Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier: jqTw+3fglOamIoBhvqHcDzEOnlmPAkD0zhr5dYc0QjM=
Subject key identifier: 4E:5E:0C:3F:3B:89:47:17:9F:C1:AD:AA:86:82:95:AD:23:C1:12:80
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 019A4DE1FEC076A4F7A13AFB387827B035C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:47 +0000
Manifest this update: Tue 04 Nov 2025 08:00:47 +0000
Manifest next update: Wed 05 Nov 2025 08:00:47 +0000
Files and hashes: 1: JOqhFiRetaCWX-COli2qt4epZmU.roa (hash: Tggn3wwdEvZYJd/9CH5nD5nBnaCH9L0m/C7cCJYB59s=)
2: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: Sd8iKQoSGTpJwTNVH3U2KeQUzDHSNsWufOQCJd6xZCY=)
3: rPpO-fPVx8XfYvByx6grU3jDRqc.roa (hash: yhGIutrfrX3qPTF0PHHiWDvjrLT7q6l6BKv9z17Nw1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:fe:c0:76:a4:f7:a1:3a:fb:38:78:27:b0:35:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Nov 4 08:00:47 2025 GMT
Not After : Nov 5 08:00:47 2025 GMT
Subject: CN=4e5e0c3f3b8947179fc1adaa868295ad23c11280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:55:cc:b3:b9:50:cd:7e:1c:ec:15:62:3f:
5b:19:dd:db:18:be:ac:11:9d:ba:69:44:46:4f:2d:
40:51:81:97:d7:10:45:e3:18:d9:4d:38:2d:cd:02:
53:67:f5:12:d5:01:4d:a0:1d:e2:40:fd:ff:25:e0:
bb:52:b3:c7:8f:2b:5b:30:66:0d:4d:cb:b8:3c:a5:
af:87:b8:5e:b7:8e:b2:d8:01:3e:5e:8a:8c:03:40:
29:11:bd:ba:2c:93:0a:89:0e:7c:1d:45:9f:39:37:
9f:50:40:7d:8c:e7:28:2f:c4:98:0c:1a:04:5c:bd:
d7:1a:33:71:ec:75:83:25:0e:ec:ca:e6:67:70:f9:
fa:8c:bf:f8:7b:19:02:f9:19:bb:a8:eb:66:59:fb:
ea:a4:77:6b:c5:ed:bf:32:de:61:71:cd:42:a4:80:
5b:25:a3:ce:fd:95:ab:bb:10:7f:a5:68:87:b5:7a:
14:64:b6:00:3a:9d:85:d0:ff:85:76:43:3b:e6:ce:
a1:76:f4:21:a8:9c:2b:5e:03:e7:05:16:f6:fb:12:
ea:10:7f:62:b0:7d:a2:db:c5:bb:36:a7:c9:6c:f7:
83:16:32:a9:6e:aa:34:3b:f7:8d:4f:cc:38:55:01:
d3:35:b3:db:7c:d5:2a:a9:eb:27:f6:4f:47:41:06:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5E:0C:3F:3B:89:47:17:9F:C1:AD:AA:86:82:95:AD:23:C1:12:80
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3d:a1:52:0b:a6:8c:ac:9c:00:d8:54:84:38:4d:c3:04:2d:
0d:29:09:0d:8a:f2:31:48:8f:01:14:52:5f:d2:4f:c6:7a:ac:
5a:7b:e9:54:92:7b:58:11:3d:b7:65:76:89:b3:d5:d0:6a:bc:
ff:43:d3:29:17:e0:10:53:d6:84:3c:f5:fe:31:a5:4b:9d:4e:
17:c2:76:7c:67:3b:76:d3:fd:49:78:75:26:7d:0f:a7:f9:42:
12:90:f0:4d:5c:31:0b:dc:99:9d:89:55:a1:3e:c6:5b:79:76:
79:d9:06:e7:17:39:f1:41:20:73:97:04:1b:3f:33:71:ef:0d:
d6:c2:99:90:c3:83:cf:40:8b:42:17:ea:0d:7c:79:ee:3a:cb:
a8:bf:f4:ff:a2:6e:3b:11:44:fa:8b:bf:0c:88:92:7c:4a:bf:
02:ed:21:38:83:77:96:d8:52:7b:83:67:fb:3b:ac:da:18:0e:
06:f9:a1:8f:b0:02:88:0b:19:df:93:0e:dd:62:a3:c2:12:c3:
46:ff:ed:16:87:ff:29:a7:74:51:26:c4:3b:c2:90:84:93:cf:
e9:f8:9b:60:d8:00:06:95:48:72:1a:2a:98:d9:ce:ae:70:82:
cf:fc:c6:32:ac:4c:96:b0:31:4d:f6:29:46:d9:58:45:13:af:
32:b9:b5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:44 2025 by rpki-client