Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
File: RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft (raw, json)
Hash identifier: vfwRHObOcBvhWqr9kBsYhmOT99CzKNbnitYn4UYcrfU=
Subject key identifier: 67:55:1F:0F:CB:57:D1:BB:39:F0:AB:76:39:BC:82:D5:99:D0:28:81
Authority key identifier: 45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA
Certificate issuer: /CN=45d58323e7d4f91c37297cd1926566033b3f8aba
Certificate serial: 019849D303ECEB10F85E2B64EC65409FF944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
Manifest number: 04EF
Signing time: Sun 27 Jul 2025 03:00:22 +0000
Manifest this update: Sun 27 Jul 2025 03:00:22 +0000
Manifest next update: Mon 28 Jul 2025 03:00:22 +0000
Files and hashes: 1: RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl (hash: 6WBwRIfTLOKOV1wWlwNY5Ce1Qp9pVOj/JCIm0QtL9JQ=)
2: vUZm6nnQuTxWv0zwrqYoRNaKsTM.roa (hash: Jd8FHgIjElXB18MWjUn4lp0g7hpzNeZ3zr50jxllMWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:03:ec:eb:10:f8:5e:2b:64:ec:65:40:9f:f9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d58323e7d4f91c37297cd1926566033b3f8aba
Validity
Not Before: Jul 27 03:00:22 2025 GMT
Not After : Jul 28 03:00:22 2025 GMT
Subject: CN=67551f0fcb57d1bb39f0ab7639bc82d599d02881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f4:5e:ee:69:3c:39:7a:e3:6a:be:04:42:0e:
5a:ef:49:cf:e9:0b:23:c0:5f:30:a3:7c:91:b3:07:
52:74:6f:ec:9c:cb:fd:a1:96:a4:7e:39:e5:d2:2f:
7b:61:ec:51:24:0b:55:1f:f2:20:ec:b6:8e:d5:9b:
e2:1c:da:6f:92:b6:d6:69:b1:4c:7e:2d:eb:9b:08:
5d:d8:5d:88:01:17:2d:3a:8f:4f:26:00:98:b9:5f:
65:98:6e:91:f2:c2:f7:34:3f:c8:d1:ac:64:49:62:
23:53:35:07:4f:3b:b5:c8:83:50:d5:ef:e2:ca:51:
ae:7a:11:52:ab:42:b7:b0:df:03:f7:4c:4e:26:73:
1c:42:2a:b8:5a:ba:f5:7e:8f:af:df:c9:a8:30:c0:
ab:0c:12:bf:37:0d:fa:36:ab:81:d7:1c:ab:f7:92:
79:94:f4:94:5e:f5:a3:bc:84:65:d6:ce:44:9e:b1:
45:52:70:d0:f9:85:3a:fc:67:4e:e8:3a:23:a7:c4:
3e:ff:a7:87:c1:eb:75:3a:41:97:7e:41:b8:11:0a:
09:82:95:e6:6b:0d:89:a8:af:35:85:32:b9:4b:9b:
6e:03:1b:94:60:73:eb:a0:8e:16:47:28:43:76:ab:
a4:26:16:b4:3e:89:84:0c:6b:c2:12:b3:54:3c:15:
99:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:55:1F:0F:CB:57:D1:BB:39:F0:AB:76:39:BC:82:D5:99:D0:28:81
X509v3 Authority Key Identifier:
keyid:45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d5:0b:bd:72:d6:48:04:8d:2b:bd:4b:fc:0d:c3:8e:6e:6a:
7b:02:0d:00:ba:93:9d:ee:b7:d0:6a:91:f5:62:14:aa:2c:ce:
e1:95:a0:e5:d9:09:3d:4e:61:18:1f:8e:2a:fe:37:3a:c5:ee:
14:8b:c7:f7:71:d2:d9:b9:73:c2:18:bf:32:a7:94:b4:94:ad:
3a:15:dc:83:8b:04:5a:b7:6b:e2:43:ae:c4:36:fa:23:6a:50:
59:70:56:6e:5a:20:11:8a:67:40:83:a5:b5:a2:d0:cc:63:db:
70:d3:85:e0:a6:63:a3:9a:1f:8d:a1:eb:b7:3c:12:e2:b7:f6:
a3:45:93:6b:62:2c:39:9c:cc:ca:f0:79:0b:68:87:81:58:ca:
5c:ff:b1:58:75:14:9a:48:73:10:da:fb:f5:f0:14:68:7a:48:
1f:33:13:7d:64:5e:ba:9d:2c:aa:78:10:80:56:c7:2f:49:26:
d2:2e:44:ae:db:6c:c5:06:aa:0b:34:d1:e0:f5:08:46:44:9b:
63:dd:2d:4e:22:1a:1b:fa:be:b4:df:e6:83:76:6b:fa:4a:b2:
11:a2:d8:48:bd:c7:f5:33:87:d9:14:c1:7e:ca:69:b0:d9:c2:
24:c9:eb:80:11:98:01:7c:c8:26:c2:68:92:50:69:0b:54:05:
10:87:68:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0wPs6xD4Xitk7GVAn/lEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZDU4MzIzZTdkNGY5MWMzNzI5N2NkMTkyNjU2NjAzM2Iz
ZjhhYmEwHhcNMjUwNzI3MDMwMDIyWhcNMjUwNzI4MDMwMDIyWjAzMTEwLwYDVQQD
Eyg2NzU1MWYwZmNiNTdkMWJiMzlmMGFiNzYzOWJjODJkNTk5ZDAyODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PRe7mk8OXrjar4EQg5a70nP6Qsj
wF8wo3yRswdSdG/snMv9oZakfjnl0i97YexRJAtVH/Ig7LaO1ZviHNpvkrbWabFM
fi3rmwhd2F2IARctOo9PJgCYuV9lmG6R8sL3ND/I0axkSWIjUzUHTzu1yINQ1e/i
ylGuehFSq0K3sN8D90xOJnMcQiq4Wrr1fo+v38moMMCrDBK/Nw36NquB1xyr95J5
lPSUXvWjvIRl1s5EnrFFUnDQ+YU6/GdO6Dojp8Q+/6eHwet1OkGXfkG4EQoJgpXm
aw2JqK81hTK5S5tuAxuUYHProI4WRyhDdqukJha0PomEDGvCErNUPBWZiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdVHw/LV9G7OfCrdjm8gtWZ0CiBMB8GA1UdIwQY
MBaAFEXVgyPn1PkcNyl80ZJlZgM7P4q6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmRXREktZlUtUnczS1h6UmttVm1BenNfaXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lYzI4MzMtYmIwZi00OTI0LTg1MTct
ZjNkZjYxNzdhMmJiLzEvUmRXREktZlUtUnczS1h6UmttVm1BenNfaXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9lYzI4MzMtYmIwZi00OTI0LTg1MTctZjNkZjYxNzdhMmJi
LzEvUmRXREktZlUtUnczS1h6UmttVm1BenNfaXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdULvXLW
SASNK71L/A3Djm5qewINALqTne630GqR9WIUqizO4ZWg5dkJPU5hGB+OKv43OsXu
FIvH93HS2blzwhi/MqeUtJStOhXcg4sEWrdr4kOuxDb6I2pQWXBWblogEYpnQIOl
taLQzGPbcNOF4KZjo5ofjaHrtzwS4rf2o0WTa2IsOZzMyvB5C2iHgVjKXP+xWHUU
mkhzENr79fAUaHpIHzMTfWReup0sqngQgFbHL0km0i5ErttsxQaqCzTR4PUIRkSb
Y90tTiIaG/q+tN/mg3Zr+kqyEaLYSL3H9TOH2RTBfsppsNnCJMnrgBGYAXzIJsJo
klBpC1QFEIdoRw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:34 2025 by rpki-client