Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier: y0NTf8PeSHUjdM4N+WIdSDp02GQDsOgxOAuYdsWRnOA=
Subject key identifier: BA:13:BA:58:DF:5E:B0:B9:14:52:4A:69:AF:C3:FB:B7:98:9B:FC:E6
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 01989F3A03791B45FFA0C389E740FF254E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number: 162E
Signing time: Tue 12 Aug 2025 17:00:36 +0000
Manifest this update: Tue 12 Aug 2025 17:00:36 +0000
Manifest next update: Wed 13 Aug 2025 17:00:36 +0000
Files and hashes: 1: JOqhFiRetaCWX-COli2qt4epZmU.roa (hash: Tggn3wwdEvZYJd/9CH5nD5nBnaCH9L0m/C7cCJYB59s=)
2: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: Ptt2ZtCm36770mPt52BsxhepECp8SM/Knf4DMHl/s8Q=)
3: rPpO-fPVx8XfYvByx6grU3jDRqc.roa (hash: yhGIutrfrX3qPTF0PHHiWDvjrLT7q6l6BKv9z17Nw1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:03:79:1b:45:ff:a0:c3:89:e7:40:ff:25:4e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Aug 12 17:00:36 2025 GMT
Not After : Aug 13 17:00:36 2025 GMT
Subject: CN=ba13ba58df5eb0b914524a69afc3fbb7989bfce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1c:8a:92:db:49:d0:97:c2:3e:ec:f4:b3:b7:
54:0d:d9:30:7e:8b:bf:fa:15:a9:30:42:a6:86:13:
c6:37:7f:f4:b1:fb:7d:c6:f8:76:ce:dd:5b:53:00:
6a:56:0f:48:19:47:14:f0:fa:df:ff:8e:79:16:3f:
85:ec:ea:18:ee:82:12:b8:ec:1e:08:68:58:86:5b:
8b:d3:69:50:d0:15:9f:f7:b8:f0:c0:a9:53:d8:7d:
44:af:5c:0b:45:79:26:73:19:01:77:43:ea:b6:f2:
93:cf:d4:f3:69:14:e5:f6:56:61:53:1f:3f:26:23:
a3:0b:d6:43:41:9b:25:7e:19:c3:39:c7:a0:2a:66:
7e:89:8e:dc:c1:1f:ec:1a:2e:1a:13:e3:ed:5c:dd:
d5:fb:b3:0b:1a:8e:6a:fe:b8:f2:f4:d1:9a:f4:aa:
90:a6:77:f3:2d:9c:d9:e6:46:38:5b:da:17:3f:06:
75:a9:50:e1:87:f8:a8:4b:3f:f7:2e:91:71:ea:f1:
21:1f:9f:06:b5:a3:b3:5a:c3:e5:8d:b1:07:c7:8b:
34:80:8e:7b:76:fb:1b:57:e3:47:2c:6b:37:75:bb:
79:0a:cb:a1:3c:9c:12:31:7f:32:a9:a2:c3:d1:3e:
53:dc:34:d9:df:7c:04:89:55:03:73:89:67:40:53:
61:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:13:BA:58:DF:5E:B0:B9:14:52:4A:69:AF:C3:FB:B7:98:9B:FC:E6
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cb:1b:27:ab:63:67:ea:40:54:0b:cc:26:73:55:44:d4:ec:
39:39:e0:07:9f:7f:46:8a:99:8b:04:a8:f7:e3:bd:c6:b3:13:
bf:d7:76:77:22:66:3c:28:04:ca:49:b1:1c:e6:91:00:4d:be:
a9:c9:51:94:8c:49:68:1c:b5:a5:cf:12:ed:38:8a:a0:89:31:
48:e4:b6:81:cc:35:64:1f:5e:df:54:cb:ca:00:25:fa:9d:3e:
b1:cb:3e:8f:19:e3:0d:61:eb:50:ce:35:31:45:bf:65:ef:0c:
88:bd:f1:22:c7:dd:47:bd:46:9a:ba:c9:91:ca:bf:06:da:4f:
aa:d4:a5:1b:70:83:14:5b:30:bd:18:87:1b:cb:ed:b9:bd:ec:
a0:d7:a2:dd:cd:e1:1b:c1:a6:67:0d:58:24:0d:01:8d:bc:81:
8d:c6:20:06:e8:c1:bb:43:b9:e2:9d:9e:47:5e:3f:ca:be:38:
3f:7c:d2:ad:c6:ac:25:42:9c:ac:ae:c1:59:ba:5c:5b:26:1f:
af:73:60:7a:90:ba:66:ce:d7:10:c4:69:9f:82:d8:9d:55:64:
b2:1b:e1:fb:99:0e:4c:4b:b4:62:fb:7d:6a:a0:5e:59:90:48:
ba:58:1a:03:34:15:09:d3:07:6a:cd:5e:27:de:90:72:ee:d8:
ff:53:77:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:27:34 2025 by rpki-client