Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
File: 58OrlrdMKsTwSuYqt-gs3xmI7UA.mft (raw, json)
Hash identifier: wkj5I6nmpfVSG6ifdbeqy6Y2kEBiwH4e0Z3U46d/g4k=
Subject key identifier: 7F:AE:F6:DE:95:C3:3C:43:E8:0A:93:AA:60:FB:9A:1D:E3:2A:1F:C1
Authority key identifier: E7:C3:AB:96:B7:4C:2A:C4:F0:4A:E6:2A:B7:E8:2C:DF:19:88:ED:40
Certificate issuer: /CN=e7c3ab96b74c2ac4f04ae62ab7e82cdf1988ed40
Certificate serial: 019873068B49CE63AF9BC2D4184B8E533361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58OrlrdMKsTwSuYqt-gs3xmI7UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
Manifest number: 0798
Signing time: Mon 04 Aug 2025 03:01:05 +0000
Manifest this update: Mon 04 Aug 2025 03:01:05 +0000
Manifest next update: Tue 05 Aug 2025 03:01:05 +0000
Files and hashes: 1: 58OrlrdMKsTwSuYqt-gs3xmI7UA.crl (hash: 0ZjAhSHSSCQIXBxvGClU75lDafEa+QufHaEFM/wK4gY=)
2: tRQVAZPhSI7yY2YBf58wHloNtVk.roa (hash: x6U/gqCwfyDYCGrA4HX4YKbEtJbHihcQ4Z9Ks5Bgn58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/58OrlrdMKsTwSuYqt-gs3xmI7UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:8b:49:ce:63:af:9b:c2:d4:18:4b:8e:53:33:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c3ab96b74c2ac4f04ae62ab7e82cdf1988ed40
Validity
Not Before: Aug 4 03:01:05 2025 GMT
Not After : Aug 5 03:01:05 2025 GMT
Subject: CN=7faef6de95c33c43e80a93aa60fb9a1de32a1fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:c8:7a:24:67:66:75:fa:b2:0d:3d:39:89:
f1:e1:f8:78:f9:69:20:6a:2d:60:57:16:f5:a9:5d:
08:bb:06:c3:53:e5:13:8c:cd:3b:7a:4b:19:c1:e1:
0f:5f:f4:16:91:70:26:67:6a:9d:fd:35:fe:37:94:
40:41:ea:98:0c:02:c8:79:f3:3c:05:41:8b:4e:7f:
94:dc:14:eb:5f:de:81:e1:b4:be:cd:a2:0e:7d:c8:
ca:9c:ea:43:b9:a4:f0:c4:25:71:75:27:f2:c0:64:
dc:7d:fc:57:06:7c:df:8e:24:89:c9:c0:71:34:38:
9b:b0:5d:9b:ae:55:67:b8:b6:f2:31:db:1e:08:0a:
fd:13:b4:59:50:ba:25:80:e4:1c:5c:97:0d:48:5e:
0b:fb:7a:21:c4:74:ea:fc:34:a7:1f:3b:6a:9c:21:
9f:fa:5d:0c:d9:da:47:f3:ac:8c:16:54:06:9d:9d:
12:3e:fc:01:eb:89:2a:bb:7b:5c:36:3b:3f:b0:e5:
f5:4f:73:1e:ca:46:7b:fb:0a:0e:bb:7f:c3:3c:97:
ee:4f:37:a4:5d:53:91:80:c6:31:80:16:4d:00:1d:
fb:a7:ef:c1:04:16:4d:a6:7e:85:35:54:90:a3:bf:
ac:17:f7:db:ea:19:35:b8:03:66:06:00:3d:26:6a:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AE:F6:DE:95:C3:3C:43:E8:0A:93:AA:60:FB:9A:1D:E3:2A:1F:C1
X509v3 Authority Key Identifier:
keyid:E7:C3:AB:96:B7:4C:2A:C4:F0:4A:E6:2A:B7:E8:2C:DF:19:88:ED:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58OrlrdMKsTwSuYqt-gs3xmI7UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1d:3a:1a:1e:d3:0d:8f:4e:e2:a8:da:ea:32:20:bb:c7:41:
bf:9d:41:38:68:bb:e7:dc:ff:fa:d9:6a:15:50:90:81:ef:34:
3b:86:49:77:1c:39:f1:b5:b5:72:3e:cb:c7:59:15:90:98:8e:
0e:eb:16:cb:c7:28:aa:4a:62:89:a8:3c:00:03:93:04:49:e5:
3a:c7:91:fa:4c:84:8a:77:d4:91:27:aa:65:26:24:79:f6:51:
f1:ea:e8:15:19:ee:a3:84:96:47:8c:42:8c:b1:3d:b9:4d:76:
22:1b:b3:41:90:ce:e5:1a:1b:1e:1b:ee:af:95:ef:38:16:fa:
bd:6d:70:c9:81:80:08:38:ef:61:bd:44:22:f1:fd:bf:9b:51:
4b:c8:0d:b7:8b:e2:8d:44:cf:d6:5f:b6:a4:97:6b:7a:09:ca:
38:54:f3:bd:90:13:a4:ae:a3:10:f4:19:fa:32:0e:55:2d:b8:
58:39:4d:d2:c1:08:2f:2f:5f:a1:3f:74:09:1b:61:18:56:89:
87:fd:ae:0d:fc:fd:d4:bc:63:d8:2b:87:1e:59:a3:ff:7a:31:
a6:84:a5:4c:33:18:ac:24:7d:db:7f:04:88:b7:e0:ff:c0:69:
0a:18:8a:81:4b:07:2f:1b:6b:7c:25:a9:d9:c3:12:d9:27:97:
5b:ff:e8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:29 2025 by rpki-client