Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
File: i58lgoNRffGYWTiOE7rRrgJopfs.mft (raw, json)
Hash identifier: XaPmCK0wtwa5i4NFBPjsEQJJ0/xiL2ufTnOMHElUzPc=
Subject key identifier: E3:C9:2D:1B:EC:C2:5F:E2:CA:7B:61:2D:DD:ED:6F:7E:16:42:9C:76
Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb
Certificate serial: 019A7225F91915ED5990EC658A558AFC111D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:22 +0000
Manifest this update: Tue 11 Nov 2025 09:01:22 +0000
Manifest next update: Wed 12 Nov 2025 09:01:22 +0000
Files and hashes: 1: aUEo_6I1NIoEpJrfmKA_-34y2x4.roa (hash: qf/pPhy348tojuz4A7OR24KHAsQ8d6peWd65flxSoJ4=)
2: i58lgoNRffGYWTiOE7rRrgJopfs.crl (hash: SvAiLfiM+s1IDlNgzgpejlRHAidmLkorIRM48IZbVIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f9:19:15:ed:59:90:ec:65:8a:55:8a:fc:11:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb
Validity
Not Before: Nov 11 09:01:22 2025 GMT
Not After : Nov 12 09:01:22 2025 GMT
Subject: CN=e3c92d1becc25fe2ca7b612ddded6f7e16429c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:79:08:1c:37:33:98:59:01:24:71:f0:a7:
08:0a:4a:61:dc:ce:e0:2a:c8:a6:e7:ff:25:fd:ea:
07:08:1e:fa:0e:7b:e3:5c:58:e7:db:89:64:84:fc:
3e:94:59:04:94:8a:de:0d:7f:37:77:9b:a3:c0:71:
69:e3:99:fd:07:cc:18:80:2c:29:77:9e:f4:56:d9:
4a:4f:29:2f:34:91:ad:6d:ee:d0:6b:83:a2:be:2b:
f8:11:13:56:0d:ef:e8:e8:c5:35:c4:aa:36:27:0f:
cd:19:f7:4a:0d:a6:e4:9e:ad:e1:98:39:da:82:18:
30:f0:ff:1d:9a:d8:99:69:ac:d0:4b:91:2c:f2:a9:
7c:95:91:6b:be:98:61:3e:cb:e6:ea:81:32:6f:ce:
d0:9f:e5:f3:07:f0:25:af:4e:50:15:d0:71:b6:f5:
7d:76:6a:1e:1b:e9:b8:79:65:49:00:b4:59:e4:33:
4f:b0:b8:43:a7:fe:5f:da:51:a9:92:cf:b4:37:b1:
09:dd:4d:67:a5:a4:72:7c:85:20:23:6b:a6:6e:b0:
9d:e2:86:2b:fe:c0:f4:53:51:54:1a:bc:3e:6e:cd:
b7:19:94:0a:16:e2:be:d8:12:76:2d:13:48:23:1a:
db:51:b1:7f:6c:d1:82:e2:28:1d:38:6c:0c:27:87:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C9:2D:1B:EC:C2:5F:E2:CA:7B:61:2D:DD:ED:6F:7E:16:42:9C:76
X509v3 Authority Key Identifier:
keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ab:25:4d:ca:56:8b:f8:91:be:50:7a:f2:4f:99:d2:cf:89:
8e:63:4d:10:38:37:f6:a4:72:ef:b7:1e:94:1e:32:9f:af:93:
2d:9a:6e:d1:78:4c:91:ba:17:dd:93:97:d8:dc:5a:50:16:2e:
12:92:d6:ed:8e:8d:38:15:7e:a3:13:4a:4d:41:54:22:4a:da:
74:02:6c:ca:b3:95:2d:0a:60:2a:70:84:c3:ec:ed:22:b2:89:
2f:a0:5a:b1:e1:da:23:27:87:27:e2:b2:98:94:ba:33:9f:04:
a3:93:37:71:e9:cd:e2:3a:c9:86:64:f0:28:65:df:d2:d2:74:
7d:65:3b:1e:70:61:8a:8f:2b:88:42:8b:f7:bf:40:63:a0:d6:
1c:c0:d0:c3:c5:be:85:c2:5c:3a:f0:f8:e7:e7:b8:5f:16:9e:
75:0e:9c:69:c5:b6:d5:4a:5e:58:6c:0f:60:b9:9d:e9:89:32:
96:55:b5:71:3e:d5:05:89:62:3f:15:13:e1:40:ac:e0:16:fd:
4c:d4:5d:29:3b:fb:5d:af:6b:04:00:6e:02:9b:5e:8f:97:da:
d7:12:74:cb:a2:05:37:b0:ec:3b:40:ff:bd:8d:8b:50:c6:de:
41:4d:85:af:9b:45:d6:a6:60:28:b9:39:7c:ef:07:4f:29:76:
64:75:1c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:49:46 2025 by rpki-client