Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier: hqKYJFcuSSmsikQu/cOgabfR9mBpgW1iE1HOy0xyeq0=
Subject key identifier: 9C:90:15:95:0B:9D:D7:6A:9C:44:B7:B4:5B:8B:87:33:28:23:7F:83
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 019A2741C52F433988F9600886F16944287E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 20:00:13 +0000
Manifest this update: Mon 27 Oct 2025 20:00:13 +0000
Manifest next update: Tue 28 Oct 2025 20:00:13 +0000
Files and hashes: 1: JOqhFiRetaCWX-COli2qt4epZmU.roa (hash: Tggn3wwdEvZYJd/9CH5nD5nBnaCH9L0m/C7cCJYB59s=)
2: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: ucCUsJqGA0Tacx1xBBpUjY/u5RNFSgAe+UC0ci1b8yc=)
3: rPpO-fPVx8XfYvByx6grU3jDRqc.roa (hash: yhGIutrfrX3qPTF0PHHiWDvjrLT7q6l6BKv9z17Nw1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:41:c5:2f:43:39:88:f9:60:08:86:f1:69:44:28:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Oct 27 20:00:13 2025 GMT
Not After : Oct 28 20:00:13 2025 GMT
Subject: CN=9c9015950b9dd76a9c44b7b45b8b873328237f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:82:0f:ef:f8:14:e2:0c:cd:f3:fb:64:c7:
0c:b1:20:8d:30:f7:01:54:16:ae:80:17:f2:9e:83:
e3:ea:71:2d:3b:aa:01:54:55:b7:51:91:3d:24:70:
25:cb:2e:7d:10:70:19:36:e9:76:13:ea:ba:a3:16:
52:d9:27:89:c1:79:53:ad:4d:2f:b9:f0:06:7b:13:
73:80:0b:99:db:4a:6c:a4:4a:62:c9:c4:ba:cf:1f:
41:e0:74:f5:aa:eb:86:d9:01:80:22:8f:7c:0a:c4:
84:ea:f5:d0:5e:e2:07:0c:29:59:fb:44:a4:13:40:
ac:91:85:fb:d3:ec:65:a6:70:c5:0e:f7:23:b9:bc:
d2:85:ca:e9:6d:5b:e2:d5:a2:2d:31:c3:0b:b3:c3:
28:d8:2e:61:d1:b7:47:78:89:6c:da:b6:f8:3b:f7:
3d:75:bc:64:49:ac:b2:84:05:b5:ff:48:d7:c9:b2:
ab:98:1d:a2:b7:2f:69:94:e9:f4:da:be:8e:7a:70:
e7:e9:09:10:f8:3b:2e:f6:85:e6:99:37:3c:e7:01:
89:3b:78:71:36:1f:ff:4e:b9:63:44:ee:7a:5c:d2:
fc:af:f8:21:a2:69:7b:92:33:a8:5c:b0:c9:ac:13:
b1:ad:2e:66:c8:56:1c:40:31:fb:51:d4:18:a8:bf:
de:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:90:15:95:0B:9D:D7:6A:9C:44:B7:B4:5B:8B:87:33:28:23:7F:83
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:70:c6:65:db:41:2b:14:41:f9:ae:ad:17:6f:d6:bd:c0:ce:
91:de:ff:ee:df:67:3b:68:2b:36:94:d1:a1:94:43:c5:65:a0:
de:65:61:f9:71:3d:c4:d8:49:13:0b:c0:12:be:86:f8:bf:df:
20:f8:98:0c:ba:6d:67:61:ff:52:f5:30:0a:c0:45:0c:9d:69:
49:45:a2:f6:be:20:5c:6d:ee:ed:73:a5:06:7b:be:bb:57:f6:
e5:bd:23:44:55:9a:9b:c6:bb:ab:88:b7:0b:fe:08:c3:95:2a:
0a:f3:6d:9e:de:cc:75:b2:61:df:22:98:2c:0f:f9:55:12:4b:
29:b5:b7:15:74:32:70:7b:9b:9b:c8:df:b7:34:42:50:15:b4:
14:06:05:89:5e:15:da:36:68:1e:a9:78:bb:fe:dc:5b:5c:86:
12:9a:61:5a:ac:e3:85:9f:84:ae:53:1a:f8:71:21:95:ff:74:
dd:c0:c3:26:43:4c:5a:c8:96:33:56:ac:f6:35:1b:e4:7c:ce:
a1:d9:33:83:f5:07:6d:da:6d:92:cf:16:f1:39:be:08:be:60:
2a:d9:71:59:21:a4:cd:e6:4b:66:28:6a:f2:ed:f8:6b:53:d5:
cf:12:98:26:c4:3a:2f:5e:94:c8:1e:34:1a:a5:b8:3f:f6:37:
a4:e3:6e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 23:20:01 2025 by rpki-client