95:a7:4a:24:47:44:31:39:ff:1c:fb:16:
eb:ff:4c:d5:66:64:42:58:95:d4:ce:b7:47:e6:eb:
73:df:4a:b6:5f:a0:da:f9:58:b4:38:c1:08:f5:95:
a2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:26:3A:C0:E7:C8:52:99:A8:D1:59:85:0B:E0:23:80:0D:2F:AF:0C
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:aa:54:48:dc:d1:17:b9:3e:5c:f5:e9:4f:e9:b2:05:e6:73:
51:6a:7c:ac:12:94:89:47:36:a4:12:e0:4c:29:f8:04:82:74:
89:3b:ad:73:57:f2:8b:e4:16:74:be:03:c4:33:de:ba:49:10:
26:17:7a:cd:0d:ea:c1:41:8e:b0:c6:a7:29:7d:08:e2:1e:8a:
95:24:e2:32:01:dd:40:f6:a9:fb:f2:11:cc:f5:62:d4:db:9a:
b2:43:cb:4b:5a:9c:33:cf:a9:3a:98:59:12:ec:39:09:b6:d7:
a8:15:76:d1:b8:3c:89:50:3c:67:dd:89:c0:86:42:24:3c:ca:
20:d1:56:0d:a0:1c:ea:45:33:6c:64:dd:28:4b:f6:92:bb:38:
9e:5d:19:09:76:31:3e:38:fd:dd:6a:b3:fa:b8:e8:78:66:65:
79:e7:f4:56:c1:2c:8b:07:36:97:3a:88:0b:69:29:0b:49:84:
06:a4:e2:26:e5:e6:c3:e0:1f:ad:0b:e4:b4:0e:17:ee:97:b6:
02:13:83:82:0d:90:cf:13:c9:00:a9:37:16:96:2a:30:5d:dc:
86:08:36:c0:21:9f:5e:4f:14:2a:9e:b2:2a:bf:d0:2d:9c:66:
91:3f:f9:a6:7a:de:00:7c:1e:50:ef:21:fb:d5:ee:88:01:40:
29:df:74:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:12:02 2025 by rpki-client