Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
File: ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json)
Hash identifier: XvNv28JUfWlQICMKJM59vQhwY7NH0SiaiQLBi6R3zMU=
Subject key identifier: 14:DA:D4:3E:54:66:85:5D:CA:97:BC:9D:1E:D1:9B:7B:89:C1:D5:1A
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial: 019A0523A2609CFDADD36FD5C082438269A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
Manifest number: 0988
Signing time: Tue 21 Oct 2025 05:00:12 +0000
Manifest this update: Tue 21 Oct 2025 05:00:12 +0000
Manifest next update: Wed 22 Oct 2025 05:00:12 +0000
Files and hashes: 1: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: KHzJaiYnwywBbTIZOnDL2Ogqh8Zi14JBzh6xKkNHzs0=)
2: c1218tMrC-SYY-Yo1ITctKUD9_k.roa (hash: 8AGbg1kAcimxxtZO8YTai8jQPbPTR+28UymCTknNVxU=)
3: v9XCpSvXJgFn93oqPO6QjvmDaV0.roa (hash: 2/0z9nylSvJWI46oSDGL4Lr6kTxicsj+PodL8IKe940=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:23:a2:60:9c:fd:ad:d3:6f:d5:c0:82:43:82:69:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Validity
Not Before: Oct 21 05:00:12 2025 GMT
Not After : Oct 22 05:00:12 2025 GMT
Subject: CN=14dad43e5466855dca97bc9d1ed19b7b89c1d51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:49:8f:93:75:66:37:6d:fc:f2:61:e3:cb:04:
a3:5d:94:3d:a2:a5:6a:b0:72:38:67:e0:da:49:e3:
11:c1:c9:57:64:8b:ab:4c:fe:3a:dd:bc:44:c5:d2:
f5:60:90:8a:3d:54:60:9a:82:ff:39:85:95:70:3f:
60:81:26:e9:c2:38:d7:db:f5:51:2c:9d:16:f2:86:
94:af:c5:6d:8e:f7:18:94:f3:c9:b7:26:4b:d5:24:
2a:e3:56:b6:0b:a3:28:99:53:29:63:1c:ff:70:03:
02:1c:e4:6e:f5:dc:83:e3:9d:70:fd:f9:6a:38:7f:
57:7f:98:2b:d7:3a:58:2a:05:77:28:6c:37:dc:c1:
21:c3:32:15:6d:bc:ca:de:df:92:2d:7f:78:f9:d6:
7b:57:93:32:26:f2:d9:3f:2c:83:04:e5:c3:af:59:
dc:67:68:42:54:ab:ba:18:f0:1a:9c:87:0e:49:65:
ec:5b:63:b0:a4:b3:ad:e2:9a:ef:e2:bc:97:0e:1d:
25:53:4a:ef:5e:27:4f:0e:52:2d:ee:2d:a7:02:ac:
b1:10:9a:41:97:40:41:86:e3:f7:fb:25:a8:9b:d8:
0c:19:ee:d1:27:79:3e:69:b6:b1:bc:ef:0b:19:bc:
dd:89:a5:9d:21:e4:6d:8c:29:a9:86:10:f2:9d:a1:
60:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DA:D4:3E:54:66:85:5D:CA:97:BC:9D:1E:D1:9B:7B:89:C1:D5:1A
X509v3 Authority Key Identifier:
keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:82:02:4e:36:a2:27:17:23:2d:0d:59:a1:7d:c3:6e:dd:34:
28:df:5e:cd:3d:4d:ee:a0:9e:56:8c:6c:39:6d:c1:8d:9e:25:
a6:3a:67:e2:72:a5:3c:e6:ff:65:7b:e2:86:3d:37:0a:3a:89:
74:8a:94:70:78:d0:88:52:d5:0b:c6:90:50:ac:4c:97:b1:70:
63:0a:c1:fe:cc:9b:e8:3d:52:b8:4b:37:91:ea:01:73:f2:4b:
dc:90:59:18:d4:42:07:a3:ae:ce:ea:f9:8d:43:cf:1a:b4:12:
1b:f3:bd:8e:93:de:ec:d8:1e:3f:08:e6:0f:50:a8:57:67:d0:
f8:e1:92:a1:b8:62:b6:09:f8:bb:c4:7f:70:d1:4d:7e:39:51:
50:ed:7a:1e:62:a5:a5:16:94:21:6a:bb:81:d4:89:07:0e:85:
1d:ec:e5:f9:70:05:8e:a1:00:62:3b:40:02:bf:55:92:d0:c5:
ad:91:6b:b9:72:90:9c:97:43:b0:2a:b5:da:e0:47:a9:21:4f:
1f:ee:1b:ab:bf:23:fd:5e:b5:3a:09:6f:71:26:92:e4:a2:96:
3c:9d:26:5c:fb:ea:63:da:6d:a3:54:0b:60:05:7f:07:ba:e3:
50:69:69:b8:20:4b:c2:4e:e2:38:ee:b8:c8:6b:78:e5:f5:f5:
ff:da:bf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:07:20 2025 by rpki-client