Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
File: 59eZrg792Ybd53-zWtChCCPLly8.mft (raw, json)
Hash identifier: cX2kv2X6LX6aSTPSuAePd860q4/256dqhekYcqFcAOc=
Subject key identifier: 27:9C:EC:4C:8C:6D:5A:F0:B6:DB:CD:10:63:36:5F:43:61:67:A7:64
Authority key identifier: E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
Certificate issuer: /CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Certificate serial: 0197507CC58182B7E0CC17A3A1BCD73D1CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
Manifest number: 1588
Signing time: Sun 08 Jun 2025 17:00:43 +0000
Manifest this update: Sun 08 Jun 2025 17:00:43 +0000
Manifest next update: Mon 09 Jun 2025 17:00:43 +0000
Files and hashes: 1: 59eZrg792Ybd53-zWtChCCPLly8.crl (hash: A4PcZ3nISvrSy3G0hoDuJoEOJG1ta7P3ek/cb0ULFkI=)
2: Kvx8CFJShgrk9zFYI0lUsh--CwU.roa (hash: PVmg//o7LkW03D9ltn/laGXzfCJ6cNBsJDyBEL8Jj7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:c5:81:82:b7:e0:cc:17:a3:a1:bc:d7:3d:1c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Validity
Not Before: Jun 8 17:00:43 2025 GMT
Not After : Jun 9 17:00:43 2025 GMT
Subject: CN=279cec4c8c6d5af0b6dbcd1063365f436167a764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:37:5c:7d:56:da:47:24:65:04:aa:22:d2:
2d:b9:fa:ab:ea:ee:eb:40:96:43:b3:43:93:c8:bc:
20:9d:c8:04:78:61:18:98:7f:b1:a2:79:51:af:58:
5d:16:21:d6:22:63:91:83:3e:d8:17:a2:5f:fb:ae:
3f:cf:86:bd:45:58:1e:cc:b1:82:16:20:db:da:ec:
31:3c:a2:4b:8f:68:a3:1f:fb:38:64:e0:40:8f:4d:
f8:b0:06:fb:69:48:ef:42:d9:9b:dc:8c:2a:bb:e2:
a5:40:a8:85:f7:0f:5b:a6:46:6c:47:f6:64:3a:4c:
f8:88:22:34:2e:22:ea:3b:08:ab:bf:b2:65:6b:0e:
45:d9:6b:5c:fd:fb:f8:03:90:9e:54:62:94:ec:05:
97:61:ae:a2:09:d0:fa:a4:1b:ee:b4:78:2c:29:db:
cc:1e:29:1a:17:22:f3:05:bf:23:a3:3a:d7:11:a8:
67:9e:6c:d5:e5:a4:b2:fb:ff:07:66:9e:24:a1:e3:
20:4f:0f:60:1f:1c:92:78:9f:ac:cb:91:a3:20:04:
04:de:81:af:96:40:53:d0:30:5c:26:27:b2:4e:63:
55:55:33:cd:8d:9e:e0:60:86:af:b0:1b:d1:b3:cb:
c1:47:d0:9a:c5:33:bf:09:e7:f2:b6:1d:4c:73:65:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9C:EC:4C:8C:6D:5A:F0:B6:DB:CD:10:63:36:5F:43:61:67:A7:64
X509v3 Authority Key Identifier:
keyid:E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6c:a5:da:66:40:c1:6f:93:68:16:83:4f:93:c8:f1:92:8d:
71:f5:d7:0b:4b:00:83:a7:b5:6b:6c:a7:d9:19:3a:39:45:1f:
66:e1:ab:d7:69:59:36:ff:66:f1:3f:ef:0b:b9:da:7a:e2:f5:
67:71:24:3b:f4:b3:d7:18:47:03:7a:f0:32:b2:fc:6b:13:ac:
40:26:0e:27:e5:7d:e0:2f:f7:93:7a:f9:52:9b:06:c1:1f:e0:
1f:36:50:00:7e:4f:1d:a2:fa:b7:c0:f1:bb:32:99:2a:e5:70:
3a:6b:36:9c:1c:50:49:2d:d8:0b:f9:b7:36:c2:b4:df:16:1a:
a9:8b:94:89:c3:e8:e3:cb:da:9b:be:5b:13:b1:df:c1:34:6f:
bc:a8:fc:fd:f3:4c:2f:bf:04:1e:c2:a7:32:7b:81:f4:56:17:
e7:93:12:da:64:5a:63:06:4a:7d:d6:29:a4:8d:de:54:c3:b7:
18:42:b8:81:b6:fd:33:66:5f:08:5b:a4:50:20:10:23:31:65:
ed:12:43:a4:d3:a3:10:d8:e9:e4:d9:87:33:83:fc:f1:80:5f:
ef:96:c5:29:22:66:d1:73:de:4e:43:82:2a:2b:77:0d:f1:05:
5b:2e:0f:13:73:8f:3f:9e:60:f6:99:0d:e1:b2:47:38:3c:a6:
32:18:60:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQfMWBgrfgzBejobzXPRzKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZDc5OWFlMGVmZGQ5ODZkZGU3N2ZiMzVhZDBhMTA4MjNj
Yjk3MmYwHhcNMjUwNjA4MTcwMDQzWhcNMjUwNjA5MTcwMDQzWjAzMTEwLwYDVQQD
EygyNzljZWM0YzhjNmQ1YWYwYjZkYmNkMTA2MzM2NWY0MzYxNjdhNzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn43XH1W2kckZQSqItItufqr6u7r
QJZDs0OTyLwgncgEeGEYmH+xonlRr1hdFiHWImORgz7YF6Jf+64/z4a9RVgezLGC
FiDb2uwxPKJLj2ijH/s4ZOBAj034sAb7aUjvQtmb3Iwqu+KlQKiF9w9bpkZsR/Zk
Okz4iCI0LiLqOwirv7Jlaw5F2Wtc/fv4A5CeVGKU7AWXYa6iCdD6pBvutHgsKdvM
HikaFyLzBb8jozrXEahnnmzV5aSy+/8HZp4koeMgTw9gHxySeJ+sy5GjIAQE3oGv
lkBT0DBcJieyTmNVVTPNjZ7gYIavsBvRs8vBR9CaxTO/Cefyth1Mc2UhPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCec7EyMbVrwttvNEGM2X0NhZ6dkMB8GA1UdIwQY
MBaAFOfXma4O/dmG3ed/s1rQoQgjy5cvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTllWnJnNzkyWWJkNTMteld0Q2hDQ1BMbHk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xMTA4MWItNGVmOS00ZTJmLTgxNTMt
Mjg3OTM3OTQwZDdiLzEvNTllWnJnNzkyWWJkNTMteld0Q2hDQ1BMbHk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xMTA4MWItNGVmOS00ZTJmLTgxNTMtMjg3OTM3OTQwZDdi
LzEvNTllWnJnNzkyWWJkNTMteld0Q2hDQ1BMbHk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmyl2mZA
wW+TaBaDT5PI8ZKNcfXXC0sAg6e1a2yn2Rk6OUUfZuGr12lZNv9m8T/vC7naeuL1
Z3EkO/Sz1xhHA3rwMrL8axOsQCYOJ+V94C/3k3r5UpsGwR/gHzZQAH5PHaL6t8Dx
uzKZKuVwOms2nBxQSS3YC/m3NsK03xYaqYuUicPo48vam75bE7HfwTRvvKj8/fNM
L78EHsKnMnuB9FYX55MS2mRaYwZKfdYppI3eVMO3GEK4gbb9M2ZfCFukUCAQIzFl
7RJDpNOjENjp5NmHM4P88YBf75bFKSJm0XPeTkOCKit3DfEFWy4PE3OPP55g9pkN
4bJHODymMhhgPQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:57:41 2025 by rpki-client