Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
File: 45VXJQVD5Edq-IxGEtSolTExO1c.mft (raw, json)
Hash identifier: nZeKXTFR+enkMImg59TnKweh9FiF1iBJIovLFgrYbnA=
Subject key identifier: F1:03:C1:1C:DC:91:AF:EC:9F:6F:98:76:86:6A:DD:37:0C:52:87:75
Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
Certificate issuer: /CN=e39557250543e4476af88c4612d4a89531313b57
Certificate serial: 019A25C14DE8E19CB786B6A6E75290E7950E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
Manifest number: 029A
Signing time: Mon 27 Oct 2025 13:00:16 +0000
Manifest this update: Mon 27 Oct 2025 13:00:16 +0000
Manifest next update: Tue 28 Oct 2025 13:00:16 +0000
Files and hashes: 1: 45VXJQVD5Edq-IxGEtSolTExO1c.crl (hash: L3ZnpGjh3jHs7Kb6BNU7zOZOZOdX7A4SiozBAZ6/u/c=)
2: K_JZgBsGAVe42CM82ldUkYg0iAQ.roa (hash: bwVI85s3fTqLxVepdOjVCwyC9itDatE9AOSLnrN/zKU=)
3: O2ig3X7VNdoIgqEvSRSWulSevo4.roa (hash: b2vyXh49fwCqIp7fN7Ci84lv9+cxy1rLXbG95tTjerQ=)
4: df6ORV0T3_b0RdsmM3_USMPqdsg.roa (hash: q2PmH++N3IE0kcfGnwBqmXQjUmmTRWDH+eBviEbSMVk=)
5: zgHXXKhV6x08Iidi9kP_MDBdZ8U.roa (hash: taGLV+d4sUR0Mcx4A09Hc66ht4Rh+KLaRG3MKoCgLM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:4d:e8:e1:9c:b7:86:b6:a6:e7:52:90:e7:95:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39557250543e4476af88c4612d4a89531313b57
Validity
Not Before: Oct 27 13:00:16 2025 GMT
Not After : Oct 28 13:00:16 2025 GMT
Subject: CN=f103c11cdc91afec9f6f9876866add370c528775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:01:6d:e7:e6:23:d2:b0:50:8f:b9:5e:1c:
e4:9b:35:98:48:ac:71:9b:1c:91:6f:35:65:2d:f5:
1b:84:05:17:a5:27:47:02:4c:92:79:0e:15:af:4e:
d4:c1:6b:14:61:a4:de:40:e9:4b:7b:23:75:ee:73:
54:e9:81:6a:21:e0:c5:c0:27:8a:3e:95:c1:04:67:
c9:f0:54:26:11:b0:16:40:c5:d4:c5:93:4a:6c:7c:
cd:af:c4:ea:63:df:72:58:51:2f:0e:e2:00:ef:74:
24:b1:33:c9:36:db:d6:c2:ac:b7:80:6c:dd:ac:fb:
c8:0e:d2:c8:14:aa:12:5c:b2:1a:aa:b5:ae:b0:24:
fa:80:dc:01:00:69:3f:bd:1d:82:d7:db:51:1f:a1:
3b:ad:83:3d:eb:da:57:77:c6:44:74:94:9a:f0:f4:
eb:fb:74:2d:fc:04:4c:eb:f3:c2:23:73:58:88:5e:
64:68:7b:04:46:58:06:0f:59:44:5d:5d:78:ee:17:
34:c0:35:54:82:73:74:43:c3:11:ca:da:b6:03:0e:
49:56:80:1d:97:db:60:1c:fa:af:dd:bb:a8:ff:37:
37:cf:99:a5:09:0f:3e:5d:9b:00:a7:78:a0:91:43:
3b:4d:4c:92:64:e9:5e:f8:93:ca:7e:d9:37:22:c7:
54:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:03:C1:1C:DC:91:AF:EC:9F:6F:98:76:86:6A:DD:37:0C:52:87:75
X509v3 Authority Key Identifier:
keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:28:cf:8b:4d:bd:7e:70:33:20:04:b9:80:e3:91:20:31:de:
40:e2:9e:3d:00:1c:07:0f:45:82:f5:cc:86:fd:d8:b7:bc:95:
1f:c6:35:91:44:04:63:60:06:4d:bb:1a:31:6d:18:07:36:05:
db:36:41:fc:dc:32:3c:5b:0d:b3:f7:2f:8e:85:0e:eb:eb:63:
88:68:f8:26:23:5d:86:9d:00:43:88:0f:76:e5:0e:8e:df:a8:
82:7c:c1:48:ee:38:57:85:0d:24:dd:e6:10:fd:a7:51:2b:fa:
9f:6b:73:d1:9c:f3:4c:10:7c:14:57:a4:49:6b:b7:65:b3:c8:
3b:b1:35:51:a0:05:37:64:93:47:a8:ec:0f:50:fc:cb:8b:a0:
53:8c:28:ea:e3:ae:8b:59:88:95:62:c6:ce:a9:4e:47:96:a0:
f1:45:b6:fd:11:6d:93:25:c0:3b:df:04:6a:35:b9:04:29:fb:
48:74:12:6b:31:09:7f:e2:92:52:0d:70:9a:e9:c6:43:b7:a6:
e6:0b:68:19:8f:59:d2:ad:0a:46:c0:ef:b8:df:21:7a:f3:a4:
1f:e6:62:da:a4:45:e0:0f:db:d4:e4:69:c9:22:15:f7:cf:d5:
07:44:df:fd:00:89:4f:a9:54:32:22:9f:90:ba:4d:b7:ee:ec:
d9:71:32:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolwU3o4Zy3hram51KQ55UOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOTU1NzI1MDU0M2U0NDc2YWY4OGM0NjEyZDRhODk1MzEz
MTNiNTcwHhcNMjUxMDI3MTMwMDE2WhcNMjUxMDI4MTMwMDE2WjAzMTEwLwYDVQQD
EyhmMTAzYzExY2RjOTFhZmVjOWY2Zjk4NzY4NjZhZGQzNzBjNTI4Nzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonMBbefmI9KwUI+5XhzkmzWYSKxx
mxyRbzVlLfUbhAUXpSdHAkySeQ4Vr07UwWsUYaTeQOlLeyN17nNU6YFqIeDFwCeK
PpXBBGfJ8FQmEbAWQMXUxZNKbHzNr8TqY99yWFEvDuIA73QksTPJNtvWwqy3gGzd
rPvIDtLIFKoSXLIaqrWusCT6gNwBAGk/vR2C19tRH6E7rYM969pXd8ZEdJSa8PTr
+3Qt/ARM6/PCI3NYiF5kaHsERlgGD1lEXV147hc0wDVUgnN0Q8MRytq2Aw5JVoAd
l9tgHPqv3buo/zc3z5mlCQ8+XZsAp3igkUM7TUySZOle+JPKftk3IsdUzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEDwRzcka/sn2+YdoZq3TcMUod1MB8GA1UdIwQY
MBaAFOOVVyUFQ+RHaviMRhLUqJUxMTtXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUt
MjA2OTUxOTNhYzA3LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUtMjA2OTUxOTNhYzA3
LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyjPi029
fnAzIAS5gOORIDHeQOKePQAcBw9FgvXMhv3Yt7yVH8Y1kUQEY2AGTbsaMW0YBzYF
2zZB/NwyPFsNs/cvjoUO6+tjiGj4JiNdhp0AQ4gPduUOjt+ognzBSO44V4UNJN3m
EP2nUSv6n2tz0ZzzTBB8FFekSWu3ZbPIO7E1UaAFN2STR6jsD1D8y4ugU4wo6uOu
i1mIlWLGzqlOR5ag8UW2/RFtkyXAO98EajW5BCn7SHQSazEJf+KSUg1wmunGQ7em
5gtoGY9Z0q0KRsDvuN8hevOkH+Zi2qRF4A/b1ORpySIV98/VB0Tf/QCJT6lUMiKf
kLpNt+7s2XEyug==
-----END CERTIFICATE-----
Generated at Mon Oct 27 23:10:25 2025 by rpki-client