Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
File: 59eZrg792Ybd53-zWtChCCPLly8.mft (raw, json)
Hash identifier: hvSYWF9g8dMqw5v2ZT6mQRQXAJWSdM6jtGplLWFLqW4=
Subject key identifier: 45:49:9A:CD:BD:35:14:1B:73:28:46:85:7D:FE:AA:E2:D1:50:D3:6A
Authority key identifier: E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
Certificate issuer: /CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Certificate serial: 01988957905142A7D8C396286DC97B15245E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
Manifest number: 162A
Signing time: Fri 08 Aug 2025 11:01:13 +0000
Manifest this update: Fri 08 Aug 2025 11:01:13 +0000
Manifest next update: Sat 09 Aug 2025 11:01:13 +0000
Files and hashes: 1: 59eZrg792Ybd53-zWtChCCPLly8.crl (hash: KloV5bzv8tFgeaXIgX89kBrFRO60PaGqBhesIn7J9ps=)
2: Kvx8CFJShgrk9zFYI0lUsh--CwU.roa (hash: PVmg//o7LkW03D9ltn/laGXzfCJ6cNBsJDyBEL8Jj7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:90:51:42:a7:d8:c3:96:28:6d:c9:7b:15:24:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Validity
Not Before: Aug 8 11:01:13 2025 GMT
Not After : Aug 9 11:01:13 2025 GMT
Subject: CN=45499acdbd35141b732846857dfeaae2d150d36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:5e:7f:4a:99:4d:c7:18:7e:04:54:e1:f5:
3d:8a:48:1c:0a:f7:4c:2b:4e:ed:52:ef:92:81:43:
14:aa:a7:09:88:aa:66:ff:b4:74:b3:68:c6:88:0d:
c0:ab:1f:25:8c:b4:be:02:58:e2:25:b4:ea:91:92:
3c:6f:d7:d5:57:f4:2d:50:82:58:14:0e:d2:d8:79:
3f:5e:4e:8e:1e:d3:a0:fd:78:50:23:80:97:ad:97:
4b:ac:03:f9:9b:21:4c:43:36:b2:e4:0e:ff:17:e3:
23:ee:e3:3a:e9:45:02:ff:6e:8e:cc:4a:a9:56:43:
d1:48:3a:8b:87:74:17:24:5c:8a:9e:cf:4d:95:8a:
c1:c1:86:04:ea:82:9b:80:3b:05:a4:b6:d5:da:46:
40:64:eb:0b:da:45:83:d6:00:24:fc:06:35:95:a2:
87:5d:ca:04:1e:9e:c8:30:b6:01:c1:bd:81:2e:17:
94:55:15:24:c3:04:d1:3e:9e:98:fd:87:3d:22:3e:
0f:46:24:bc:a2:49:f2:5a:88:d7:7d:9c:68:52:d4:
ac:43:76:7f:04:2f:74:e5:4f:2c:e8:4f:d9:4a:c6:
67:de:ee:7a:cc:13:6b:8c:8f:19:52:be:29:37:49:
03:4a:82:10:8e:2c:3b:50:48:71:48:20:50:8b:f0:
cf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:49:9A:CD:BD:35:14:1B:73:28:46:85:7D:FE:AA:E2:D1:50:D3:6A
X509v3 Authority Key Identifier:
keyid:E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:71:c1:5a:3e:43:2c:aa:89:f6:58:7d:eb:10:05:eb:9d:a3:
10:c0:04:40:c8:c0:74:22:c8:87:a8:67:e7:94:54:6d:48:9f:
e9:9f:58:a5:26:b6:01:ba:2f:0c:87:d9:24:28:cb:f2:e0:87:
c2:a3:4c:be:56:a6:7f:ee:3e:b3:b4:b6:d3:1f:ed:7a:72:38:
05:68:fa:66:d3:49:a3:3d:2a:88:00:e7:96:06:70:9b:cf:f5:
92:97:71:99:60:bd:78:39:79:39:06:a3:1f:b2:e1:af:a5:d4:
a6:ee:13:4f:f5:47:e6:fa:60:44:f4:3a:2a:10:5d:87:48:e1:
cd:8d:3c:f4:48:b5:6d:ca:60:a2:ee:89:a0:8d:f7:60:50:7b:
16:73:09:40:d3:0a:8c:c9:6c:ff:57:5e:0d:0a:b3:93:73:06:
1d:b7:d0:62:34:31:94:49:ed:75:bc:66:44:64:c2:91:a2:80:
82:54:be:e1:17:99:5d:b1:8b:fb:25:0d:f1:b8:9a:8a:34:03:
2c:cc:f5:f6:12:cf:a0:10:27:aa:33:31:e2:1c:45:7e:de:64:
94:8c:78:dc:b1:2b:70:af:a6:90:29:81:ed:3d:32:97:ba:a8:
41:30:59:ab:85:a6:5d:9a:6f:e6:99:86:f8:96:80:cf:1a:6a:
f3:81:c3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:37:39 2025 by rpki-client