
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: 4Igy30kkV2czp2DXexO70Z81ZrV9rPh/ad8BImSjJgQ=
Subject key identifier: C6:CD:31:18:99:EF:A6:C3:C3:EC:7A:5E:4B:B3:28:2D:9A:2A:0A:3C
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 019A270B36BB43DC800700D0C4CECF14CA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 06EB
Signing time: Mon 27 Oct 2025 19:00:37 +0000
Manifest this update: Mon 27 Oct 2025 19:00:37 +0000
Manifest next update: Tue 28 Oct 2025 19:00:37 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: mDcCFyD9YXV7nduAoIu2HrAt0nqtAp8SSrvJVywfDk0=)
2: iM-HUbcoELfWgS-lPVnMpAjn2tU.roa (hash: FOA+HRQLHHEYU2ci+E8byaoG9+so0NlIhMx5zOmbRnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:0b:36:bb:43:dc:80:07:00:d0:c4:ce:cf:14:ca:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Oct 27 19:00:37 2025 GMT
Not After : Oct 28 19:00:37 2025 GMT
Subject: CN=c6cd311899efa6c3c3ec7a5e4bb3282d9a2a0a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:41:1e:ad:08:3c:94:7f:fe:ec:8c:75:63:
dc:7b:89:c0:16:cc:a6:4c:29:b6:e5:76:69:38:c8:
dd:dc:23:52:fb:6a:35:8c:62:2c:9b:a1:11:4d:0a:
44:5e:34:dc:88:d1:53:73:11:f8:fc:7e:39:3e:2d:
c4:d9:a1:6b:11:a1:bd:e2:1d:95:9f:89:d0:c8:b8:
5e:cf:35:29:9d:30:0c:32:0e:ca:92:f9:6f:ec:eb:
7b:ef:b1:e5:1a:db:df:3c:bd:b5:3a:de:d5:a3:18:
9b:b5:10:f3:8e:31:22:eb:df:89:03:7a:d0:34:18:
23:e7:80:2b:20:85:f1:e3:3e:85:56:1c:7e:c9:56:
99:2a:8b:8d:74:e4:d0:37:d6:10:d8:0c:1b:7d:d3:
06:cd:f9:70:0b:25:2a:54:57:ba:6a:a7:13:b9:89:
f6:0f:45:42:22:e6:c3:86:78:40:df:36:da:0a:9a:
77:65:75:7c:c1:77:5e:7e:5e:c6:9c:07:ef:f7:31:
45:59:19:68:50:5e:3b:99:01:51:69:69:ce:6e:ae:
db:0a:97:21:ee:0a:a7:10:da:68:c8:02:21:63:5a:
48:31:ab:37:43:f2:ba:d9:8d:d2:1b:51:80:91:50:
dd:13:68:5b:ce:56:2c:1a:6c:f0:be:0a:c8:49:bb:
65:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CD:31:18:99:EF:A6:C3:C3:EC:7A:5E:4B:B3:28:2D:9A:2A:0A:3C
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:76:cb:b2:93:2d:99:9c:91:56:4d:44:dd:bd:99:48:36:e3:
50:9c:50:85:f7:11:30:03:9e:68:dd:d7:27:9d:32:a9:ba:42:
8c:98:a7:ce:c1:c6:cb:38:75:4d:f2:84:2c:78:d3:f2:8e:1c:
4e:bb:80:2e:56:f8:1c:6b:c1:22:73:8e:41:4f:ef:26:e5:0c:
58:68:27:85:67:eb:ef:3f:80:1e:49:47:68:34:d7:3c:e2:51:
38:47:61:f6:fd:6e:05:cf:fa:45:04:e4:1a:d3:7c:25:44:62:
ae:7a:1d:77:30:c5:47:bc:e6:e2:66:d2:db:9f:29:d9:8a:1f:
10:d5:b4:51:ac:66:86:f3:d9:d8:6f:ff:e5:c8:ba:cd:3d:cb:
28:18:bd:2f:a0:89:0a:24:a9:65:b2:e4:4f:b3:17:62:69:79:
08:20:b0:9c:54:c6:f6:57:76:18:2a:37:77:8f:1a:9a:a9:70:
b7:8a:b9:60:34:91:03:23:aa:8d:d1:d7:3b:62:ea:3c:92:cf:
3d:5d:dd:60:7b:c1:e4:53:bd:e5:2f:02:2e:ee:9e:57:53:67:
d8:62:9e:31:91:d3:61:aa:5d:b5:2a:0f:04:35:c0:b7:0a:3c:
dc:eb:d7:e7:ba:e7:25:8b:53:ae:16:28:10:1e:56:66:da:a5:
68:b4:db:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 23:00:18 2025 by rpki-client