Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
File: ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json)
Hash identifier: IC/jbtVpWnzUF5H4CyOhYEH2Umv1wFOEPpW0iU/ifGQ=
Subject key identifier: B6:80:35:4F:88:28:89:DD:E3:AE:27:28:D8:34:93:7B:16:54:B4:93
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 019A23D31B12A03A03855E3AC9B2246AA8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 04:00:28 +0000
Manifest this update: Mon 27 Oct 2025 04:00:28 +0000
Manifest next update: Tue 28 Oct 2025 04:00:28 +0000
Files and hashes: 1: Da5ukIODRFZkZgl7acW52LzBL34.roa (hash: 2S0h0c/tsGIJ57Pr+A8pwZxQY2/WXek+xC9ZKTvhbzU=)
2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: +iAa5LW1D8FpVcIH4fOcv2uwPSTQkSKFVWaRsZGRlr8=)
3: Z45rQavEcQTf3vGUVM_AgWAXCn4.roa (hash: q7JvLSO411WbeIPtlyaZvnsbtnUZIYteyAyCawxKvzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:1b:12:a0:3a:03:85:5e:3a:c9:b2:24:6a:a8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Oct 27 04:00:28 2025 GMT
Not After : Oct 28 04:00:28 2025 GMT
Subject: CN=b680354f882889dde3ae2728d834937b1654b493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:77:6a:e5:da:7e:87:34:d4:26:98:57:c4:40:
56:30:27:0e:20:3e:5c:25:bc:58:88:9b:a3:61:2e:
4a:8e:f0:dc:ad:bf:69:13:de:73:79:73:f8:a6:4a:
c6:5b:e3:4e:7d:81:a4:af:38:eb:65:45:3e:5d:56:
04:83:c1:6a:36:9d:18:66:a5:f7:1c:e0:8a:d2:fe:
c2:5e:ee:85:16:23:a4:64:5c:08:7f:e7:0c:17:70:
44:d9:60:91:9f:bb:2e:7e:60:db:9f:5c:e2:e1:89:
26:98:14:4e:16:6a:a9:9b:10:eb:c4:91:db:61:d1:
82:5f:44:1d:34:e7:66:b6:bc:40:a9:b2:3a:ce:53:
ae:de:d0:4d:b6:18:1e:54:22:2e:bb:5e:a5:ef:8c:
7b:33:ab:da:d2:4f:4b:37:f6:bb:eb:19:44:30:b9:
1c:d7:05:3c:05:c2:1b:8e:72:18:cc:b5:40:bc:56:
b8:44:fa:b5:54:6e:f3:29:1b:7f:30:4e:e9:bc:db:
0b:10:d9:04:35:91:82:ee:a7:44:3c:2d:57:ef:02:
9c:94:6f:66:79:97:ae:3f:82:95:4e:fb:12:c6:65:
e2:a4:f6:8e:ef:f3:4d:fc:40:7a:f8:72:2e:76:3d:
ff:a7:87:31:a9:58:7c:2e:d9:f8:05:75:52:62:bc:
a9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:80:35:4F:88:28:89:DD:E3:AE:27:28:D8:34:93:7B:16:54:B4:93
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:29:5b:01:81:0e:d4:da:fa:b2:e6:0a:6d:79:0a:0b:11:f2:
35:43:b4:e1:c9:4e:69:a1:7b:82:ad:c6:ea:d3:2f:30:c8:74:
4d:d2:de:b3:14:4e:69:27:db:87:07:3a:b8:24:fc:f1:9b:e0:
e2:39:dc:8b:f7:e9:cc:f5:b9:58:3e:99:00:db:50:01:49:11:
ed:16:8d:c6:f2:4f:f4:0b:1d:23:42:11:e2:25:98:65:44:1b:
c3:c5:ce:ce:89:c4:9f:25:bf:b9:18:60:05:4f:a9:db:99:13:
06:b9:bb:7d:c7:5d:15:dc:d2:ac:3f:b4:d8:0f:b7:34:ec:64:
84:a8:99:11:a2:8b:fa:48:80:19:5f:19:fb:80:d4:aa:a9:18:
7d:0b:5b:fe:04:9f:3c:63:d5:4f:61:11:19:ac:ea:69:e9:4e:
0e:f2:2f:14:0f:d0:92:6e:e2:23:5e:44:69:f5:13:2a:d1:d0:
b9:9c:0e:2e:fe:b4:3c:19:e4:86:a7:00:f0:75:c6:da:31:31:
0b:3d:fb:15:63:70:2e:9f:55:3a:f8:73:3a:80:51:d9:6f:ee:
75:96:5b:9b:01:7d:bb:ee:f4:d8:7c:67:9f:5a:5d:bc:08:3d:
d1:18:40:6e:a4:7f:5d:90:17:e0:6a:ee:aa:6d:6e:27:a5:1c:
34:e9:e4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:04:36 2025 by rpki-client