Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
File: 45VXJQVD5Edq-IxGEtSolTExO1c.mft (raw, json)
Hash identifier: OvXAaZ1yz+x1k/dvNVzUH98AWcoUKq4x6UZwb1zDdUQ=
Subject key identifier: 28:CA:81:B6:68:49:53:0F:7D:56:4A:A4:25:64:C9:39:21:C3:EA:FF
Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
Certificate issuer: /CN=e39557250543e4476af88c4612d4a89531313b57
Certificate serial: 01993501B9B5DE229C547492CBF89C98FDE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
Manifest number: 021C
Signing time: Wed 10 Sep 2025 19:02:09 +0000
Manifest this update: Wed 10 Sep 2025 19:02:09 +0000
Manifest next update: Thu 11 Sep 2025 19:02:09 +0000
Files and hashes: 1: 45VXJQVD5Edq-IxGEtSolTExO1c.crl (hash: 3yxrrSNBjC59qnZFKUAfrnmxg0AQZfUPbKmPl5oIZbM=)
2: vt4FgfPRrWl7Z_yLjoZZHEYX9X8.roa (hash: YsuZLkluKAbvOnVqbYvnKkP5bLLApSYx0tCzxSCaii4=)
3: zgHXXKhV6x08Iidi9kP_MDBdZ8U.roa (hash: taGLV+d4sUR0Mcx4A09Hc66ht4Rh+KLaRG3MKoCgLM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:b9:b5:de:22:9c:54:74:92:cb:f8:9c:98:fd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39557250543e4476af88c4612d4a89531313b57
Validity
Not Before: Sep 10 19:02:09 2025 GMT
Not After : Sep 11 19:02:09 2025 GMT
Subject: CN=28ca81b66849530f7d564aa42564c93921c3eaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:b0:bc:1a:48:24:4e:13:e4:f8:26:1f:19:
6b:8f:88:4a:ef:72:86:c6:91:e6:41:13:b8:c8:61:
85:ae:9a:d4:79:23:f0:f1:17:43:8c:ad:12:25:09:
54:3d:2e:dd:4e:18:01:45:fe:d8:3b:99:33:ba:5c:
67:7a:7d:43:75:90:5d:74:b2:42:0f:7f:ce:ad:9f:
d4:0e:2d:a8:90:88:2f:74:da:44:62:e7:e3:f3:e8:
d0:6d:29:15:51:4b:00:0e:37:9b:12:86:a3:91:96:
5b:9b:8b:46:77:78:ba:27:0e:2c:10:1c:2a:54:45:
9c:72:73:ba:8e:ac:1e:e7:b8:ad:f8:fc:ac:82:d1:
3b:2a:63:98:e6:5a:c7:57:34:5e:bb:fc:55:47:18:
08:7f:f9:10:72:5d:32:dd:7e:58:5c:94:7a:c6:8e:
81:22:ca:9a:71:88:4f:c8:b7:a1:6e:06:cd:c1:34:
0f:1f:e0:0e:08:e6:45:ce:60:9b:7e:1c:b5:dd:25:
2e:48:2c:79:c8:70:36:44:30:db:42:3d:3d:6d:d0:
d8:2a:4b:b8:b8:9f:57:23:57:63:35:59:8f:b6:91:
15:e8:44:86:6b:c6:e1:5b:be:e3:be:50:d2:66:bf:
67:40:76:01:3f:79:33:c4:87:53:95:9e:3c:c4:5f:
26:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CA:81:B6:68:49:53:0F:7D:56:4A:A4:25:64:C9:39:21:C3:EA:FF
X509v3 Authority Key Identifier:
keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:71:9b:39:43:5e:f9:f8:ef:e1:f7:5b:09:4e:df:b3:66:18:
92:8d:4d:57:5a:9d:fd:b3:d3:5c:2d:43:c5:a4:bf:71:0d:b8:
ee:a1:11:ff:76:c2:f5:7a:f9:f8:98:72:af:f5:07:1b:d0:94:
26:ee:ab:07:ca:a0:4e:aa:36:13:08:e6:7c:61:04:3d:64:9c:
c7:a3:c6:0f:6f:04:cf:4f:60:c8:5e:c3:c1:b1:22:4a:7b:24:
e3:fb:a4:f4:16:5d:88:fe:d0:12:b4:45:44:ef:38:c7:8c:21:
2f:27:01:d3:f4:ff:11:38:4f:e4:3e:e8:93:05:0b:44:50:76:
b1:f6:e5:47:64:cc:43:68:82:21:4d:7d:3b:7e:c4:e1:51:71:
11:81:2e:85:a3:fd:15:74:2e:10:8d:07:0f:32:4b:80:d4:61:
30:db:89:b1:ef:d3:06:64:9a:54:eb:e4:de:99:d3:85:24:f5:
07:48:42:46:5b:88:45:a5:3e:5a:15:8d:66:09:d0:eb:df:25:
a1:6b:b3:19:29:17:d1:56:dd:c4:72:df:7a:3c:60:4b:c6:4c:
76:99:80:39:2a:b3:29:2d:06:43:a9:c0:55:4d:db:55:8b:7e:
32:f0:c8:e5:20:78:0c:ef:65:86:3e:47:54:61:95:96:90:d9:
17:25:9b:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1Abm13iKcVHSSy/icmP3mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOTU1NzI1MDU0M2U0NDc2YWY4OGM0NjEyZDRhODk1MzEz
MTNiNTcwHhcNMjUwOTEwMTkwMjA5WhcNMjUwOTExMTkwMjA5WjAzMTEwLwYDVQQD
EygyOGNhODFiNjY4NDk1MzBmN2Q1NjRhYTQyNTY0YzkzOTIxYzNlYWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIqwvBpIJE4T5PgmHxlrj4hK73KG
xpHmQRO4yGGFrprUeSPw8RdDjK0SJQlUPS7dThgBRf7YO5kzulxnen1DdZBddLJC
D3/OrZ/UDi2okIgvdNpEYufj8+jQbSkVUUsADjebEoajkZZbm4tGd3i6Jw4sEBwq
VEWccnO6jqwe57it+PysgtE7KmOY5lrHVzReu/xVRxgIf/kQcl0y3X5YXJR6xo6B
IsqacYhPyLehbgbNwTQPH+AOCOZFzmCbfhy13SUuSCx5yHA2RDDbQj09bdDYKku4
uJ9XI1djNVmPtpEV6ESGa8bhW77jvlDSZr9nQHYBP3kzxIdTlZ48xF8mkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjKgbZoSVMPfVZKpCVkyTkhw+r/MB8GA1UdIwQY
MBaAFOOVVyUFQ+RHaviMRhLUqJUxMTtXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUt
MjA2OTUxOTNhYzA3LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUtMjA2OTUxOTNhYzA3
LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHGbOUNe
+fjv4fdbCU7fs2YYko1NV1qd/bPTXC1DxaS/cQ247qER/3bC9Xr5+Jhyr/UHG9CU
Ju6rB8qgTqo2EwjmfGEEPWScx6PGD28Ez09gyF7DwbEiSnsk4/uk9BZdiP7QErRF
RO84x4whLycB0/T/EThP5D7okwULRFB2sfblR2TMQ2iCIU19O37E4VFxEYEuhaP9
FXQuEI0HDzJLgNRhMNuJse/TBmSaVOvk3pnThST1B0hCRluIRaU+WhWNZgnQ698l
oWuzGSkX0VbdxHLfejxgS8ZMdpmAOSqzKS0GQ6nAVU3bVYt+MvDI5SB4DO9lhj5H
VGGVlpDZFyWb6g==
-----END CERTIFICATE-----
Generated at Thu Sep 11 01:29:05 2025 by rpki-client