Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
File: 58fsjXgFA9t8q8sUHWuZHNAppqI.mft (raw, json)
Hash identifier: 4LDrfttm771MoZ17uSz2xjFzL8zaG7AvolxHOmtzyso=
Subject key identifier: 1C:34:8A:47:69:04:6F:52:24:C4:04:22:24:27:D4:99:F0:5E:C5:43
Authority key identifier: E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2
Certificate issuer: /CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
Certificate serial: 019A4DAAE2571F297DA3841D833009746163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
Manifest number: 1107
Signing time: Tue 04 Nov 2025 07:00:35 +0000
Manifest this update: Tue 04 Nov 2025 07:00:35 +0000
Manifest next update: Wed 05 Nov 2025 07:00:35 +0000
Files and hashes: 1: 58fsjXgFA9t8q8sUHWuZHNAppqI.crl (hash: /SunQnB+SMbl9TmGo2m4hsJquYtQtFrVhGEQHeN7ZLk=)
2: Gr2bTac37FdQF97pGkH13J5M8LQ.roa (hash: oaatGmufJtltyljxjCY0yrTcOMqVjEXZ2p4QbghN278=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:e2:57:1f:29:7d:a3:84:1d:83:30:09:74:61:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
Validity
Not Before: Nov 4 07:00:35 2025 GMT
Not After : Nov 5 07:00:35 2025 GMT
Subject: CN=1c348a4769046f5224c404222427d499f05ec543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4d:75:b7:6d:af:f8:fd:53:e2:6f:d1:08:d9:
70:8f:c0:fb:17:89:6b:83:16:0f:27:e8:55:38:b4:
c8:60:76:34:d0:75:00:44:3b:34:38:53:d9:e9:d2:
f1:9d:2b:9c:e6:66:0e:73:2e:e2:07:31:8f:4a:cf:
99:20:bd:f0:83:1a:bb:a5:03:a2:f0:95:37:39:47:
52:79:15:5c:7e:da:20:d8:60:6d:38:bb:83:7e:f6:
8c:31:97:29:f6:c4:a0:c8:1a:b4:80:64:64:fd:09:
b3:08:9d:ae:8c:e0:3d:bf:12:1f:08:92:36:0a:94:
a6:08:f8:08:0b:8d:61:ba:52:45:37:03:39:de:14:
b9:b0:9f:ea:1d:87:bc:57:ae:ad:f3:50:bb:4e:78:
ac:d6:5f:02:f6:96:4d:f6:c6:cf:a2:44:00:db:b2:
f4:54:99:77:bf:a0:bd:0b:a6:8c:93:c0:95:85:22:
b5:cf:39:6c:9f:1d:8e:6a:54:ab:eb:1e:0b:5d:2c:
21:34:2e:66:e3:55:e3:55:99:27:ad:3f:a0:f8:7a:
c0:c8:71:c9:52:bf:14:7b:29:e6:84:c5:bc:5b:22:
15:26:2b:a5:03:37:e1:36:05:f1:36:d0:dc:42:9b:
bf:9a:2a:d5:e3:aa:f2:6b:68:d7:14:70:87:10:ec:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:34:8A:47:69:04:6F:52:24:C4:04:22:24:27:D4:99:F0:5E:C5:43
X509v3 Authority Key Identifier:
keyid:E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7f:4a:19:a6:ee:37:4d:43:ac:a9:54:47:71:20:e8:d6:3f:
91:b7:3c:d3:d3:5d:35:d1:27:9e:8e:5a:93:6f:03:ba:4f:83:
c4:9e:aa:e8:a5:26:b6:af:4b:2d:fb:7d:8e:33:c9:02:6d:ee:
43:fe:e8:e5:58:0a:ad:ae:b4:62:f4:50:a5:50:10:48:8a:01:
fb:11:ca:7c:84:11:c3:93:fd:41:93:93:4d:70:18:3b:27:81:
47:c7:c9:60:85:a7:5f:99:1f:f0:0c:1d:de:12:b1:89:ae:0b:
4e:b8:50:dd:01:51:d1:11:71:aa:48:1c:03:ee:a8:d4:00:d4:
98:87:01:51:bc:87:ec:07:af:b9:ae:cc:2d:e4:f8:21:fd:9f:
bc:b1:b2:d0:25:f5:e2:4b:b5:a4:66:aa:e6:fb:a5:c4:13:7a:
9c:5d:20:10:57:bb:e0:f4:8d:5f:fa:cf:3c:9f:74:71:7b:3e:
bc:7b:fc:33:bc:55:a9:bc:3f:53:42:75:8c:ed:72:2d:6d:73:
5d:b7:17:54:68:e6:7f:4e:51:16:49:5b:ae:6e:e1:4a:aa:b2:
a9:39:1d:2f:5e:df:63:59:d8:6d:98:99:5d:d1:f5:9b:18:91:
78:ec:96:39:fc:fd:ef:f9:90:ef:4f:bb:2e:2a:30:a3:19:0d:
7a:1a:6b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:09 2025 by rpki-client