Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
File: 59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json)
Hash identifier: h7pkoSDOfbRUgjnq0mWEwI088+hhgzgF6bzKljinzGE=
Subject key identifier: 59:34:6F:66:0A:2A:45:2B:33:9F:45:1E:FC:8A:8C:9B:56:C4:0B:13
Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Certificate serial: 01977FB1E1BCFBE6EA58D6162DE357395839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
Manifest number: 12B2
Signing time: Tue 17 Jun 2025 21:00:53 +0000
Manifest this update: Tue 17 Jun 2025 21:00:53 +0000
Manifest next update: Wed 18 Jun 2025 21:00:53 +0000
Files and hashes: 1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: 8JVM2gZ51u3Ezxl2DYlM7n+tQYNgI/2BDGlO3cE05k8=)
2: qetS73-OE2CSttiMvug0TDfkr54.roa (hash: f7CQ5AXCS66V7YOxpVoih8o6XmqrwIeswAWr26eRNls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:b1:e1:bc:fb:e6:ea:58:d6:16:2d:e3:57:39:58:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Validity
Not Before: Jun 17 21:00:53 2025 GMT
Not After : Jun 18 21:00:53 2025 GMT
Subject: CN=59346f660a2a452b339f451efc8a8c9b56c40b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:16:7b:a4:92:94:f3:25:eb:55:10:76:f7:22:
15:33:1b:71:d2:7b:ff:5f:b2:ec:10:59:9a:b2:af:
24:01:17:fe:ea:81:98:cb:6e:3d:b2:8d:b2:5b:8f:
07:65:af:4e:10:13:ca:66:1f:35:5f:b6:33:f8:8a:
be:12:3e:0a:e2:ba:1b:79:85:55:13:e4:63:ad:46:
27:a5:c9:5e:5b:ac:7c:5b:87:86:ec:c1:8d:a6:fe:
e0:fe:32:e1:ad:5c:c3:91:94:3e:6d:bc:73:84:86:
5d:6f:98:af:3d:29:00:10:48:e9:9e:d8:72:84:4a:
f1:cd:5a:7c:c8:38:de:c2:d6:89:fa:1b:6c:38:cf:
8c:21:71:7b:ef:32:da:e9:f5:a5:78:60:b1:2e:fd:
22:52:87:ab:4d:4a:45:5c:8d:73:27:2b:02:6e:04:
80:c7:4a:d2:b9:a5:5d:a8:e6:12:39:f6:18:a0:3b:
2c:d9:a5:49:8f:74:e8:19:65:48:a1:5e:e4:0d:31:
83:90:dc:6d:13:6e:44:1e:fc:b0:1d:ce:81:e5:d0:
f9:7e:78:c5:00:db:b3:de:b4:34:b0:c5:0b:34:bb:
cc:1c:17:a2:11:6f:8f:14:12:19:07:1d:15:44:21:
ca:a5:c6:34:63:78:4e:b3:ae:51:03:95:3a:94:68:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:34:6F:66:0A:2A:45:2B:33:9F:45:1E:FC:8A:8C:9B:56:C4:0B:13
X509v3 Authority Key Identifier:
keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7f:ae:84:37:d1:f6:5b:b0:4d:f4:65:df:d1:06:38:ca:e3:
24:a7:b1:23:34:72:6a:e0:c0:13:bb:bb:46:74:53:2d:10:16:
83:ea:f7:57:96:ad:e4:d1:fe:4f:d7:95:cf:df:1e:bb:0b:6c:
ac:fa:60:cd:bc:0f:4a:33:71:9f:e1:9b:c5:a3:be:7e:02:3f:
03:34:bb:cf:a8:33:9c:cf:89:66:f9:90:41:ab:09:33:98:9d:
c5:ce:a8:6f:55:e5:80:38:08:f3:17:f7:03:27:a7:f8:70:04:
c1:d0:a0:8e:d1:dc:50:09:20:84:d9:67:3a:c6:22:32:9e:cd:
f3:8f:f9:c6:66:a2:25:6f:44:3f:cc:9f:a0:68:a4:2e:65:c9:
42:b7:b5:4d:ef:2a:c4:2a:b9:93:aa:13:d9:e2:f7:92:79:a0:
f9:1a:a2:46:c9:56:85:52:1c:5d:7a:7a:bf:53:90:4c:cd:44:
50:3d:19:a1:b4:ae:37:c2:0c:a2:51:be:cb:fc:08:6c:b5:b1:
db:2a:17:71:01:28:f8:57:3b:c4:56:3f:cf:43:ea:f4:65:f8:
df:a8:be:dc:83:76:44:02:94:a6:12:b1:c0:1c:33:2d:53:84:
5d:a3:d0:1e:b8:be:93:4b:8e:02:ec:f6:30:0d:5a:96:c9:e3:
b9:d5:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:27:38 2025 by rpki-client