Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
File: ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json)
Hash identifier: sE4lRaWpTh/Ul71C9znasDbK8O/QDFvl7a2DHEl1/0c=
Subject key identifier: 90:30:1E:8A:7F:82:35:29:A1:E0:B2:44:31:C8:DA:FC:63:04:1C:2B
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 019833824F4BFE02CE409E24A713A173F825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
Manifest number: 15F7
Signing time: Tue 22 Jul 2025 19:00:34 +0000
Manifest this update: Tue 22 Jul 2025 19:00:34 +0000
Manifest next update: Wed 23 Jul 2025 19:00:34 +0000
Files and hashes: 1: Da5ukIODRFZkZgl7acW52LzBL34.roa (hash: 2S0h0c/tsGIJ57Pr+A8pwZxQY2/WXek+xC9ZKTvhbzU=)
2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: 41AOrOPsdKGBjQ+UKDn7l1K7xkTzrYfSVm1HF0Ah1PU=)
3: Z45rQavEcQTf3vGUVM_AgWAXCn4.roa (hash: q7JvLSO411WbeIPtlyaZvnsbtnUZIYteyAyCawxKvzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:82:4f:4b:fe:02:ce:40:9e:24:a7:13:a1:73:f8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Jul 22 19:00:34 2025 GMT
Not After : Jul 23 19:00:34 2025 GMT
Subject: CN=90301e8a7f823529a1e0b24431c8dafc63041c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:14:4e:a2:39:f1:7e:be:ba:55:0a:9d:97:
15:8d:80:6a:d9:fb:71:be:ff:02:25:ab:58:48:62:
09:64:af:13:ad:fe:5a:90:d5:57:f3:03:d0:ce:a8:
be:7c:70:4b:8d:91:32:9a:68:31:b3:36:4e:f3:09:
96:11:fa:31:7a:a3:73:f1:6e:ac:22:31:0a:32:f0:
6a:72:69:f7:f3:de:e4:83:b2:7c:9e:94:6c:f3:f4:
18:71:16:4b:54:07:3a:66:20:92:a2:25:34:6d:2e:
03:07:c6:ed:c6:63:79:d1:b0:c4:80:8a:22:83:4a:
93:01:01:1f:c7:df:79:81:a2:7e:c9:20:45:52:26:
dc:6b:c0:f1:f7:dd:25:95:b1:cb:8c:9d:62:a8:e4:
ec:ea:4c:9e:b1:9f:64:4e:4a:dd:74:cc:53:90:9b:
b0:1d:43:1c:4e:07:ed:e3:34:cc:b4:65:4a:e8:c3:
b6:d6:65:9f:21:c6:10:f3:6b:fa:ac:48:7d:6e:38:
eb:57:6b:f2:36:9f:17:af:cc:97:32:b7:7c:a6:2a:
60:96:7c:b3:d0:92:e3:da:3a:20:56:01:c4:a8:cf:
71:d6:7f:25:8f:db:7a:28:f9:9a:23:65:29:57:8e:
aa:03:e2:1f:02:6f:62:e3:ab:cd:d3:4f:06:e8:70:
2c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:30:1E:8A:7F:82:35:29:A1:E0:B2:44:31:C8:DA:FC:63:04:1C:2B
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:66:84:9a:fd:a8:9e:83:5f:01:74:82:89:7c:94:54:1d:d5:
35:6a:59:e3:7a:e4:8d:3d:1e:a9:d9:39:bf:83:43:d3:79:ef:
72:2b:a8:5f:6a:6b:b1:e5:e0:39:a4:59:40:0d:53:13:d3:75:
4b:be:49:ae:fe:3a:5c:10:dd:3b:b5:12:05:51:4b:67:f7:85:
84:6a:c3:fa:4c:ba:86:1e:8a:bb:2a:a1:39:4c:3a:fb:58:1d:
0c:6a:6e:d2:36:07:a8:84:92:b7:3f:8f:5c:5e:23:53:22:d2:
46:8b:ea:e4:61:c5:0f:8e:69:06:81:b3:1d:e4:ee:5f:45:69:
db:85:ae:f7:19:68:50:7e:aa:c6:14:b6:5e:79:6d:b4:8d:0b:
08:d2:6d:1a:e7:36:c8:65:74:60:c1:30:0a:1b:4a:e4:b0:9b:
52:63:be:7f:a7:16:4c:2f:4c:8b:48:90:0e:a1:4c:24:76:c6:
73:ad:4f:b1:19:df:f1:5c:90:56:bb:f4:5d:64:04:2e:cc:bc:
5e:10:a1:c1:89:a1:f8:0d:95:2c:b0:e1:76:13:aa:ef:93:d4:
db:d5:5b:fd:52:e7:ff:ac:b0:a1:42:07:c1:d6:65:59:70:a0:
81:2b:63:94:ab:a2:b4:39:54:18:3e:14:9f:1e:0b:6b:74:fa:
0c:bd:7e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:23:05 2025 by rpki-client