Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
File: c45l-wPm1gfYviBDRdbgWkYLmk8.mft (raw, json)
Hash identifier: Hhscb6a/CfiG8mOrHMpxfRjc+ygpZl3ll1J6CCz9Nl4=
Subject key identifier: B6:10:62:98:B9:C6:C4:7A:37:41:B9:93:C1:B6:CE:21:BD:31:21:B2
Authority key identifier: 73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
Certificate issuer: /CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Certificate serial: 019923A0729B0702CF88C656225A5EAAEAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
Manifest number: 0E73
Signing time: Sun 07 Sep 2025 10:02:21 +0000
Manifest this update: Sun 07 Sep 2025 10:02:21 +0000
Manifest next update: Mon 08 Sep 2025 10:02:21 +0000
Files and hashes: 1: Bm65E--O4RsSyCzNAmCOH5DCwbg.roa (hash: Dk5vtQSO5xVuQ/klL2R5yHYHzC51XBPO7azd9yPCmHY=)
2: c45l-wPm1gfYviBDRdbgWkYLmk8.crl (hash: KvNEl14oGEarLcMje/X1UjgKT/QWN9m6jvw2wUzzEBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:72:9b:07:02:cf:88:c6:56:22:5a:5e:aa:ea:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Validity
Not Before: Sep 7 10:02:21 2025 GMT
Not After : Sep 8 10:02:21 2025 GMT
Subject: CN=b6106298b9c6c47a3741b993c1b6ce21bd3121b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:90:ea:bd:aa:65:0b:3e:6c:0a:9c:db:df:
2c:3f:d9:76:95:91:3b:1e:86:ac:4d:dd:24:2d:91:
9c:50:24:7c:2c:2a:4f:3b:ec:c9:f5:2a:b6:c3:a3:
69:73:31:a3:f3:e2:55:18:6c:5f:01:4f:f6:ec:77:
ee:6b:d6:79:fe:9c:19:14:98:03:4e:37:b0:6c:c6:
fa:ca:a8:2a:a4:63:5e:80:b1:d4:d1:67:af:38:72:
a3:6c:fd:53:c1:ec:b1:e5:c5:4e:1a:61:83:53:2c:
0e:35:4e:0f:60:46:d6:4d:c7:a6:71:ee:5e:80:0b:
f1:76:15:57:36:6a:fd:45:41:58:a5:47:2c:ec:3a:
2a:81:24:65:52:64:5a:14:0f:36:9f:1e:95:e4:64:
e9:54:06:da:b9:68:30:1e:d3:d9:75:aa:09:6a:71:
57:48:51:ae:f2:db:e5:60:10:36:ba:90:e6:4d:8b:
17:3c:54:39:bf:32:ef:3d:80:31:a3:df:63:51:2f:
e6:f2:c7:58:b3:60:9d:5a:bb:2d:ca:97:2b:70:3e:
45:ea:1a:10:b5:fc:70:98:17:11:a2:b4:52:fa:d9:
d7:b4:62:41:be:88:8e:02:78:63:77:85:6a:13:69:
ee:d1:42:8e:b5:d8:4f:59:85:8c:e0:13:61:1b:1b:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:10:62:98:B9:C6:C4:7A:37:41:B9:93:C1:B6:CE:21:BD:31:21:B2
X509v3 Authority Key Identifier:
keyid:73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ae:3c:b2:5f:61:13:92:bb:46:9b:5e:11:7e:74:9c:ae:1f:
d2:c3:a8:57:85:6d:d6:5b:66:9a:de:9e:d2:e3:4a:14:c7:c6:
da:5d:9d:0a:fb:72:89:d7:6f:ed:c6:7b:aa:9b:db:71:99:95:
4c:4d:27:b2:c0:42:c2:20:e6:f9:43:c7:e1:62:73:82:00:9b:
76:2c:ed:81:a8:ee:60:65:17:09:17:ce:ba:73:8b:69:d7:74:
08:0c:65:9f:d0:5c:0a:2c:08:a6:75:2b:19:32:14:7c:26:dd:
24:2f:70:04:8b:0f:43:8c:3a:e0:54:94:3b:83:ff:b7:ed:31:
6f:c6:ed:fb:5c:e8:34:eb:76:7b:94:3f:0c:57:14:4a:53:02:
47:1a:33:d4:53:c7:a7:22:dc:8c:e3:e0:2b:3a:2e:f5:8b:86:
34:f1:5c:ed:5d:a9:a4:89:03:52:41:0f:dd:03:0c:96:24:2c:
be:44:78:41:83:5d:23:9d:c0:bc:7e:ea:54:d3:87:8e:86:5a:
ed:86:cb:ad:f0:69:00:cf:7d:c9:bd:00:e2:5e:31:d6:7d:36:
65:e0:61:92:55:ed:8c:03:85:33:82:e5:76:f2:70:41:47:49:
f5:3a:40:70:90:a8:0a:a9:d0:9f:8c:94:9d:8f:86:83:4d:c8:
49:8f:f3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:37 2025 by rpki-client