Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
File: ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json)
Hash identifier: bheYrqScsczr6XB1oNfbVwzB3MgLT9DWFCWqMnosxY4=
Subject key identifier: C5:85:9D:3E:48:42:12:FB:F6:39:82:92:CB:86:2B:5C:06:5E:2B:0F
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 019747E7561D23FE933D04367C721859F396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 01:00:32 +0000
Manifest this update: Sat 07 Jun 2025 01:00:32 +0000
Manifest next update: Sun 08 Jun 2025 01:00:32 +0000
Files and hashes: 1: Da5ukIODRFZkZgl7acW52LzBL34.roa (hash: 2S0h0c/tsGIJ57Pr+A8pwZxQY2/WXek+xC9ZKTvhbzU=)
2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: y9dBXdAPXKwNiJ6KzfeRjnIQjEiX60ovU2kzAjem2KM=)
3: Z45rQavEcQTf3vGUVM_AgWAXCn4.roa (hash: q7JvLSO411WbeIPtlyaZvnsbtnUZIYteyAyCawxKvzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:56:1d:23:fe:93:3d:04:36:7c:72:18:59:f3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Jun 7 01:00:32 2025 GMT
Not After : Jun 8 01:00:32 2025 GMT
Subject: CN=c5859d3e484212fbf6398292cb862b5c065e2b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:f3:82:0a:0b:06:12:e4:77:3f:23:87:52:
9d:92:f6:31:69:bd:c9:9a:07:a4:5d:cb:e8:e8:7a:
0d:aa:2e:58:f2:61:5d:08:bc:aa:2f:3c:cd:7e:65:
cd:3c:52:c8:9b:53:e2:00:c0:6a:3c:ed:db:b2:7b:
bc:2f:24:fb:4e:cd:7b:ad:ee:58:b4:95:61:ee:a8:
0e:56:28:2e:fb:47:f7:b1:7c:61:72:92:f7:fd:9a:
e3:03:18:83:4d:ea:00:31:41:59:9f:e1:0a:d6:b3:
71:5f:0b:ed:06:a1:bd:70:94:49:3f:1a:53:e8:5d:
ef:1e:fa:55:5f:e5:a7:61:8b:20:04:76:26:b7:e5:
43:fb:84:a9:3a:93:1f:af:a0:3d:7c:ea:6b:f4:5b:
ce:4b:a4:be:9d:66:11:a3:f0:39:1f:94:f1:82:37:
9b:0b:30:87:72:90:ff:26:dd:ff:70:df:7a:07:5d:
3d:da:28:6a:18:cc:c1:8a:07:91:f5:47:16:30:60:
03:44:d9:75:76:da:a3:0b:d6:ca:09:69:30:2d:07:
0c:26:be:62:77:81:31:46:bf:c1:04:4d:98:2d:17:
5c:4d:4c:f1:95:45:2f:00:03:69:4d:15:89:37:ae:
1d:ba:cb:4b:93:00:57:25:68:f9:0d:9d:aa:bf:da:
f8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:85:9D:3E:48:42:12:FB:F6:39:82:92:CB:86:2B:5C:06:5E:2B:0F
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:79:c3:92:ee:5e:2b:13:fa:ce:e6:76:8c:89:0f:fd:92:6a:
fb:67:24:77:fb:5f:95:60:cd:c0:b9:fd:74:69:e3:09:fb:fb:
85:85:8d:8b:d7:5c:aa:54:61:3d:52:ec:93:ba:f3:4f:09:f5:
06:25:07:a5:4d:dc:4f:d8:fe:35:81:61:ef:dc:be:9a:89:cc:
5f:39:5f:89:94:4b:3b:43:7b:96:49:66:b3:a3:9f:a1:f2:ef:
67:3d:78:e2:db:76:ae:74:6e:07:09:d4:d7:91:ba:2a:3d:39:
71:01:8f:63:18:67:ea:be:8a:7c:e6:2f:f5:a9:3c:e1:cc:d3:
24:b3:f6:b6:9f:d6:2b:82:88:2f:66:00:8b:f6:66:80:55:64:
fb:4f:8d:30:d1:18:c2:30:2a:6a:83:42:95:43:5e:c0:fc:12:
5c:53:c7:1e:d6:b3:3d:b4:f0:10:cf:ca:e8:24:f0:ee:00:15:
de:29:b0:68:a1:8a:75:03:00:30:c0:7d:5e:00:14:99:8c:04:
c7:9b:4e:f4:30:83:f9:1c:54:13:ea:f2:c8:88:4d:4c:57:5d:
a4:18:37:6c:db:72:25:4a:80:85:c4:e1:14:ae:fb:19:91:33:
74:16:fd:fd:06:20:ac:81:d5:df:cb:97:73:1e:3a:61:27:1a:
33:0b:d0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:24 2025 by rpki-client