Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
File: Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft (raw, json)
Hash identifier: fPsH9AYfSNBeVAWLBO20V0elyg3v0Gpo9gv0CIG/uJo=
Subject key identifier: 52:14:2D:FB:B0:1C:FA:27:21:10:70:D9:9C:27:03:62:BB:9F:E6:9E
Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Certificate issuer: /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Certificate serial: 01991CF8799CA4573E10A0B61D13355FAAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
Manifest number: 058A
Signing time: Sat 06 Sep 2025 03:01:10 +0000
Manifest this update: Sat 06 Sep 2025 03:01:10 +0000
Manifest next update: Sun 07 Sep 2025 03:01:10 +0000
Files and hashes: 1: 2YO9OCUj-5UMjSkLus1_jFZEY5Y.roa (hash: 3SGs0MVjTdEO4OSsTOD1CnMaU0p7/avF9ZQ4altFHsA=)
2: 5Gb6hc8c6e_T0jp-7tOhv1aSnbs.roa (hash: GMcY+Vcxtv+yuahYv7nXQxaJEt+vN0M89l4WY2L+IN0=)
3: Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl (hash: yVBa/JVlTKvcN+9/vSx0i6DdEpMqTbRScvcqu3Xv9lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1c:f8:79:9c:a4:57:3e:10:a0:b6:1d:13:35:5f:aa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Validity
Not Before: Sep 6 03:01:10 2025 GMT
Not After : Sep 7 03:01:10 2025 GMT
Subject: CN=52142dfbb01cfa27211070d99c270362bb9fe69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:d9:1a:12:d7:98:f9:01:4b:06:ff:0b:da:
7b:20:16:b8:f4:bb:7c:7c:8a:75:db:92:97:94:30:
00:fe:8f:30:59:ba:28:8b:75:b1:51:8d:34:c3:82:
e0:51:50:d3:43:4c:ab:90:e9:08:90:d9:dc:43:b5:
87:6c:b5:d4:29:2d:45:b1:2a:85:1d:5f:0a:7c:21:
8c:24:24:70:de:3f:75:75:8a:14:48:ee:a2:87:81:
92:a9:3a:a6:52:7e:db:f9:f4:b8:3a:9c:16:d7:1e:
96:74:27:7f:10:83:1c:76:3e:da:17:1a:e8:cb:66:
8a:ec:0e:34:55:43:18:44:1a:37:6e:3f:40:57:f9:
04:7f:84:b5:36:5f:bf:13:01:b3:37:ae:c2:ef:fb:
97:0b:2f:9e:58:37:58:7d:e5:ac:a9:13:ef:e1:dc:
e2:69:cb:11:0b:42:5b:72:47:10:62:3d:6c:53:34:
7d:d5:db:62:aa:d5:61:0f:8a:98:d0:02:8b:3a:72:
32:6f:c7:81:3d:07:0e:9e:9f:b3:61:74:b2:22:82:
d7:a6:d8:e1:c7:98:13:36:0c:ff:3c:af:4d:7d:bd:
a8:86:bc:79:64:4a:e3:67:2f:7c:cc:34:d7:a0:fb:
82:95:ec:12:57:33:ab:2a:e5:a3:34:b6:f8:61:65:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:14:2D:FB:B0:1C:FA:27:21:10:70:D9:9C:27:03:62:BB:9F:E6:9E
X509v3 Authority Key Identifier:
keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ec:14:1e:4c:b9:2d:39:dd:79:ba:c8:00:ba:c8:a6:0a:a1:
7e:c5:87:cd:dc:d6:6c:7c:1f:cd:ab:a7:35:dc:24:7a:04:f9:
37:58:0a:7b:82:72:02:38:52:4b:7c:8a:5f:0a:f7:c7:f3:91:
2a:1f:f6:92:e4:e8:53:40:dd:f2:ff:1f:20:9f:17:6e:24:cf:
dd:4a:53:af:92:c8:d1:d5:3b:18:2f:f9:f2:94:c7:86:a4:b2:
cd:a0:03:51:e0:a1:ea:01:41:53:a3:7b:e0:8f:aa:16:08:a7:
f9:14:29:9e:1e:b7:1e:71:f4:4a:fb:24:78:05:37:32:ef:d1:
e6:de:9b:58:33:ef:3a:50:ec:39:11:12:90:9e:fe:e1:e1:5d:
f8:de:d6:f1:16:be:1f:4c:91:4c:97:ca:d2:05:eb:a3:08:41:
ee:0e:f6:b8:e4:37:b1:22:f3:77:3c:13:c4:a5:f5:19:5b:ee:
d7:29:f2:cf:85:61:c5:15:61:4b:14:75:24:a3:90:b1:48:eb:
1e:f2:4f:5d:14:ff:8d:3b:7b:7f:c9:96:bc:24:f8:83:fd:d6:
b2:f3:f8:c2:c2:6b:8d:f0:90:15:d1:70:dd:6b:7a:7a:51:3d:
d9:bd:44:ad:9b:b8:88:a9:72:eb:dc:70:a9:b9:6e:8e:9a:a5:
5c:ac:29:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:06:32 2025 by rpki-client