Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
File: 59PkY_EcytBV0WYuAIwqlPQt6d4.mft (raw, json)
Hash identifier: hNk2G5xusWSxH7PUUZ9EfBbYhK05YfDChbd2gKjwGig=
Subject key identifier: 4C:01:9B:F3:30:F7:B2:D3:AC:31:5D:CE:3A:5F:C5:82:F8:B5:37:29
Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
Certificate issuer: /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Certificate serial: 019A530808988D0CE05C66B1A13FA229B307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
Manifest number: 1554
Signing time: Wed 05 Nov 2025 08:00:26 +0000
Manifest this update: Wed 05 Nov 2025 08:00:26 +0000
Manifest next update: Thu 06 Nov 2025 08:00:26 +0000
Files and hashes: 1: 1-mxTaqS9jnMIVzPA52AOuEvFZm4.roa (hash: 1RjRiQMb+qYiL+Zpi5jDEokqMnjDRUg4dGO0fKP7lfA=)
2: 59PkY_EcytBV0WYuAIwqlPQt6d4.crl (hash: jXvA4Y6gs4JbAibadZwGf0XOTYNiKfOhN9UBLd/IMhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:08:98:8d:0c:e0:5c:66:b1:a1:3f:a2:29:b3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Validity
Not Before: Nov 5 08:00:26 2025 GMT
Not After : Nov 6 08:00:26 2025 GMT
Subject: CN=4c019bf330f7b2d3ac315dce3a5fc582f8b53729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:78:5e:eb:fd:4a:d2:88:3d:77:8f:7e:08:
01:98:66:7f:59:cc:58:d7:e3:65:a3:79:06:cd:75:
9f:ab:d6:6f:03:4c:c0:62:9a:1d:c3:56:a0:03:2c:
68:4c:97:2b:f8:f5:b4:31:93:7c:e4:7b:97:08:99:
4f:cf:fe:6d:db:7d:d8:cd:3b:7b:e7:f8:7a:23:ff:
4c:86:0c:55:26:1d:fe:2b:ec:73:08:ae:2c:e9:86:
43:a0:5a:86:cd:0f:08:b8:8a:51:57:fa:d2:4d:52:
8f:54:b6:0e:9d:3f:91:65:7f:d7:a3:43:a9:87:0c:
5c:c9:9f:c6:f5:90:79:3c:57:e4:76:06:b1:e9:7e:
1b:53:56:29:1e:16:82:90:c5:28:f1:5f:21:25:2e:
50:e8:c7:6b:9c:09:62:4c:00:17:c2:d8:ef:5d:21:
87:d4:69:c6:88:4d:25:42:7c:86:cd:bb:98:99:f4:
88:a2:d6:3c:de:03:8a:c4:df:e5:22:e5:47:01:ac:
e8:f8:a0:f1:e5:d6:06:10:5a:77:2c:6d:de:28:0b:
45:97:27:6f:ff:0a:66:00:f2:42:e5:2f:13:f5:19:
c4:60:e8:06:ae:67:42:dc:40:37:e8:7f:91:5b:04:
74:8d:25:df:e1:17:c2:e0:92:0f:2c:37:f5:2d:f2:
5d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:01:9B:F3:30:F7:B2:D3:AC:31:5D:CE:3A:5F:C5:82:F8:B5:37:29
X509v3 Authority Key Identifier:
keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e6:c0:bc:81:90:fd:6c:86:2f:ad:47:85:ac:89:38:3b:55:
ed:e9:2e:61:1e:70:17:35:00:39:e7:89:84:bb:7b:50:d2:92:
5a:ad:bd:31:50:97:dc:e0:9a:89:85:99:96:13:9e:67:f7:fe:
ca:fc:e3:34:5c:63:05:96:c6:b0:96:39:e4:d1:f8:8d:29:4f:
26:68:0c:c7:1e:a7:53:bc:d9:2b:1e:5c:28:e1:2f:b4:89:10:
9a:c8:d4:06:7d:40:9a:51:c8:9b:4e:7d:6d:c0:3d:9c:a5:32:
24:9e:18:61:66:f0:1a:fd:ab:1f:8b:7a:36:26:ce:fa:cb:33:
5f:47:04:c5:43:6f:e1:4e:a5:fc:07:2c:cc:1a:b1:b9:67:fb:
37:1b:40:20:13:19:3a:bd:40:2e:9a:3b:3c:d1:0f:6f:57:08:
02:bd:5d:e9:47:91:d9:01:70:b1:24:06:a2:70:cb:bc:c3:a4:
ac:75:b4:96:df:3c:6d:cc:cd:4f:e4:e2:b8:2f:21:d7:56:0c:
2a:3d:fb:f8:ba:02:ff:2d:f0:14:3d:05:98:2b:f5:75:23:91:
71:e5:ba:ab:23:5d:ad:b1:fc:16:3d:e5:43:94:45:f5:f9:2a:
b1:65:1a:8e:37:19:c5:ee:4a:73:19:e6:ad:9e:28:c3:a9:cf:
13:62:a5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:08:22 2025 by rpki-client