Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
File: 45WAim89Q2FJAcmQyc5jLhXt-gc.mft (raw, json)
Hash identifier: 8K2FQ9rOwySxRdudMjc9BjxbzIY1Kvx+vE8HGHsloGU=
Subject key identifier: A2:59:9C:52:E0:A4:C0:83:62:E6:55:30:9D:8E:02:D3:62:71:8F:44
Authority key identifier: E3:95:80:8A:6F:3D:43:61:49:01:C9:90:C9:CE:63:2E:15:ED:FA:07
Certificate issuer: /CN=e395808a6f3d43614901c990c9ce632e15edfa07
Certificate serial: 0198534480FDD2386EE7876DAFCF37933B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
Manifest number: 045E
Signing time: Mon 28 Jul 2025 23:00:55 +0000
Manifest this update: Mon 28 Jul 2025 23:00:55 +0000
Manifest next update: Tue 29 Jul 2025 23:00:55 +0000
Files and hashes: 1: 45WAim89Q2FJAcmQyc5jLhXt-gc.crl (hash: v0hBS/V1dug72yy5yZxXcZPbfYsmS6tDeuRvdVhCQBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:80:fd:d2:38:6e:e7:87:6d:af:cf:37:93:3b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e395808a6f3d43614901c990c9ce632e15edfa07
Validity
Not Before: Jul 28 23:00:55 2025 GMT
Not After : Jul 29 23:00:55 2025 GMT
Subject: CN=a2599c52e0a4c08362e655309d8e02d362718f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:6a:3f:69:24:91:1c:b1:66:00:f4:72:90:
fc:80:e2:1b:27:a5:73:04:fd:0f:ae:ec:06:12:67:
c0:2f:6c:4c:13:b4:64:a0:05:11:d3:3a:9e:c4:c7:
94:25:7c:f3:7f:04:49:49:84:a1:87:a7:89:cb:2b:
12:21:1a:f7:5a:28:8b:3f:f8:53:f9:a4:ad:eb:0f:
22:fd:ea:6c:b7:5f:25:92:c9:0d:ce:70:b9:62:62:
a2:b7:63:83:ca:3c:7d:14:34:d7:de:8b:2d:14:4f:
a4:f3:79:f6:51:c5:26:60:c4:f7:1b:6f:af:ef:2c:
19:bb:f1:12:b4:dd:e3:21:2b:3e:7a:43:e7:4b:82:
f8:8f:67:24:0e:06:5d:90:61:55:dd:7f:02:8b:54:
50:b2:bc:1d:bb:71:ec:33:14:39:b0:c3:f9:76:d7:
63:88:75:c3:d2:66:d1:6c:98:89:a3:31:39:81:13:
17:90:b8:df:2b:8e:e1:b6:2d:b7:b3:bf:e1:66:a7:
b0:88:9c:64:be:20:f2:7d:d5:01:e0:8c:97:c3:11:
54:f6:15:95:93:05:ea:ba:42:24:77:c4:24:ff:e2:
b0:0b:ce:cf:36:1e:20:cb:39:9d:93:ec:e6:13:f0:
ac:96:9c:5c:6e:90:ae:d8:66:50:89:a1:28:2c:6c:
86:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:59:9C:52:E0:A4:C0:83:62:E6:55:30:9D:8E:02:D3:62:71:8F:44
X509v3 Authority Key Identifier:
keyid:E3:95:80:8A:6F:3D:43:61:49:01:C9:90:C9:CE:63:2E:15:ED:FA:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6d:3b:50:fd:c1:90:01:79:55:63:66:64:87:96:e8:a2:b5:
e3:34:b7:21:1b:e8:c4:f0:3c:f4:f4:a4:c1:9b:34:aa:d5:46:
85:8f:d6:1d:23:42:46:aa:a1:bd:a9:70:97:e0:4c:2a:f6:d2:
c4:c0:b6:b8:85:0e:bd:f2:f4:85:1e:03:45:35:67:82:dd:39:
12:7d:35:60:c2:7b:ca:cb:7f:3f:c6:61:c1:30:b9:ca:25:96:
5a:b3:4a:ee:37:0f:59:81:5c:fc:14:fe:0a:b7:43:75:bf:69:
75:f4:40:1e:cb:97:41:c9:cf:0e:b8:a1:38:1c:1b:df:1c:9e:
aa:c9:b1:d4:c4:ca:9a:6f:d4:75:1d:55:34:73:99:2d:4e:e6:
e8:40:4a:0f:0c:f2:10:13:aa:fe:5f:ef:a7:37:07:7e:2c:5c:
19:9a:3b:f2:39:f3:70:1a:3e:24:e1:3c:2b:f0:55:92:91:49:
4c:45:4f:73:57:ef:2f:db:05:fd:c4:de:2e:ef:69:31:53:94:
7f:4e:7f:90:43:56:79:e9:79:f8:38:02:b2:a5:91:6e:1a:08:
ac:ad:3f:cf:28:a5:f1:6c:05:f6:20:32:9e:43:e4:f4:cd:c9:
f6:e7:78:3e:bf:66:b7:c8:e2:5a:ce:40:28:5c:80:c8:0c:ca:
be:a0:d5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:18:36 2025 by rpki-client