
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier: FZpJrVBKkKt2XWeGCebsEJr412ysfpckN9I33QCZsQc=
Subject key identifier: 59:66:EA:75:02:A6:D5:67:53:51:F3:35:61:5D:CF:62:A5:E4:E8:BF
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer: /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial: 019848C0297A8AC3BDA0195D2785C3F4C00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number: 010B
Signing time: Sat 26 Jul 2025 22:00:09 +0000
Manifest this update: Sat 26 Jul 2025 22:00:09 +0000
Manifest next update: Sun 27 Jul 2025 22:00:09 +0000
Files and hashes: 1: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: P9WJ5SUZsfuQOS7EwAoFtUMdLDX1dwLsDb586Eg+CSs=)
2: UFEpRGmmgSxI-Cj4mUoULnogLh0.roa (hash: uynyMnukvUhaVDa9YBwkcCoinwLXAu+vAC1b07ExVN4=)
3: mIeWrCvH_vi6WIO4Abqw0wSZ9wE.roa (hash: UEuZfid3mOqO0N/4zAUnn5LYhUgHF25ZTPMwLRC0oAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:29:7a:8a:c3:bd:a0:19:5d:27:85:c3:f4:c0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Validity
Not Before: Jul 26 22:00:09 2025 GMT
Not After : Jul 27 22:00:09 2025 GMT
Subject: CN=5966ea7502a6d5675351f335615dcf62a5e4e8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:cc:3e:6b:a5:33:56:97:fe:33:0f:72:bb:
4d:3f:ec:2c:86:f6:e3:04:ae:0b:3d:ff:a3:8a:07:
b7:04:73:17:fc:14:b5:1f:72:4b:0b:ed:e2:fc:a6:
87:2a:c6:c2:6b:ff:38:32:4a:71:d5:dc:e7:8b:9b:
7b:6b:f4:30:22:ce:8c:92:29:64:c5:6f:28:2d:d5:
ff:fd:5e:69:50:f9:f5:9c:44:8f:b1:e6:16:41:b6:
52:06:fe:05:42:42:ca:d8:ba:7c:94:96:69:d0:6e:
18:52:33:9f:15:9f:c9:91:4d:37:fb:27:7a:d0:70:
11:32:49:8c:fd:08:71:3f:a8:9d:74:84:df:01:c8:
a5:8b:ca:a0:a5:ac:cb:ab:8e:a0:77:23:48:db:3a:
68:2a:b3:ab:b4:1a:ab:6d:17:d0:53:eb:4d:36:9e:
a4:61:05:67:de:b6:e0:3d:a1:f2:2f:49:00:02:44:
4b:6e:94:a3:ba:46:c2:12:ef:86:15:96:9a:d0:6b:
ab:c3:e6:2f:5a:61:d9:f3:ab:23:fc:96:78:d3:6c:
c2:c2:97:6b:f6:82:c2:52:37:e9:c4:ea:49:de:55:
5d:57:81:5d:30:61:fd:49:2f:32:bf:53:d0:3a:36:
f9:b7:6c:36:1d:84:20:14:fd:7a:3d:60:92:24:bc:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:66:EA:75:02:A6:D5:67:53:51:F3:35:61:5D:CF:62:A5:E4:E8:BF
X509v3 Authority Key Identifier:
keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9c:ed:a8:de:1a:0b:e2:11:f0:a4:da:8f:79:6e:a4:1d:40:
a9:06:98:3b:68:7a:da:3b:1a:bb:89:29:4f:d0:13:f3:f6:0f:
29:33:2b:39:80:6c:a2:29:ca:3b:82:d8:11:97:24:d6:60:6c:
c7:83:f3:ef:05:df:09:43:39:85:b5:61:e7:d6:3b:4b:5d:b2:
a3:4b:db:97:22:3d:90:67:48:1a:05:f1:fc:ee:bc:d9:66:15:
c6:d1:ab:76:e3:dc:40:f5:ba:82:fb:ee:15:58:3c:85:e7:dd:
18:f5:72:e1:b6:fc:c2:db:29:b2:69:ba:03:80:5b:48:10:0d:
a6:61:ad:67:a1:ed:ea:d8:c0:76:18:f6:4a:9d:d3:d6:df:6c:
44:cb:3f:aa:63:9d:63:ac:6f:88:9d:18:6c:39:9f:d5:73:b1:
0a:8e:75:97:11:1f:8e:ce:03:f7:06:7e:9a:6c:ed:f5:3e:10:
9e:0d:bd:2c:22:ee:79:e8:1e:15:dc:2e:1e:82:0a:36:12:10:
95:75:8f:a2:23:4d:90:d3:45:69:11:dc:a0:cc:d3:4a:f7:d9:
45:eb:f9:78:27:a3:6a:cb:56:14:7f:e7:b9:0d:20:8b:a7:b3:
9e:69:7c:08:48:06:d2:61:54:6d:af:aa:c4:91:68:97:d0:94:
11:ef:3f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:18 2025 by rpki-client