Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
File: 45Dy7gpwvK7-AZWj2LN300KXqUM.mft (raw, json)
Hash identifier: xOURCWSfVbVsHIrfxM7U7NZYvc6jrmI0V6PMrWGIZdE=
Subject key identifier: ED:E7:21:7A:65:95:4A:BC:77:0D:16:89:CB:E4:AA:85:2E:A4:23:CE
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Certificate issuer: /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial: 019849D398EB5061D7C0FBBBF10A1D34EB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:01:00 +0000
Manifest this update: Sun 27 Jul 2025 03:01:00 +0000
Manifest next update: Mon 28 Jul 2025 03:01:00 +0000
Files and hashes: 1: 45Dy7gpwvK7-AZWj2LN300KXqUM.crl (hash: x6gKjAMv24EgH/42FTVBn5Qp5pw+tPNG+n49TH82JE0=)
2: R7JL9FH-2QrwFM5epJeXae1YV-E.roa (hash: Z+kLiV+Tl4XxDqngd/q42hXqK5SlkiW5r2j2WXBsESY=)
3: iDFuGk6oYIqLw3GPihSSyyo3kF8.roa (hash: cwnT8XNunIwbvLFN3GthMjNOhsdwtyQiIir5eoCVPD0=)
4: o9F14TmJz-3o4btxFTmUNxIaMVQ.roa (hash: htBHVS9bsjwqqv6NPJnNf70ZDfm1OC4b9PUSs5jzuTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:98:eb:50:61:d7:c0:fb:bb:f1:0a:1d:34:eb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Validity
Not Before: Jul 27 03:01:00 2025 GMT
Not After : Jul 28 03:01:00 2025 GMT
Subject: CN=ede7217a65954abc770d1689cbe4aa852ea423ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:25:8f:73:6a:4c:8e:db:be:1f:35:60:77:
89:95:cc:7c:af:8f:a5:4e:27:b3:13:15:2b:8a:98:
0a:8a:87:d7:ba:d0:7a:a7:4b:9a:39:7e:d3:49:23:
50:12:f3:9b:90:78:23:13:50:6c:a7:19:85:57:bc:
a2:0f:34:fc:0e:f3:2b:bd:7e:ed:d0:0e:6c:8a:60:
e1:fd:b4:4b:a6:4c:a6:61:d8:71:ce:91:7e:cd:1d:
bb:7f:cf:7a:85:a4:b2:d4:8c:60:37:79:6f:a8:b9:
eb:75:78:9c:39:cd:e1:d4:e4:c9:9d:f2:5b:8f:3c:
00:eb:a8:78:aa:59:94:d5:8f:bd:8a:4f:4b:50:7b:
af:9d:9a:57:0f:9a:f7:55:68:b2:6e:16:7f:ef:4b:
8a:2a:3d:9c:f0:d6:36:5e:6c:78:5c:f8:8e:7c:b8:
f9:b1:78:ae:31:a9:11:f2:26:fa:13:1b:ba:7c:a1:
e6:0a:b6:57:52:75:bb:ce:25:96:9b:63:02:8e:24:
ee:0c:16:05:26:9d:32:c8:7d:23:85:8e:36:df:6d:
63:c7:86:92:1d:e7:9e:49:ea:a1:6a:61:c7:d1:34:
b9:3d:af:ee:f4:e0:bb:cb:81:96:9b:74:00:d2:00:
18:18:74:6e:e0:78:12:da:9e:b6:10:50:47:50:82:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E7:21:7A:65:95:4A:BC:77:0D:16:89:CB:E4:AA:85:2E:A4:23:CE
X509v3 Authority Key Identifier:
keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:72:65:b3:76:c6:0a:8a:fa:05:0b:a4:ea:00:2e:c7:da:06:
a6:17:06:8b:1f:5f:22:04:ca:d1:38:80:58:13:fd:d1:99:28:
6e:99:88:9f:09:95:90:53:35:38:bf:d8:78:62:d9:dd:eb:5c:
a3:75:05:cc:24:12:56:de:c2:49:3b:47:25:59:9f:e9:5b:e9:
15:db:51:d1:a6:db:fd:eb:e7:4f:39:c5:24:c1:d3:93:9c:8a:
2b:33:e5:b3:b7:26:4c:0c:8c:6b:40:ab:12:67:28:43:26:b1:
3a:cd:69:db:4c:71:f1:38:8f:5a:63:7c:48:f4:eb:a7:51:2b:
c8:06:e5:db:a6:95:d7:42:8c:1d:91:cf:39:e1:b0:e8:f2:dd:
db:9e:8e:05:a8:4b:be:81:02:16:17:5d:d9:f5:1c:ac:4d:5c:
02:31:01:f6:90:a7:26:89:19:6c:b7:d0:d1:ac:2f:0c:2a:44:
22:94:f8:0f:41:59:67:9a:c9:e5:6f:cd:22:1b:34:d0:20:70:
c6:a7:33:fa:94:8f:71:0e:ae:42:0f:86:46:81:00:76:f8:29:
8a:9a:23:2a:bf:4d:6a:ec:67:66:5f:7e:93:bb:de:99:2e:88:
b2:19:25:a3:36:32:dd:7b:d0:d4:ae:e3:fc:68:01:7d:75:39:
1d:8d:c0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:48:32 2025 by rpki-client