Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
File: 58NBW98cAUrhwY58_TPFbwGP7ug.mft (raw, json)
Hash identifier: Thgi47rdAx7MS1LaEwMkgql4Whl3i6je4DYl4SsHmrA=
Subject key identifier: 01:91:15:E6:16:55:9E:6A:48:77:B6:B0:CB:31:E3:85:9C:C6:4B:12
Authority key identifier: E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
Certificate issuer: /CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Certificate serial: 019A52D182E997C6344B10F9095B2642E4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
Manifest number: 16A3
Signing time: Wed 05 Nov 2025 07:00:53 +0000
Manifest this update: Wed 05 Nov 2025 07:00:53 +0000
Manifest next update: Thu 06 Nov 2025 07:00:53 +0000
Files and hashes: 1: 58NBW98cAUrhwY58_TPFbwGP7ug.crl (hash: MmVILHuhZriufNEI4mQqYUgpWWYPH689TUsB8yRyXnc=)
2: FiCeY_mBEBLBRbL14JMQjW_TEpQ.roa (hash: zmpLfs/691bdiYAVSZTFtEj2DvlsbiXT1z8hvns9wAo=)
3: k2bRbV7XqonRIs_2mgDBoumLm0U.roa (hash: qpwrCsvOi/cGB44FbKJwNJnBf33OxmuWQYiUCXxF50I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:82:e9:97:c6:34:4b:10:f9:09:5b:26:42:e4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Validity
Not Before: Nov 5 07:00:53 2025 GMT
Not After : Nov 6 07:00:53 2025 GMT
Subject: CN=019115e616559e6a4877b6b0cb31e3859cc64b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:32:78:2f:69:5c:55:40:4a:9e:0e:0b:26:
04:cb:b1:dc:39:9d:4a:69:99:1c:19:6b:ec:46:23:
4d:a4:fd:ce:4c:fa:fa:c4:e4:15:d4:8f:b7:00:1c:
72:32:b6:9e:d3:d6:a1:8c:3a:c8:69:91:f4:c5:13:
3d:bb:b6:5c:3d:b6:90:fe:26:d1:ab:9f:f9:6e:57:
7f:29:a6:1b:e2:20:cb:85:ae:99:1d:03:67:53:70:
96:55:e3:33:76:67:58:2e:6e:a1:aa:11:43:a9:2c:
a7:e6:a2:cd:d2:00:45:d7:10:a0:db:39:53:ba:62:
dc:4d:ef:0e:22:c1:f8:cf:a4:18:8b:c6:4f:51:7d:
e4:c8:8b:f3:8a:75:a8:5b:79:c4:64:ff:a5:a8:2c:
1f:da:a0:71:55:c4:f4:f6:70:3e:5b:40:cc:a5:8e:
98:63:f9:02:4b:27:5f:85:aa:4e:31:4c:69:7c:ac:
ac:16:ce:0b:d0:e9:85:cb:80:54:64:0b:83:6b:13:
7f:7e:a4:0d:1e:b9:65:1d:d0:3d:cf:a3:d7:c1:ea:
57:03:f4:53:d2:4c:c2:fb:64:bc:ab:7c:65:26:71:
4e:65:9e:ee:07:a9:aa:d0:d8:df:d1:ac:4d:b3:3e:
b9:94:c7:28:de:03:4d:59:e0:61:e6:76:34:7d:8a:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:91:15:E6:16:55:9E:6A:48:77:B6:B0:CB:31:E3:85:9C:C6:4B:12
X509v3 Authority Key Identifier:
keyid:E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b0:90:4d:fc:d4:ca:01:e8:ca:f0:44:a3:9e:8b:23:12:39:
ca:d6:5c:33:2b:51:5b:ad:06:cf:d4:03:d3:ea:54:78:50:40:
b5:ea:c5:dc:bc:a5:36:c2:18:e8:a2:c5:b4:c0:3e:c1:a0:b3:
56:f6:1f:84:0d:05:b6:69:ca:09:72:11:1d:89:fb:b4:0a:15:
53:04:aa:d1:15:ad:b4:2f:b8:21:4c:b9:0d:00:00:de:5d:71:
e1:ba:39:d3:cc:c7:54:7b:f1:dd:c6:d5:8b:58:ef:6c:cc:c6:
c7:cb:d6:3f:4f:b8:b9:00:76:cd:0f:32:ef:6f:41:3a:03:0c:
77:f9:56:c3:7a:47:6d:f7:f4:be:f2:10:76:e2:04:93:e6:c0:
c6:0a:b8:a6:4c:46:36:4d:1b:cd:42:07:26:ec:ba:9c:72:90:
cc:88:7c:cd:cf:2d:e5:8d:44:3f:9b:27:be:d9:5b:44:cb:02:
d9:be:93:39:5d:64:da:66:50:24:55:3a:26:73:cf:de:bc:6b:
de:3e:39:34:5d:03:f0:3a:26:54:41:3f:57:9f:6e:8a:74:8e:
a3:dc:8c:41:e3:d7:53:5a:fb:31:d2:60:b7:8a:39:04:8d:f7:
91:05:54:6c:d8:a2:71:c4:ef:a5:6e:dd:ee:12:a9:32:d8:5f:
ed:f2:dd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:07:01 2025 by rpki-client