Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
File: 59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json)
Hash identifier: AYJuCBc833WCEulDkkttEtal3J/H46jGLSLCdLWBwEo=
Subject key identifier: B7:20:AB:AB:65:73:E7:42:52:09:F6:1C:34:13:93:E7:8A:D3:6C:E3
Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Certificate serial: 01988A32C15F702B7498C7465A5516B2B7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
Manifest number: 133C
Signing time: Fri 08 Aug 2025 15:00:38 +0000
Manifest this update: Fri 08 Aug 2025 15:00:38 +0000
Manifest next update: Sat 09 Aug 2025 15:00:38 +0000
Files and hashes: 1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: vZH1HVebfiiWU31lEylwwjdgdfyn7mEXBdCBhO8b85w=)
2: qetS73-OE2CSttiMvug0TDfkr54.roa (hash: f7CQ5AXCS66V7YOxpVoih8o6XmqrwIeswAWr26eRNls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:c1:5f:70:2b:74:98:c7:46:5a:55:16:b2:b7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Validity
Not Before: Aug 8 15:00:38 2025 GMT
Not After : Aug 9 15:00:38 2025 GMT
Subject: CN=b720abab6573e7425209f61c341393e78ad36ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:00:2f:42:6a:4e:a1:01:8c:67:a4:5a:96:
41:d4:42:bc:27:d7:22:04:bd:43:25:e3:d5:8a:60:
0b:19:04:2f:3c:9e:80:c4:aa:50:f5:2f:9e:87:bd:
49:1c:37:c1:61:80:e9:3b:46:73:ed:e1:a2:0c:24:
23:ca:5c:d6:e0:f8:87:3e:d9:95:48:6a:29:45:1f:
5f:27:9d:af:73:91:ff:19:e2:22:39:c3:2e:96:39:
4b:d2:26:bf:60:f7:cf:2d:c0:25:fc:e9:d2:85:b4:
4f:a3:60:c5:43:97:70:83:60:e2:e5:ee:c5:68:62:
13:e6:cf:ee:e4:2d:44:76:d8:d0:46:22:ab:d3:5f:
57:4f:71:d6:58:a4:57:aa:15:21:b3:75:a7:72:bd:
2b:a4:0b:e4:d3:0a:f4:bb:8f:4c:4a:37:33:af:e8:
a4:3e:cb:1a:7f:87:d9:5b:20:a7:bb:60:b6:12:e7:
ba:ad:1f:62:be:21:71:dd:8d:27:c0:f5:06:2a:5b:
1d:ef:38:bc:5b:6b:50:07:9f:09:a6:94:7b:eb:68:
9e:70:13:a5:c4:4b:ad:67:5c:34:d0:67:bf:f1:3c:
ed:09:6e:51:9c:5a:5b:a8:49:c9:c4:a5:a1:78:18:
d7:fa:91:6e:ae:a3:00:1b:13:92:89:f3:5c:6e:d1:
e4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:20:AB:AB:65:73:E7:42:52:09:F6:1C:34:13:93:E7:8A:D3:6C:E3
X509v3 Authority Key Identifier:
keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:43:75:26:99:8b:77:89:f9:72:2c:4b:66:5e:f5:03:f9:0c:
eb:7c:64:6e:1f:c1:31:74:e3:42:66:00:39:3d:b9:04:bc:b4:
a6:7c:06:b8:df:16:20:f1:33:1f:38:f8:16:60:28:71:06:93:
22:52:64:e3:e7:fb:0e:7f:57:2a:27:f5:6c:04:b8:87:35:50:
a2:3f:f8:57:67:08:70:59:c3:f0:ed:0e:a0:88:ed:74:3a:c3:
31:c3:50:46:e0:6c:5b:e9:65:22:0d:53:b5:17:eb:ea:d0:a6:
08:a9:33:4b:52:e0:fb:e3:cb:a5:eb:b6:93:99:66:11:2f:49:
ce:a8:44:d2:97:68:38:d5:9b:05:59:02:b6:00:13:92:62:c1:
79:ef:87:36:71:6b:3a:ed:6e:0c:a7:43:e4:c8:ea:bb:07:29:
f8:de:63:b4:a6:b7:7a:0f:25:cf:5f:6d:88:7d:4c:d0:d9:5c:
20:0d:b8:1e:72:fb:37:f1:a2:4e:d4:70:3c:c2:b0:61:d1:8c:
7a:7e:54:55:70:67:43:5a:2b:90:bd:56:24:81:b8:fb:e9:55:
3e:ef:e1:b7:a1:30:76:7e:1c:ee:bf:eb:79:8a:ed:c4:0e:46:
aa:d6:72:f8:05:5f:0a:5f:a0:18:6a:3d:56:1d:d4:4a:f0:08:
ca:90:80:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:19:34 2025 by rpki-client