Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
File: c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft (raw, json)
Hash identifier: NoTEH1TlpGBdyIevuvOoACGPJSJo2QXHcubPCxPVrz8=
Subject key identifier: AD:3E:7B:2F:17:B4:C4:2F:29:97:32:17:53:B3:2B:EA:29:16:4F:73
Authority key identifier: 73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78
Certificate issuer: /CN=739f3ebcd26792b913c1dcb9941996e998f16078
Certificate serial: 019A503E1C8A42E4D6FB18828EA64AACDD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 19:00:38 +0000
Manifest this update: Tue 04 Nov 2025 19:00:38 +0000
Manifest next update: Wed 05 Nov 2025 19:00:38 +0000
Files and hashes: 1: 8ZSiBVB9h2VqcjNcGsXVM5lUjmI.roa (hash: hKEwzTFWQZO4iHIgYWy7xoBKPXgQqTPB0mui/ew+61o=)
2: c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl (hash: hfy21WDfb6gU24oBNGzf7PfiOcyN2R97UV/f3D11EEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:1c:8a:42:e4:d6:fb:18:82:8e:a6:4a:ac:dd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=739f3ebcd26792b913c1dcb9941996e998f16078
Validity
Not Before: Nov 4 19:00:38 2025 GMT
Not After : Nov 5 19:00:38 2025 GMT
Subject: CN=ad3e7b2f17b4c42f2997321753b32bea29164f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6a:f8:e0:0b:8f:f6:1a:c7:36:7f:d6:0f:d0:
bb:5e:a1:2d:05:7f:56:fb:27:63:5b:23:5d:b9:74:
24:d5:0d:50:20:26:f7:63:a2:6c:55:ad:3f:68:a6:
a8:a8:f7:5c:f4:e4:23:35:4a:df:9d:c9:6e:c7:f2:
c2:2f:ba:4e:d9:94:4f:e9:a7:c3:5d:33:d2:ae:5a:
89:d3:8d:06:88:40:7d:d7:b6:bb:4a:5f:09:21:07:
a6:51:7f:8b:7d:2c:bd:1f:67:52:22:b5:ac:35:d0:
4a:4e:24:eb:8b:56:7c:5e:a4:6e:b7:20:8c:57:c7:
5e:7a:fb:f4:8c:db:45:ea:7e:32:89:8b:78:39:9c:
e5:6a:0d:95:5b:92:7a:86:fa:4b:c9:6f:ef:5e:12:
06:50:24:1b:67:e9:b0:a8:18:76:1b:cc:7d:60:2e:
54:2c:1b:19:5d:27:c5:6c:e1:e1:08:c1:0c:40:13:
15:68:d5:7e:ff:9f:c9:f6:a0:67:c3:c1:19:8b:5c:
ce:7c:46:7c:11:ab:fb:de:ca:42:86:7a:e7:b4:35:
c7:a5:f4:0e:11:b3:b7:1a:1c:2a:af:51:1f:4b:f8:
11:9f:1a:6c:21:e0:3c:98:79:6a:0e:2c:aa:f7:fc:
d1:27:d8:66:03:2e:86:f2:a2:34:03:52:7d:64:3c:
9a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3E:7B:2F:17:B4:C4:2F:29:97:32:17:53:B3:2B:EA:29:16:4F:73
X509v3 Authority Key Identifier:
keyid:73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:43:11:66:3e:c8:2c:8f:9a:11:e5:80:87:01:e9:d9:92:27:
8c:77:73:91:b7:4b:59:00:39:7c:ab:fb:c1:d0:04:30:61:f1:
ba:8f:ee:3f:d5:17:9f:5e:0d:0d:4e:11:b7:ee:ad:d5:8b:f3:
98:5f:08:6a:82:6b:ce:0c:7b:2a:0c:27:ef:a9:19:b7:96:7f:
12:87:60:13:cc:d0:9e:0e:9a:e4:52:3d:c8:73:99:cb:a1:1b:
30:1b:f1:71:b2:a5:b2:37:0b:dc:6b:9f:06:13:3e:7f:35:aa:
80:65:97:19:5b:fd:f0:72:16:e8:43:97:9b:35:8e:db:4a:02:
3d:05:09:37:24:aa:fc:90:36:13:a9:95:87:4c:37:db:f7:f6:
55:5e:29:e9:30:33:91:a4:d0:35:93:da:1b:be:11:55:ea:80:
5f:3c:18:8d:f0:f3:ad:63:54:63:f6:a1:35:a1:66:c6:af:14:
e5:12:7c:76:eb:64:03:31:58:c7:f3:dd:37:f1:a6:1e:fd:07:
7c:d9:b9:47:7f:3c:98:5e:11:9a:9d:f0:d0:05:5c:9e:a7:af:
7d:0c:50:22:ab:b0:71:36:6b:23:d0:4e:11:23:a0:cb:08:82:
61:e2:d2:1c:f0:52:c6:24:c9:47:47:f6:55:c9:cf:04:dd:49:
2d:bc:b2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:55:36 2025 by rpki-client