Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
File: c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft (raw, json)
Hash identifier: 8gjsecwV/37qt2QZi6w6BZZ2ci7h+sMuGa6jFITug/U=
Subject key identifier: A4:06:B4:86:C8:A7:2A:D1:02:40:48:7A:13:AE:0E:9D:C0:93:2E:57
Authority key identifier: 73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78
Certificate issuer: /CN=739f3ebcd26792b913c1dcb9941996e998f16078
Certificate serial: 019A7112CF21B6C41EACAA721CB0C105855C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 04:00:49 +0000
Manifest this update: Tue 11 Nov 2025 04:00:49 +0000
Manifest next update: Wed 12 Nov 2025 04:00:49 +0000
Files and hashes: 1: 8ZSiBVB9h2VqcjNcGsXVM5lUjmI.roa (hash: hKEwzTFWQZO4iHIgYWy7xoBKPXgQqTPB0mui/ew+61o=)
2: c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl (hash: NfegGB15tGE+fhDxuJqmeE63z7QcisQ1pB1BV6rul50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:cf:21:b6:c4:1e:ac:aa:72:1c:b0:c1:05:85:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=739f3ebcd26792b913c1dcb9941996e998f16078
Validity
Not Before: Nov 11 04:00:49 2025 GMT
Not After : Nov 12 04:00:49 2025 GMT
Subject: CN=a406b486c8a72ad10240487a13ae0e9dc0932e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:1e:97:f1:32:e1:b3:ab:1e:9c:58:85:ff:
e1:88:56:6b:d8:c4:e8:a1:24:3f:d6:f6:99:eb:6e:
19:0a:a1:4d:68:17:c3:66:67:d1:23:f2:93:d1:a1:
ea:55:b8:91:15:34:a8:14:36:75:55:8c:f1:cb:fb:
42:65:99:6a:dc:51:4d:9d:98:59:36:0e:4f:1c:c7:
57:1f:19:31:02:54:c9:64:47:cd:58:1d:ed:6d:ca:
5a:41:11:6c:03:ea:d1:8c:21:ef:39:68:d0:bf:91:
22:b7:09:32:78:63:b9:db:ac:45:75:d8:b5:95:be:
eb:3b:81:ce:e1:75:8e:b6:2b:2a:11:cc:0e:05:e3:
2f:80:98:81:8b:ef:0f:bd:05:90:36:5e:f9:2a:0e:
86:42:60:23:9a:a5:4d:af:9a:3f:ea:ba:8b:f4:e8:
1b:b9:44:bc:07:cb:a8:60:41:f3:6e:a3:cd:bf:18:
32:d1:42:dc:96:c5:2f:44:c7:a9:8d:ba:4a:86:c6:
49:e4:7b:ce:01:6e:16:fa:0e:f8:1b:f4:26:5d:dd:
0b:d9:52:58:e1:61:b8:cd:9f:2e:79:bd:03:7c:c8:
e1:85:50:19:8e:07:4b:ef:a1:e9:53:61:0b:5b:04:
b4:e5:8f:15:41:f9:4d:de:3e:fe:28:82:05:3d:1c:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:06:B4:86:C8:A7:2A:D1:02:40:48:7A:13:AE:0E:9D:C0:93:2E:57
X509v3 Authority Key Identifier:
keyid:73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:77:a4:4a:21:f4:f1:0e:ac:68:24:01:12:e3:d3:c3:1a:66:
80:34:ef:6c:73:d5:44:39:5e:e5:f5:36:fb:25:18:2f:c3:a8:
89:21:70:08:ee:d8:1a:f4:d2:f4:c1:44:ba:ed:6b:57:c5:3b:
2c:31:b5:9f:88:14:43:f7:77:df:c1:35:14:1c:9b:02:cb:a8:
25:67:40:ed:40:42:22:9e:59:a8:c4:34:01:11:0a:bf:f0:ef:
b5:4c:5d:3c:6d:eb:1f:13:10:4e:1b:a0:2a:61:3a:0d:63:11:
79:86:a2:ee:09:d8:51:a8:e4:2e:f9:97:9b:b8:b2:6e:75:40:
6e:a8:89:c8:2c:76:f7:95:c9:fe:df:0c:ba:27:f5:5e:c7:ae:
f5:d6:f1:53:6c:6b:6e:e1:cc:04:ea:57:5d:70:67:83:4f:f8:
f4:24:57:ce:b5:67:bc:b5:f2:86:21:11:00:77:cf:ee:0d:2a:
cc:11:68:9e:5a:7f:5f:f0:7e:a9:1e:7e:73:1d:07:a6:cf:4f:
cb:4d:6a:40:01:1f:b1:ac:70:4d:1b:a5:2e:df:c9:4f:64:7f:
63:4e:dc:e9:ef:b1:a3:eb:7e:48:22:31:98:1e:75:74:e0:7a:
ce:d8:37:e4:fd:d4:99:10:75:f5:42:c6:6b:67:4b:76:fa:93:
e6:48:c9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:48 2025 by rpki-client