Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
File: 59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json)
Hash identifier: 0Aj6tztMC/fNIrFOrU3/Jv1XePin919zIF/Gw4WIlmI=
Subject key identifier: 71:45:A5:9F:FD:7D:E0:58:17:01:E2:82:9C:79:67:30:21:F0:F4:0A
Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Certificate serial: 019A55D23622A1A069C710B23D0409E69240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
Manifest number: 142A
Signing time: Wed 05 Nov 2025 21:00:31 +0000
Manifest this update: Wed 05 Nov 2025 21:00:31 +0000
Manifest next update: Thu 06 Nov 2025 21:00:31 +0000
Files and hashes: 1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: XPU/HKnqULhlgCaHvZT2cBuBjPffFhjLxcv67SV2E+s=)
2: qetS73-OE2CSttiMvug0TDfkr54.roa (hash: f7CQ5AXCS66V7YOxpVoih8o6XmqrwIeswAWr26eRNls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:d2:36:22:a1:a0:69:c7:10:b2:3d:04:09:e6:92:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Validity
Not Before: Nov 5 21:00:31 2025 GMT
Not After : Nov 6 21:00:31 2025 GMT
Subject: CN=7145a59ffd7de0581701e2829c79673021f0f40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:db:e3:28:73:0d:e3:68:13:5d:bf:c8:e2:
6c:28:b1:c1:4e:05:8a:c4:68:cd:15:3e:75:8b:63:
2a:93:3d:ee:37:69:ed:8d:f5:ff:d2:b6:3e:a3:bc:
48:fd:39:77:d7:5f:cd:8b:0d:7f:82:3d:ee:3f:3e:
d3:e6:77:84:c9:46:d8:2b:b8:d0:b8:3a:13:ca:d0:
88:93:ed:81:ee:8f:1c:15:a8:8a:e9:33:a9:12:3c:
3f:59:02:57:8b:8a:c8:27:88:f6:b9:89:1d:aa:25:
48:4f:fc:49:46:4f:b1:ec:9c:b7:b7:11:b1:fd:04:
4d:1a:e0:ad:74:84:f6:5b:eb:c3:54:c2:26:ff:b8:
2f:47:eb:5b:68:56:00:a1:f9:ad:35:73:e2:ad:c7:
92:96:cb:3f:33:9a:ea:72:9a:36:e8:f6:0b:8b:c3:
5f:2c:5c:6f:3c:1a:13:6f:f1:9b:43:05:5e:db:f0:
6a:f8:48:99:2c:93:44:21:ce:86:f4:82:25:18:37:
80:c3:a3:fa:b1:ba:d3:80:56:6e:44:21:97:8e:b4:
15:c6:21:58:3d:79:1c:70:d4:42:92:60:d5:4c:89:
66:0d:70:bc:c3:10:a2:c0:1c:2b:3e:a2:46:e7:5a:
8e:05:97:6c:d9:f8:83:b2:61:15:38:34:be:e2:7e:
bb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:45:A5:9F:FD:7D:E0:58:17:01:E2:82:9C:79:67:30:21:F0:F4:0A
X509v3 Authority Key Identifier:
keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3c:91:49:85:2f:3f:a3:13:01:a2:c1:80:c9:23:ea:52:cf:
91:46:8c:d6:cd:cd:06:02:4c:f7:f6:87:0c:71:b9:86:c7:0b:
25:da:1b:74:0c:6d:b3:ee:50:34:6f:27:fa:09:63:42:ef:f4:
73:94:bd:11:14:95:30:1a:77:53:63:0e:44:b5:30:59:36:3b:
ff:95:46:e2:0d:ca:09:b7:50:5d:0f:c0:94:26:70:6a:2c:bf:
d7:eb:5e:29:fb:64:d3:62:87:f5:44:2f:3b:50:e4:3b:ac:43:
f7:e5:b7:6f:97:d3:bd:ff:1e:df:94:61:32:c3:d2:1a:64:64:
64:b5:a9:cc:3b:e2:22:5d:eb:c1:54:f2:14:eb:12:48:29:50:
06:3d:ce:23:6b:12:80:d1:45:8a:20:c8:49:de:fe:80:8e:5f:
0c:16:78:14:36:01:8a:97:ed:dc:c2:7d:38:2a:c2:3f:2f:46:
42:0d:fd:04:c6:72:0c:46:70:19:f2:b1:de:66:e8:76:5b:51:
6d:91:a8:7a:94:58:9c:ea:7a:b2:03:32:80:31:73:5d:9e:5d:
98:a7:c1:6c:2f:8c:ab:dd:15:48:1b:f4:01:7b:15:dc:c9:12:
3f:5b:79:be:b9:0a:c8:af:1f:45:c5:ba:a7:c5:e8:72:92:6d:
79:0f:06:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:40:43 2025 by rpki-client