Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
File: c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft (raw, json)
Hash identifier: bSy7ZCBX89p9vCysLpAGnOMfCmgdLoQuZ9xemvfAoZo=
Subject key identifier: D5:15:A5:F9:93:63:B1:06:69:B1:57:9C:50:62:D6:5B:DC:5F:A6:4E
Authority key identifier: 73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78
Certificate issuer: /CN=739f3ebcd26792b913c1dcb9941996e998f16078
Certificate serial: 019922FA949C47A882297DCE4D106AA1D48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 07:01:11 +0000
Manifest this update: Sun 07 Sep 2025 07:01:11 +0000
Manifest next update: Mon 08 Sep 2025 07:01:11 +0000
Files and hashes: 1: 8ZSiBVB9h2VqcjNcGsXVM5lUjmI.roa (hash: hKEwzTFWQZO4iHIgYWy7xoBKPXgQqTPB0mui/ew+61o=)
2: c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl (hash: Pgf28KsVwTFLecU6NXp4D6y5h+0ewFH5thSvJakZ6ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:94:9c:47:a8:82:29:7d:ce:4d:10:6a:a1:d4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=739f3ebcd26792b913c1dcb9941996e998f16078
Validity
Not Before: Sep 7 07:01:11 2025 GMT
Not After : Sep 8 07:01:11 2025 GMT
Subject: CN=d515a5f99363b10669b1579c5062d65bdc5fa64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3f:97:7a:64:3e:4f:6b:79:e5:31:4c:a1:99:
d5:c1:1b:ac:b0:f1:46:44:5e:09:f2:fa:7b:31:db:
ec:4b:12:55:8b:a7:2f:76:d9:16:f7:5a:1b:77:79:
37:a9:e1:55:a3:50:dc:7c:9c:da:42:41:36:06:d5:
73:58:16:7b:ae:8e:67:02:63:12:f5:39:f6:cf:b7:
23:4f:f3:0e:d1:86:f3:6e:4f:a4:df:a8:41:57:f2:
bf:61:20:1e:c4:a3:fb:e5:13:cd:48:11:5f:1d:f8:
39:d1:65:b1:7d:42:73:0d:f9:a0:ef:be:85:ab:5f:
b6:da:dc:56:b3:13:18:2c:c2:d8:ca:8b:4b:4f:61:
c4:e6:f1:a4:5d:8b:ba:b3:3a:19:56:93:bb:f6:20:
9a:bb:0a:19:58:3e:29:33:ac:b3:d1:9a:51:31:7e:
b7:ea:5c:87:00:8d:bc:65:32:e8:a1:d8:37:60:6d:
77:41:14:13:9a:96:2d:9a:9a:f7:c6:50:cd:75:10:
d9:1a:9d:d6:72:59:ed:39:e1:39:f7:85:02:38:4a:
be:80:a1:66:42:63:10:8d:a2:35:d2:81:96:b9:69:
8b:d3:0a:64:bd:76:12:49:29:a0:89:0f:06:55:33:
06:78:50:02:38:df:b8:95:6d:26:db:24:54:41:19:
2c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:15:A5:F9:93:63:B1:06:69:B1:57:9C:50:62:D6:5B:DC:5F:A6:4E
X509v3 Authority Key Identifier:
keyid:73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9d:55:5f:f6:df:67:11:84:8b:49:d4:c1:0b:3f:f9:2e:9b:
2e:dc:7e:87:cf:19:52:3d:9b:94:e1:cd:22:9a:24:26:2a:40:
2f:88:58:9c:6a:43:d6:f9:cc:fd:54:b6:8b:93:fb:ab:7f:73:
c1:1c:41:c0:b5:42:58:e6:52:05:62:3a:80:48:86:24:c8:1b:
4c:6c:f6:df:da:01:c5:59:9e:51:6a:9f:37:d6:8c:b0:b0:d3:
19:ef:6b:a9:b2:18:c8:c8:70:f8:1e:20:14:0e:4d:5c:6d:10:
f2:bd:05:a2:83:5e:71:47:7f:84:2a:b4:71:de:d7:a1:ed:97:
aa:39:e7:c9:2c:e0:63:a0:d5:c0:82:84:f8:be:62:3a:c0:22:
50:78:5a:21:f6:1d:a5:71:cc:64:da:46:40:e2:06:c0:45:ba:
85:3d:4e:bc:4a:b6:1e:e0:ae:d7:65:4b:04:31:00:78:1d:a6:
68:ae:dc:2f:bf:98:68:6a:b7:fb:4a:76:e0:36:56:c6:ad:38:
dd:e9:7b:c7:0f:c5:74:2b:aa:21:5d:33:41:7e:ce:29:e3:e9:
7d:d3:ef:77:b4:80:96:73:84:6f:dd:f7:dd:43:20:9a:73:03:
9b:7a:62:7b:fc:2b:3a:91:ea:3f:fd:c4:47:ef:9a:01:1f:a1:
71:a3:79:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:08:06 2025 by rpki-client