Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
File: ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json)
Hash identifier: O1YpSK9ikCB/RBZ0Fn47Mz0qzqfqftdFPeJkpnJfZrs=
Subject key identifier: 8C:B7:37:5A:43:40:C5:39:9E:97:18:E7:90:7E:93:79:10:1F:84:DB
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 019926D77C40928F6997D9176F9471A53ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
Manifest number: 1675
Signing time: Mon 08 Sep 2025 01:01:20 +0000
Manifest this update: Mon 08 Sep 2025 01:01:20 +0000
Manifest next update: Tue 09 Sep 2025 01:01:20 +0000
Files and hashes: 1: Da5ukIODRFZkZgl7acW52LzBL34.roa (hash: 2S0h0c/tsGIJ57Pr+A8pwZxQY2/WXek+xC9ZKTvhbzU=)
2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: do5+vv6KSTAtWWhV7gVDhj2C83he3OOSUey0kmvdOX0=)
3: Z45rQavEcQTf3vGUVM_AgWAXCn4.roa (hash: q7JvLSO411WbeIPtlyaZvnsbtnUZIYteyAyCawxKvzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:d7:7c:40:92:8f:69:97:d9:17:6f:94:71:a5:3a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Sep 8 01:01:20 2025 GMT
Not After : Sep 9 01:01:20 2025 GMT
Subject: CN=8cb7375a4340c5399e9718e7907e9379101f84db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:89:57:99:2a:0c:3b:18:f0:c2:8c:c9:f9:
1d:c1:4f:61:9e:fc:35:93:ee:fd:2f:62:62:67:65:
b4:96:b9:10:7c:bb:fc:d8:05:6e:e1:ee:6f:8f:7f:
3b:80:d0:06:bf:22:3e:08:fd:e9:58:e8:88:0f:ab:
a8:07:74:26:36:4e:d7:24:2c:ef:72:68:54:10:44:
76:10:7d:4f:c9:3b:c8:3b:3f:a1:21:1a:bb:df:1b:
c9:b6:1e:2a:59:e2:12:b6:2e:d4:b3:aa:0e:0a:6a:
e2:31:f1:b7:df:5c:c7:89:5c:c6:88:20:ee:6c:4c:
bb:0a:1c:64:0a:0a:14:3d:46:41:64:69:8a:d8:71:
ab:1a:3b:3a:4d:4b:42:e2:9c:7e:8b:73:31:2f:34:
11:0f:bc:97:0e:9b:2e:89:3c:4e:36:8f:09:31:05:
a6:d7:3b:47:8e:29:da:ef:d6:67:60:f3:b3:07:14:
f4:8e:d7:12:1e:4a:b4:69:68:39:c7:9a:92:d9:41:
45:34:66:4f:15:d8:78:85:85:8d:c9:ea:fd:77:71:
3e:6d:6f:c5:dd:be:d4:5b:2e:5d:e7:fa:2d:60:c8:
72:74:7a:81:93:eb:f7:61:6d:45:ea:9c:58:87:d3:
17:4a:26:34:e7:b1:00:62:c5:40:73:6e:08:ec:0c:
76:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B7:37:5A:43:40:C5:39:9E:97:18:E7:90:7E:93:79:10:1F:84:DB
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:56:66:96:6f:a4:5d:2f:b1:89:7b:04:68:76:40:fb:2b:4e:
28:10:cb:34:82:8a:34:e9:2c:3e:53:b9:02:92:f5:3d:19:53:
e8:54:cd:88:7b:90:dc:c4:fa:bf:d0:87:7e:eb:f4:7e:7b:00:
f9:33:e9:bb:74:4a:f4:38:96:36:a5:21:48:79:cf:dc:84:08:
49:61:ca:58:23:d3:11:93:3c:bc:c5:47:1c:04:2e:4b:54:e5:
13:0e:0e:99:5b:01:aa:89:bf:33:15:be:5d:2f:cf:0b:d2:0f:
13:b7:d3:d3:36:a5:df:df:7c:36:fb:c2:39:aa:e8:de:3c:a4:
ff:e1:f6:dd:4e:9e:2e:ab:92:99:b8:93:5d:b4:55:b3:a7:4f:
db:4b:be:8c:7e:f5:71:19:98:82:aa:47:a8:75:4b:ad:b0:ac:
e6:6c:39:57:3a:b5:4d:d7:1c:ae:83:52:4d:36:bb:01:5c:16:
97:b7:3a:7d:38:62:2e:29:47:68:bf:2c:7e:16:43:8a:93:15:
41:76:d4:ca:f5:87:8b:82:9e:00:f9:f0:a0:e6:14:6b:55:78:
6a:b6:16:37:48:bd:5e:86:b1:05:33:28:ae:8f:fa:b6:cf:25:
04:92:bf:68:e0:93:7d:28:6c:db:30:99:f9:6d:c1:ae:bd:ed:
43:9a:c6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:15:49 2025 by rpki-client