Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: dXUDKM6k6aAdIy0MKhMz+9o2OGk1nQeO/XlDFXzEGsc=
Subject key identifier: FD:D4:31:73:60:C4:00:C4:A2:C3:B8:10:37:D9:41:49:55:0E:E7:F2
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 019935A5945DA1E2E35ABED5665F56E9CF6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 066E
Signing time: Wed 10 Sep 2025 22:01:07 +0000
Manifest this update: Wed 10 Sep 2025 22:01:07 +0000
Manifest next update: Thu 11 Sep 2025 22:01:07 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: +6moAtKyCCY4E5lgstskrp37/418ORk4Wg7Fa8Uv5Is=)
2: iM-HUbcoELfWgS-lPVnMpAjn2tU.roa (hash: FOA+HRQLHHEYU2ci+E8byaoG9+so0NlIhMx5zOmbRnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:94:5d:a1:e2:e3:5a:be:d5:66:5f:56:e9:cf:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Sep 10 22:01:07 2025 GMT
Not After : Sep 11 22:01:07 2025 GMT
Subject: CN=fdd4317360c400c4a2c3b81037d94149550ee7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:f7:cf:71:f9:06:94:89:bf:5a:a3:b3:5e:
88:c9:34:33:16:ba:e6:c5:29:84:06:9f:9c:68:21:
3c:ed:05:00:0d:30:02:c2:dd:f0:d9:cc:33:be:86:
d3:48:3f:5a:63:c6:6a:e9:be:a5:97:f9:f1:92:62:
ed:8c:15:24:53:4f:04:66:d0:ed:7f:5c:40:8f:b1:
07:56:5f:54:28:a7:78:58:67:3c:23:a6:ff:41:ff:
4e:8a:8b:3e:5d:be:6c:17:d8:3e:00:c1:d7:6c:d0:
c2:07:fd:00:f7:e8:2c:fa:da:39:c2:bc:8d:c1:23:
15:c5:8e:1d:9b:50:a3:e5:9e:23:37:ce:58:5f:0e:
a8:00:ba:e1:cc:47:98:95:29:f0:2d:9f:41:75:46:
32:cb:2d:76:da:d9:c0:6b:e6:b7:96:dd:c2:98:9c:
26:fc:49:7f:b2:09:ab:e3:1c:5d:80:bd:fb:f1:7c:
2f:14:3e:35:96:da:14:c9:47:12:7f:61:d2:20:09:
53:08:7d:2d:a0:0b:8a:a8:e4:47:50:da:0e:b3:cc:
cb:a1:c4:62:95:eb:08:de:d8:74:76:88:1d:da:53:
07:8b:c0:08:0f:1c:bc:44:50:0f:a5:a8:54:fb:35:
3b:79:51:3d:6c:c8:53:bf:5a:c4:08:81:c0:d7:bc:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D4:31:73:60:C4:00:C4:A2:C3:B8:10:37:D9:41:49:55:0E:E7:F2
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:63:a2:6e:e7:46:f3:c7:f2:66:d6:bf:10:1a:c3:96:91:d0:
9c:d9:a9:f8:4b:45:e5:70:c5:56:97:66:2e:5a:98:81:c2:33:
69:51:39:97:c3:8a:ed:ec:44:bc:11:d0:67:7b:c2:89:ae:88:
04:7c:bd:28:d2:c7:67:9b:3d:01:dd:99:c7:aa:23:7f:a6:b9:
88:32:aa:47:47:a4:db:92:13:13:c3:5d:9f:25:f5:f3:a0:20:
28:1d:a7:63:59:22:76:aa:7e:7f:e8:85:01:18:3d:e5:22:5c:
ee:0f:00:4e:7a:0f:7a:f2:61:66:ea:6d:59:db:84:39:02:89:
fc:15:1f:ba:6c:db:aa:4d:8c:f6:94:14:d6:ca:80:8c:1a:25:
02:8d:62:9c:9c:f7:80:ab:f6:d8:92:c7:47:b2:50:dd:f0:ef:
1c:23:17:cd:de:7b:16:39:ff:17:1a:52:1f:e2:8f:9d:52:b5:
60:4e:6e:bd:97:2f:9b:a1:42:04:42:0e:2f:06:ff:28:a8:b7:
54:60:ae:1d:18:11:b9:f0:4e:36:03:05:7f:b8:0a:a4:41:61:
6d:27:4d:f5:1d:b9:06:25:2e:2c:fe:c5:bc:46:5c:1f:3e:fd:
57:da:81:35:f6:59:30:6a:f6:f8:a3:fc:35:7a:15:76:8f:70:
b9:1c:da:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:06:13 2025 by rpki-client