Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
File: 59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json)
Hash identifier: 67+knhuWM/eD3rUAtANbJeAUTS7OWTI4hkvkzLB+WpI=
Subject key identifier: 50:4F:5F:44:1C:89:20:46:91:52:C8:52:64:4A:A6:50:78:23:EE:AB
Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Certificate serial: 019A500778BD5D37AE487EEB755784ED53B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
Manifest number: 1427
Signing time: Tue 04 Nov 2025 18:00:58 +0000
Manifest this update: Tue 04 Nov 2025 18:00:58 +0000
Manifest next update: Wed 05 Nov 2025 18:00:58 +0000
Files and hashes: 1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: jWbw7jdc71bOZ++0W+tM4q24jdESsrJA9yZi8GUU6jI=)
2: qetS73-OE2CSttiMvug0TDfkr54.roa (hash: f7CQ5AXCS66V7YOxpVoih8o6XmqrwIeswAWr26eRNls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:78:bd:5d:37:ae:48:7e:eb:75:57:84:ed:53:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Validity
Not Before: Nov 4 18:00:58 2025 GMT
Not After : Nov 5 18:00:58 2025 GMT
Subject: CN=504f5f441c8920469152c852644aa6507823eeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:d4:57:2b:54:7f:6a:eb:fd:d1:67:7d:f1:
92:27:6f:9e:2d:4a:a8:8d:19:2c:2e:3d:6e:df:2e:
a1:bd:83:d0:bf:a5:be:77:cf:39:ef:c5:9d:9a:8c:
aa:fb:21:4c:35:24:95:4f:6a:a1:04:56:c8:bd:65:
99:59:4d:91:05:fe:97:fc:c8:5c:2a:d8:9e:4a:f5:
5d:89:f8:07:04:8b:68:9a:cc:4f:66:a3:d8:10:e3:
ff:c4:64:57:cc:c5:a7:b4:7a:18:db:23:b4:07:5e:
94:17:d5:08:32:9e:a3:db:81:b9:d4:83:b6:bf:e6:
30:24:0e:23:33:db:b0:4a:9e:14:ad:8e:58:68:ce:
11:85:3b:e7:92:82:a5:fd:08:ea:b5:a5:7a:f7:b1:
ce:59:e2:b8:da:71:51:11:86:18:7b:11:c9:2e:a7:
b7:20:43:9a:0f:29:33:42:b0:1b:cd:90:18:3d:fe:
50:dc:bc:b0:35:52:be:e4:98:c6:3c:a1:fc:a8:3e:
92:5f:dc:80:5d:51:e3:96:32:00:b6:24:a9:0c:50:
50:b5:61:21:10:b9:ad:72:b2:08:b3:03:e7:c9:29:
7c:5b:e2:d5:ce:06:cb:eb:c5:00:52:61:d0:6b:96:
d2:83:02:66:85:3c:bd:69:37:01:4a:d4:4e:55:f3:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4F:5F:44:1C:89:20:46:91:52:C8:52:64:4A:A6:50:78:23:EE:AB
X509v3 Authority Key Identifier:
keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9c:1e:2f:3d:c3:6c:ab:f8:08:3a:33:28:fa:7c:ae:d6:23:
3e:66:b2:ce:0b:94:15:41:b6:ad:05:04:bc:bb:d2:8b:a5:ac:
8f:e6:7a:62:03:52:0b:b5:ae:b3:0c:d8:5d:10:a7:3c:8e:be:
6f:19:ba:d2:a3:fa:af:ce:42:bd:ce:76:7f:59:e2:ba:86:eb:
9e:b4:1b:64:4a:1b:be:19:24:9b:32:bc:9c:67:13:34:8a:a4:
be:b5:78:f5:d5:03:5b:7e:66:45:a0:7b:6c:9d:14:f1:ee:43:
3e:48:bb:30:0e:51:fc:5c:43:21:ba:4d:48:79:98:5e:bc:94:
3c:08:89:bc:63:8a:22:d4:ab:ea:09:0b:6d:d2:f4:72:b5:59:
ea:61:4d:1d:ad:e3:db:72:9e:ce:eb:b2:25:99:57:a8:1b:73:
8e:7c:ba:d8:16:36:27:2c:ba:20:37:3d:cd:94:fb:ad:2c:36:
ce:76:5f:bf:83:91:b1:c0:53:81:2e:3a:e7:cd:7f:29:99:40:
fb:79:bc:89:78:a8:03:eb:24:bb:0f:25:ad:84:cc:c1:53:f3:
13:ee:0a:ee:2d:53:cc:4d:92:42:46:60:30:54:83:69:6a:15:
4e:44:5b:21:36:95:a8:5d:e7:32:52:45:90:e7:54:22:33:26:
95:d3:c8:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB3i9XTeuSH7rdVeE7VOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZDY4YTllYjg2YTgyNjRlOWRkYzMxMjI4NDliODBjYzM0
MmY1ZGMwHhcNMjUxMTA0MTgwMDU4WhcNMjUxMTA1MTgwMDU4WjAzMTEwLwYDVQQD
Eyg1MDRmNWY0NDFjODkyMDQ2OTE1MmM4NTI2NDRhYTY1MDc4MjNlZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjTUVytUf2rr/dFnffGSJ2+eLUqo
jRksLj1u3y6hvYPQv6W+d88578Wdmoyq+yFMNSSVT2qhBFbIvWWZWU2RBf6X/Mhc
KtieSvVdifgHBItomsxPZqPYEOP/xGRXzMWntHoY2yO0B16UF9UIMp6j24G51IO2
v+YwJA4jM9uwSp4UrY5YaM4RhTvnkoKl/QjqtaV697HOWeK42nFREYYYexHJLqe3
IEOaDykzQrAbzZAYPf5Q3LywNVK+5JjGPKH8qD6SX9yAXVHjljIAtiSpDFBQtWEh
ELmtcrIIswPnySl8W+LVzgbL68UAUmHQa5bSgwJmhTy9aTcBStROVfOw0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBPX0QciSBGkVLIUmRKplB4I+6rMB8GA1UdIwQY
MBaAFOfWip64aoJk6d3DEihJuAzDQvXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81NjVlYTEtMmEzNi00NDAzLTk0MWUt
ZjBkNDBmMDI5NjczLzEvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81NjVlYTEtMmEzNi00NDAzLTk0MWUtZjBkNDBmMDI5Njcz
LzEvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpweLz3D
bKv4CDozKPp8rtYjPmayzguUFUG2rQUEvLvSi6Wsj+Z6YgNSC7WuswzYXRCnPI6+
bxm60qP6r85Cvc52f1niuobrnrQbZEobvhkkmzK8nGcTNIqkvrV49dUDW35mRaB7
bJ0U8e5DPki7MA5R/FxDIbpNSHmYXryUPAiJvGOKItSr6gkLbdL0crVZ6mFNHa3j
23KezuuyJZlXqBtzjny62BY2Jyy6IDc9zZT7rSw2znZfv4ORscBTgS46581/KZlA
+3m8iXioA+skuw8lrYTMwVPzE+4K7i1TzE2SQkZgMFSDaWoVTkRbITaVqF3nMlJF
kOdUIjMmldPInw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:40 2025 by rpki-client