Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
File: i58lgoNRffGYWTiOE7rRrgJopfs.mft (raw, json)
Hash identifier: vOkfM1xyhwHmSG7SB8n6Uy2DePGyaXmfl5EWqp75dnw=
Subject key identifier: D8:45:5A:4C:3C:58:D2:58:47:D1:69:89:CE:43:F2:A2:0E:E6:C0:18
Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb
Certificate serial: 019A4D747F4665577E582561B6CC3CBF74B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:01:11 +0000
Manifest this update: Tue 04 Nov 2025 06:01:11 +0000
Manifest next update: Wed 05 Nov 2025 06:01:11 +0000
Files and hashes: 1: aUEo_6I1NIoEpJrfmKA_-34y2x4.roa (hash: qf/pPhy348tojuz4A7OR24KHAsQ8d6peWd65flxSoJ4=)
2: i58lgoNRffGYWTiOE7rRrgJopfs.crl (hash: 91Ck0cSJTdAIpF20nB9Z45f18oSVR4ywj/uMErG4gMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:7f:46:65:57:7e:58:25:61:b6:cc:3c:bf:74:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb
Validity
Not Before: Nov 4 06:01:11 2025 GMT
Not After : Nov 5 06:01:11 2025 GMT
Subject: CN=d8455a4c3c58d25847d16989ce43f2a20ee6c018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:05:97:f5:46:b3:b7:5c:ef:d6:f4:11:ff:f6:
14:26:32:4c:6c:63:dd:20:58:f5:c2:cc:42:de:a5:
d4:80:aa:8d:42:f4:67:78:71:ed:ca:cb:53:e1:fc:
8a:a7:a0:77:a9:65:68:ad:a1:e1:30:66:83:ac:54:
b8:0a:97:98:f0:c6:e8:35:b0:df:22:2b:25:c2:69:
4c:3d:4f:04:1a:b9:35:fa:77:cb:b6:c7:61:74:4b:
d4:6e:e7:35:66:d7:17:d8:96:3f:69:aa:e0:13:85:
3e:75:cb:59:18:f3:f9:bc:3d:b7:69:a9:29:1c:40:
d2:d9:a2:78:66:7e:e5:5e:95:2d:b5:84:d5:11:c7:
a9:7a:3e:6b:d4:3b:44:3c:e6:41:61:61:1b:f8:18:
d6:64:c2:33:73:cd:1f:08:4c:46:ca:74:59:53:a0:
2f:b5:fe:8d:f4:9d:be:4e:94:c8:65:14:aa:df:c6:
61:04:c8:e4:19:a6:a5:c8:fc:7f:ad:8d:63:15:bb:
69:12:ee:67:f7:a6:9f:a2:14:68:62:2c:ad:5a:b9:
b3:80:a7:18:e7:69:d0:86:8a:05:b2:b7:d1:bb:33:
bb:93:48:14:43:67:b5:56:a4:43:cb:18:c0:f3:69:
57:83:5c:25:24:d5:5f:23:b0:2f:2e:70:10:4a:af:
46:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:45:5A:4C:3C:58:D2:58:47:D1:69:89:CE:43:F2:A2:0E:E6:C0:18
X509v3 Authority Key Identifier:
keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fa:6e:82:16:a7:4e:14:70:05:fc:39:8d:22:22:f6:b5:e7:
e9:43:28:c1:b2:e5:40:79:60:1e:ee:07:6c:71:c6:0e:80:01:
ba:00:4f:e7:13:73:cd:44:20:ee:c1:70:18:29:1c:4c:ba:c7:
93:f4:fe:0f:a7:7b:89:1a:94:ee:ab:cf:f3:57:34:52:02:49:
a7:f8:06:59:39:06:f8:ec:d8:5e:64:bc:e9:31:da:6f:01:30:
b2:f7:c4:c4:f7:53:82:31:67:a2:70:f3:94:39:be:8f:a2:40:
73:61:51:21:66:35:f4:22:54:f9:33:3d:f5:3d:bd:f6:f9:09:
30:61:4c:e6:69:30:d8:91:4f:ac:e4:9b:a8:62:73:36:ec:d9:
14:58:d5:e8:e3:08:d2:23:09:16:bc:84:55:61:6a:2c:fa:ee:
ca:bc:91:a2:9d:c1:2c:83:6a:60:ae:1b:7a:f6:01:0f:08:43:
35:dd:eb:ff:44:2b:5a:ec:d1:37:af:f2:dd:49:83:e1:ed:4b:
a1:95:37:5b:7d:ef:26:57:73:99:80:0f:c4:63:b5:12:4e:5c:
7c:30:44:fe:12:aa:6e:08:02:76:ca:7d:d8:f8:5f:66:48:cc:
76:2e:65:4f:db:15:07:90:9e:de:ec:a7:89:27:b0:61:23:a6:
79:15:60:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:02 2025 by rpki-client