Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
File: Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft (raw, json)
Hash identifier: m9Elc+B8mK0p+RRZR0fyibxC49lLwIpbfrFZTZbjXm8=
Subject key identifier: 4F:39:B4:BB:12:C6:45:01:FA:AF:CA:43:47:F9:31:D5:6C:C2:6A:1D
Authority key identifier: 45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
Certificate issuer: /CN=45ed111630e05297795dddd298ea1fb29e695c53
Certificate serial: 01983FBDB1643435FFF34E59DD9A7AFDC5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
Manifest number: 0CDF
Signing time: Fri 25 Jul 2025 04:00:52 +0000
Manifest this update: Fri 25 Jul 2025 04:00:52 +0000
Manifest next update: Sat 26 Jul 2025 04:00:52 +0000
Files and hashes: 1: FdZc5w6NQTxVaX5pVim2SXSRdFw.roa (hash: 3yS2WlAT7COs2QdB7b8/iS1aVVb5UF5pqjux+yVKvWo=)
2: Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl (hash: qW7fp2Thw9Xb+vcfgvZaMM+MGb6JgrB8KDez8q6hcNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:b1:64:34:35:ff:f3:4e:59:dd:9a:7a:fd:c5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ed111630e05297795dddd298ea1fb29e695c53
Validity
Not Before: Jul 25 04:00:52 2025 GMT
Not After : Jul 26 04:00:52 2025 GMT
Subject: CN=4f39b4bb12c64501faafca4347f931d56cc26a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:bc:08:b3:ee:cd:06:1f:29:db:2c:d7:41:
18:ae:e9:01:62:e6:c9:60:64:66:c5:9d:7d:5f:e6:
80:1d:6a:80:f7:4b:59:3c:16:62:ed:83:23:7b:d9:
82:ff:cb:5c:32:37:d9:41:6d:91:84:b6:8b:e4:65:
ba:dc:05:22:95:e0:e9:d9:6a:37:75:dd:2a:57:db:
ce:29:71:29:27:c1:44:2b:32:c5:b6:96:b8:98:d4:
30:24:54:4b:1b:ff:7d:52:e9:5d:ca:45:08:f6:a3:
2f:9c:df:aa:3c:cc:0d:b1:f3:d1:4a:3f:52:0c:e8:
d3:d3:1c:de:c3:67:40:2a:37:b3:67:1d:1b:10:88:
2d:bb:cb:12:e8:d9:f2:5d:a0:f8:94:c0:68:21:29:
54:68:da:9b:2f:0a:47:05:88:dc:6f:bd:f5:ee:46:
e8:d7:ff:fe:f7:be:42:ea:27:d2:35:a8:72:6e:df:
e4:4b:4e:75:7d:d8:3e:da:c1:ae:45:9d:42:3c:43:
25:06:a8:bc:6b:0e:99:db:52:8e:49:a5:64:99:25:
04:82:dc:67:7a:5f:bc:aa:0d:94:5d:b0:66:73:25:
14:90:a1:8a:a6:a8:fe:62:d6:5c:32:c8:c1:5b:a5:
85:79:8a:18:42:e4:3b:51:b4:28:77:2c:10:2d:29:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:39:B4:BB:12:C6:45:01:FA:AF:CA:43:47:F9:31:D5:6C:C2:6A:1D
X509v3 Authority Key Identifier:
keyid:45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:65:0d:a0:f0:e9:71:09:8b:47:5f:f3:13:6d:66:59:34:4a:
62:1e:f1:9f:dd:22:99:0e:c2:1f:bc:0b:1f:4b:97:98:26:3a:
b7:f4:53:9f:0d:d1:d5:a8:9b:f4:86:d4:f3:b8:4b:87:e0:ff:
57:f5:99:e3:e1:35:7f:16:03:26:d1:58:36:0d:86:15:77:43:
4d:a2:4d:3a:ed:d0:1a:90:ee:19:3c:cb:2b:07:c4:b1:ab:45:
71:61:05:88:e2:88:dc:ab:4e:9c:d7:3b:6b:52:be:fd:4f:51:
32:12:5a:62:06:dc:92:5a:a6:74:b9:60:4e:71:12:a7:d0:55:
5e:7a:9d:12:03:b4:90:68:7f:e5:82:2e:f0:0e:ad:8b:6d:32:
43:64:8b:d6:0e:53:c9:c1:c1:bf:8e:23:bc:23:9c:f5:c6:ba:
21:04:b6:45:ea:3b:31:f8:a4:71:86:6f:c7:15:b1:25:6a:18:
b9:f7:6a:3c:c9:87:2b:8e:e6:aa:69:6c:68:82:22:6e:35:8b:
93:b3:5d:8d:dc:37:fe:16:68:b3:07:2e:4d:19:dd:34:4c:3f:
c2:48:02:a4:98:0c:9b:05:8c:a5:9d:46:4f:36:a9:4e:aa:60:
cb:02:f6:0e:b3:d3:9a:b7:d8:91:05:ff:8e:06:7d:aa:98:50:
30:96:7a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:41:44 2025 by rpki-client