Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
File: 45Dy7gpwvK7-AZWj2LN300KXqUM.mft (raw, json)
Hash identifier: qnvgqcJA9WPsADNFfyoUZeyK1uFdmRGpVCdH8T5QIk4=
Subject key identifier: 3E:34:B1:D1:BC:71:58:F6:76:5B:FA:58:B4:2B:75:A5:A9:01:5C:29
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Certificate issuer: /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial: 019A22F72EA9BA71BB926B6607A1EF732AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 00:00:15 +0000
Manifest this update: Mon 27 Oct 2025 00:00:15 +0000
Manifest next update: Tue 28 Oct 2025 00:00:15 +0000
Files and hashes: 1: 45Dy7gpwvK7-AZWj2LN300KXqUM.crl (hash: +XY/s97fn3k4a/lgWbgl1i0Yy9xBCoatWUrSDww/TFc=)
2: R7JL9FH-2QrwFM5epJeXae1YV-E.roa (hash: Z+kLiV+Tl4XxDqngd/q42hXqK5SlkiW5r2j2WXBsESY=)
3: iDFuGk6oYIqLw3GPihSSyyo3kF8.roa (hash: cwnT8XNunIwbvLFN3GthMjNOhsdwtyQiIir5eoCVPD0=)
4: o9F14TmJz-3o4btxFTmUNxIaMVQ.roa (hash: htBHVS9bsjwqqv6NPJnNf70ZDfm1OC4b9PUSs5jzuTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:2e:a9:ba:71:bb:92:6b:66:07:a1:ef:73:2a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Validity
Not Before: Oct 27 00:00:15 2025 GMT
Not After : Oct 28 00:00:15 2025 GMT
Subject: CN=3e34b1d1bc7158f6765bfa58b42b75a5a9015c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:d0:01:96:eb:05:0d:7c:03:f8:e4:17:45:
bd:9b:ed:22:21:d8:14:2c:6f:ae:07:d9:f9:c4:82:
8d:59:8e:e8:0e:03:0f:af:67:17:ef:9d:67:fa:85:
31:65:4d:ba:94:6c:59:b8:50:d4:0e:6b:43:b3:61:
81:5d:10:35:10:ba:a6:cb:cd:9c:45:0d:6f:50:a4:
24:55:a6:95:be:11:fb:77:19:b0:53:8b:13:d3:75:
0e:a6:20:5c:ec:be:a6:79:c4:be:fa:c3:ca:ef:58:
30:a2:39:a8:f6:33:48:53:ae:fa:3c:21:25:d7:fe:
41:52:cc:e9:8b:9d:ef:9f:a6:9f:ea:a3:7a:18:b0:
3f:55:4d:d6:5b:f4:42:40:11:54:8a:ef:ef:a7:eb:
6f:94:11:d9:50:ae:45:66:b1:0d:0c:de:e8:8b:2e:
03:51:75:ba:66:ed:6d:07:35:35:73:dc:16:62:66:
49:cc:b6:ce:91:50:61:36:c2:1e:83:ed:1b:11:9e:
64:72:05:53:90:50:63:03:6d:08:29:24:9f:a7:fa:
bd:87:27:fc:09:39:21:27:5f:ea:77:83:7c:e4:cc:
5b:91:02:52:2b:0b:47:cf:d6:b3:e8:13:25:13:fc:
ea:c1:17:c5:c9:06:c2:af:1e:04:79:f3:52:43:d2:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:34:B1:D1:BC:71:58:F6:76:5B:FA:58:B4:2B:75:A5:A9:01:5C:29
X509v3 Authority Key Identifier:
keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d4:4e:f0:8e:d8:0f:92:e2:d9:06:31:06:90:01:f9:a6:a5:
35:e2:58:2c:7a:87:e2:f3:8c:3b:d3:6c:39:d2:7b:34:70:4c:
79:4f:83:94:e7:06:d8:a3:8b:91:6f:6b:f4:5d:48:52:fc:05:
3a:19:4c:ea:f4:a5:bc:2d:b7:6b:ec:22:f8:40:f6:22:6f:74:
44:98:3e:76:0d:9a:68:22:ee:3a:ba:65:ee:89:8f:41:46:7d:
1d:84:a0:2b:17:81:42:a5:a6:c6:80:62:1e:0a:b7:86:95:ce:
fd:ac:52:ac:7a:a3:a2:fd:18:70:6c:01:9b:fa:a5:f5:53:b1:
1a:4c:f6:46:91:7e:51:4c:c3:4d:12:7c:a0:8a:a9:50:0b:f9:
a8:33:c1:6d:1f:f8:96:bf:d2:e2:2d:1e:4c:4f:2a:dd:f1:9f:
3c:2c:d8:0e:b3:5c:17:33:77:9d:22:a3:4a:b7:b1:99:15:6d:
0a:97:a5:a9:7c:b1:06:a4:7e:b5:11:87:6d:8d:23:a9:9d:89:
0d:8c:c8:ce:21:49:3e:c1:1a:92:dc:f9:02:98:ee:f9:ea:a6:
b1:33:88:e6:d5:ab:06:ae:c9:18:f0:b9:fd:79:5e:a5:59:e2:
ed:bd:45:0a:58:17:e7:74:66:6d:58:7a:b7:87:53:23:b4:9c:
17:02:9e:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoi9y6punG7kmtmB6HvcyriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOTBmMmVlMGE3MGJjYWVmZTAxOTVhM2Q4YjM3N2QzNDI5
N2E5NDMwHhcNMjUxMDI3MDAwMDE1WhcNMjUxMDI4MDAwMDE1WjAzMTEwLwYDVQQD
EygzZTM0YjFkMWJjNzE1OGY2NzY1YmZhNThiNDJiNzVhNWE5MDE1YzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+rQAZbrBQ18A/jkF0W9m+0iIdgU
LG+uB9n5xIKNWY7oDgMPr2cX751n+oUxZU26lGxZuFDUDmtDs2GBXRA1ELqmy82c
RQ1vUKQkVaaVvhH7dxmwU4sT03UOpiBc7L6mecS++sPK71gwojmo9jNIU676PCEl
1/5BUszpi53vn6af6qN6GLA/VU3WW/RCQBFUiu/vp+tvlBHZUK5FZrENDN7oiy4D
UXW6Zu1tBzU1c9wWYmZJzLbOkVBhNsIeg+0bEZ5kcgVTkFBjA20IKSSfp/q9hyf8
CTkhJ1/qd4N85MxbkQJSKwtHz9az6BMlE/zqwRfFyQbCrx4EefNSQ9KCEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD40sdG8cVj2dlv6WLQrdaWpAVwpMB8GA1UdIwQY
MBaAFOOQ8u4KcLyu/gGVo9izd9NCl6lDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDVEeTdncHd2SzctQVpXajJMTjMwMEtYcVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9hNjA0Y2YtMTk0Ny00YjEyLTlhNmIt
M2ViOTEzNGVjNzlkLzEvNDVEeTdncHd2SzctQVpXajJMTjMwMEtYcVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9hNjA0Y2YtMTk0Ny00YjEyLTlhNmItM2ViOTEzNGVjNzlk
LzEvNDVEeTdncHd2SzctQVpXajJMTjMwMEtYcVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActRO8I7Y
D5Li2QYxBpAB+aalNeJYLHqH4vOMO9NsOdJ7NHBMeU+DlOcG2KOLkW9r9F1IUvwF
OhlM6vSlvC23a+wi+ED2Im90RJg+dg2aaCLuOrpl7omPQUZ9HYSgKxeBQqWmxoBi
Hgq3hpXO/axSrHqjov0YcGwBm/ql9VOxGkz2RpF+UUzDTRJ8oIqpUAv5qDPBbR/4
lr/S4i0eTE8q3fGfPCzYDrNcFzN3nSKjSrexmRVtCpelqXyxBqR+tRGHbY0jqZ2J
DYzIziFJPsEaktz5Apju+eqmsTOI5tWrBq7JGPC5/XlepVni7b1FClgX53RmbVh6
t4dTI7ScFwKeiA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:40 2025 by rpki-client