Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
File: 59eZrg792Ybd53-zWtChCCPLly8.mft (raw, json)
Hash identifier: LNGWxg6NcNNpmfXGEDPTjEqGb9Y248eGQAKXNRVm2xg=
Subject key identifier: 54:F5:A0:06:8E:A1:FB:4F:C8:75:AA:53:9C:25:91:38:C8:8C:1F:26
Authority key identifier: E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
Certificate issuer: /CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Certificate serial: 019921E7B2CDAFC085035A87318CB0A49B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
Manifest number: 1679
Signing time: Sun 07 Sep 2025 02:00:56 +0000
Manifest this update: Sun 07 Sep 2025 02:00:56 +0000
Manifest next update: Mon 08 Sep 2025 02:00:56 +0000
Files and hashes: 1: 59eZrg792Ybd53-zWtChCCPLly8.crl (hash: P/aWdSZmBtuAnasm6MYaXC3CRux19vnwEy5h40qwI6c=)
2: Kvx8CFJShgrk9zFYI0lUsh--CwU.roa (hash: PVmg//o7LkW03D9ltn/laGXzfCJ6cNBsJDyBEL8Jj7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:b2:cd:af:c0:85:03:5a:87:31:8c:b0:a4:9b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Validity
Not Before: Sep 7 02:00:56 2025 GMT
Not After : Sep 8 02:00:56 2025 GMT
Subject: CN=54f5a0068ea1fb4fc875aa539c259138c88c1f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:dc:06:8b:7b:a1:8e:fc:47:58:00:ea:fb:
ba:15:97:30:4e:3a:4c:9f:98:d2:e4:ef:4d:d8:7c:
cc:c1:f9:0b:0d:36:a4:53:26:22:ac:a0:ac:a0:e6:
e9:9f:cf:9c:18:6d:0e:5a:5b:0d:13:d5:b5:7f:a7:
bd:41:9c:b0:91:f6:2a:e7:e8:ae:28:48:e1:7c:01:
a2:a4:10:65:5a:8b:2a:cd:4e:2d:be:fd:6c:0a:3f:
99:d5:72:f8:33:47:6b:f7:17:fb:b6:43:7d:97:bf:
10:72:c8:4e:4f:c1:f3:7e:7f:ec:b4:53:50:00:1d:
8b:25:35:a4:c9:38:b8:b0:12:7d:3d:67:7b:b8:ea:
8b:8f:cc:cd:42:19:80:66:5f:8f:58:02:2a:91:3b:
48:fe:ed:18:43:bf:14:17:6f:42:f7:7a:b5:8c:99:
32:4f:24:41:5b:a4:fc:12:b9:94:d1:09:11:a6:8c:
e6:cf:7b:4c:2e:a1:1a:78:1b:5f:ae:24:9c:9c:00:
30:bf:2c:97:b1:ea:e2:a6:c7:af:a6:e4:a2:75:f1:
65:04:3c:bc:46:b2:bc:8b:ee:47:92:4a:66:cb:04:
53:61:a8:70:1e:be:3d:fa:4d:b1:df:a3:2d:51:93:
17:d3:4b:85:f9:ef:d2:0c:23:10:b4:32:11:89:0d:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F5:A0:06:8E:A1:FB:4F:C8:75:AA:53:9C:25:91:38:C8:8C:1F:26
X509v3 Authority Key Identifier:
keyid:E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:db:1e:11:c3:cf:c4:79:08:09:58:56:aa:46:e9:0d:89:33:
30:ff:75:65:dc:93:4c:0e:85:ca:65:e5:1e:52:c6:cc:cb:88:
4c:01:d1:37:81:dd:3d:a8:ed:22:95:8c:9c:d4:81:44:0b:88:
aa:84:6b:9f:e2:b5:71:07:9e:b0:18:3c:5e:c4:49:6b:b0:b7:
5b:16:b5:d5:6d:f9:46:40:a3:c1:81:7f:bd:bf:a4:69:17:32:
31:22:ed:ff:12:76:33:66:a4:0c:84:4d:f0:ae:e3:6f:c2:65:
72:9d:95:45:2e:fa:9c:61:73:e1:91:18:0d:13:73:77:d1:bf:
36:4c:ae:a9:d4:91:d3:0d:49:7f:e8:5d:36:5a:af:e2:2b:e8:
4a:a8:e6:b0:1a:e0:4b:89:a0:84:26:98:f2:64:bb:cd:39:88:
35:30:5e:14:e0:61:a9:ce:ae:45:cd:55:71:db:90:e9:aa:ce:
d4:59:51:01:af:5f:bd:6f:28:b2:6a:ab:c1:f8:1c:de:e3:e5:
28:69:0a:cd:91:b7:68:6c:f1:88:8c:33:22:64:09:d8:ad:d6:
63:3e:62:77:69:b8:9f:24:1e:fb:bc:4d:39:9f:d0:f9:63:e6:
41:15:23:07:ba:84:14:dc:19:5e:08:0f:8e:31:6c:e0:4f:6d:
d2:15:61:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:00 2025 by rpki-client