Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: 5XFHGIT1STeBnPWIp3l//q7Vec5Ln5G9PB5JWB1d8+8=
Subject key identifier: 58:45:7A:5C:BD:E6:50:79:AA:F8:A2:FE:82:D9:B3:5C:F9:E8:CD:27
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 0198801D61A0CA54138AFF2316AD86143BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 16:01:05 +0000
Manifest this update: Wed 06 Aug 2025 16:01:05 +0000
Manifest next update: Thu 07 Aug 2025 16:01:05 +0000
Files and hashes: 1: 2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa (hash: 1rGV+fsNs0SO2Zvvg0olbcFYooCwn1FYxZF5w23Xb0A=)
2: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: Qn+WU0h5TiPq0cxDgOgwXTsENmC66GWaS25z7y85t+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:61:a0:ca:54:13:8a:ff:23:16:ad:86:14:3b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Aug 6 16:01:05 2025 GMT
Not After : Aug 7 16:01:05 2025 GMT
Subject: CN=58457a5cbde65079aaf8a2fe82d9b35cf9e8cd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:ef:e9:b0:91:89:cf:bb:a6:3a:92:32:ed:
87:2d:d4:ef:29:c1:74:91:f9:49:0b:b7:fb:36:88:
d6:40:30:1b:45:1b:80:fe:0c:66:ea:3e:3c:79:ae:
8b:0e:0e:3c:56:a9:7f:13:ee:c2:8c:c3:bf:79:e7:
1b:de:82:61:d8:c5:58:6d:0c:34:6b:8a:ac:4b:3b:
2d:d8:fb:b6:ed:25:91:40:19:7f:5d:7a:15:cb:d4:
3a:e6:ad:8e:01:5b:1c:7c:ed:b4:a9:37:3f:3a:c2:
c3:f4:45:2c:a2:c1:13:39:0a:80:aa:11:41:c6:21:
c7:e4:a4:ae:aa:ae:c0:80:16:83:10:73:da:85:bc:
be:cc:c7:28:18:08:6d:c2:e5:da:18:0c:83:25:d3:
a6:e4:fc:ed:30:75:6b:8e:37:f3:f3:a0:9f:cf:38:
f6:eb:cf:07:ae:a3:b5:8f:bf:0d:16:bb:d2:66:f1:
06:56:9b:91:13:51:35:c5:fc:75:78:d2:a6:c8:09:
20:da:ab:cf:29:15:38:45:77:78:65:d2:d5:52:ed:
e2:32:f3:ec:2f:ba:5c:a0:ef:86:5f:c1:b1:d6:f0:
0b:6b:71:34:c0:1b:ab:b1:26:09:c0:f1:da:1f:77:
a7:d3:86:08:35:a5:b5:4c:78:d7:27:19:e3:41:19:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:45:7A:5C:BD:E6:50:79:AA:F8:A2:FE:82:D9:B3:5C:F9:E8:CD:27
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:69:e5:7f:1e:fd:4a:1b:ba:bb:b6:9f:34:1e:11:cb:fd:36:
d9:bd:34:6d:2c:a1:c0:4a:35:cd:68:5f:f9:73:cc:e1:fa:b0:
37:58:36:d0:b8:d0:e8:02:3b:3d:02:b6:42:80:c7:18:25:fb:
f3:6e:1a:98:9b:9c:fc:db:1d:4f:44:9b:52:3a:f0:f2:2a:f9:
27:b8:95:d6:9a:7a:cf:37:81:1f:c3:62:ff:df:39:d8:3e:2e:
63:49:02:a0:12:a8:e6:f2:f0:e0:eb:96:27:3a:8a:ec:41:1e:
44:a4:67:4c:e1:49:3b:be:90:5f:cd:3f:f4:ab:8e:63:92:fc:
b1:bc:cf:cd:2d:79:c4:91:d3:28:6f:7f:df:bb:da:63:78:f0:
b8:e8:00:2a:23:2b:9b:a8:34:b5:30:e0:9c:2b:2e:cb:f2:7f:
20:c0:47:19:c3:a2:b2:22:0c:05:e9:90:11:10:c8:40:4c:6d:
df:80:42:20:a8:f6:c1:76:1f:5d:d6:90:f4:0e:1e:f9:23:0b:
85:6e:d9:d8:8f:30:9a:39:49:55:3a:0d:90:58:4b:a7:23:af:
64:d1:d6:98:1b:88:e7:a0:67:53:30:35:f5:a2:34:2d:7b:77:
dd:b9:a8:31:a9:54:35:c5:aa:cf:df:8b:26:fc:e5:67:b2:56:
d5:8b:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:21:42 2025 by rpki-client