Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
File: 58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json)
Hash identifier: uZ1r0oIv5P844oZ8TpA4iv6NJON4/77LiCDdiaf1O+Y=
Subject key identifier: 84:B3:3D:30:91:E1:9F:62:BF:1D:CC:A5:EC:CE:62:AA:63:E7:BB:5B
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Certificate issuer: /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial: 019A4F626EA142CC061CBCBC0873E2447ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
Manifest number: 0A4F
Signing time: Tue 04 Nov 2025 15:00:42 +0000
Manifest this update: Tue 04 Nov 2025 15:00:42 +0000
Manifest next update: Wed 05 Nov 2025 15:00:42 +0000
Files and hashes: 1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: 4bV3u7IamTmHklwTx27eb8IQ0udKFXUqZMV5JNFw+7M=)
2: rj-L1Ht9KU4SpqytVvSZ8FykJs0.roa (hash: o5/pUFEbXRLCOB5XslmeCnU9+6JRYi7PIpvUyWlOL2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:6e:a1:42:cc:06:1c:bc:bc:08:73:e2:44:7a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Validity
Not Before: Nov 4 15:00:42 2025 GMT
Not After : Nov 5 15:00:42 2025 GMT
Subject: CN=84b33d3091e19f62bf1dcca5ecce62aa63e7bb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:86:5c:83:69:1c:0e:a9:b7:01:f2:f0:4f:
ad:bd:26:d2:db:ed:70:5a:b9:a7:93:7e:d8:2c:df:
da:df:5c:62:01:f7:90:03:73:7a:e0:cc:b4:00:79:
08:a7:22:37:8d:6b:4c:37:c7:da:cc:7e:02:1c:83:
f8:b2:45:f7:63:f1:b2:8b:0d:26:6e:66:4e:b7:ce:
76:b9:ec:46:92:07:8d:e3:9b:40:e3:56:7d:49:06:
df:2a:1a:f7:8d:42:ae:96:ad:59:17:18:ec:c3:2c:
6f:98:fe:d2:17:1d:61:64:fd:96:6f:38:2f:87:ed:
b0:3e:69:10:c3:13:87:1d:5a:6d:af:27:4d:7a:e0:
28:77:0e:6d:e3:8f:2d:fe:01:16:fc:76:af:36:48:
32:10:29:05:73:b2:52:e0:22:76:c8:2b:0b:56:2f:
4a:4d:0a:fa:11:f2:c3:3a:5e:a4:cf:36:bf:2b:f9:
ee:8e:d6:8a:c2:7f:4c:a7:1d:47:35:fd:2c:61:d8:
fa:e7:98:fd:c5:bc:45:df:cd:ad:6d:ff:21:a5:d4:
25:70:5c:20:27:4a:fe:99:0b:92:5a:b8:43:f8:d5:
38:42:86:c3:e6:70:c2:06:b6:65:43:66:b6:72:dc:
90:9c:55:77:eb:49:2f:f5:d1:9a:0e:5e:e9:a7:a2:
5a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B3:3D:30:91:E1:9F:62:BF:1D:CC:A5:EC:CE:62:AA:63:E7:BB:5B
X509v3 Authority Key Identifier:
keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a9:11:a9:c4:69:3a:7b:94:6a:1b:12:4e:5c:1f:89:df:1f:
0d:2a:19:07:69:7d:19:c2:23:f1:87:92:73:ca:de:cd:c8:84:
39:8d:60:bb:e6:6e:a3:e3:ba:a0:80:ae:83:ec:a8:ba:90:c2:
a9:39:0a:6b:10:f9:72:72:da:07:1e:34:08:22:98:42:4a:69:
5b:eb:82:dd:7c:c7:c7:08:6f:97:70:49:e0:fd:80:6f:77:4c:
9a:4b:ba:d1:b2:95:9c:d6:36:77:d5:9f:1a:dc:57:70:2b:4e:
88:97:d3:57:c7:a8:d4:df:c5:ff:ca:a8:4b:80:18:c6:be:f7:
b7:90:5e:92:3c:bb:d9:b2:a6:d9:cd:12:1a:30:51:cf:c3:eb:
c9:93:07:59:22:83:b6:2a:9d:91:d9:2a:91:5b:a2:e1:52:f0:
dd:19:9e:81:62:b6:e2:a4:dc:b6:a3:39:6a:11:91:58:b2:5e:
fb:9d:7c:a1:6e:95:6e:74:76:44:e1:be:fc:d8:9c:b4:91:1b:
f4:2e:ab:3e:d0:f0:fc:96:75:3d:55:1b:87:00:45:e1:e4:99:
e5:92:92:19:d0:a3:e1:9e:09:d1:41:87:0e:5e:ab:c7:be:65:
0d:c3:aa:e0:29:28:55:04:33:60:1e:ee:c6:5a:74:89:36:60:
be:9e:7b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:29 2025 by rpki-client