Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
File: 45WDhONGlWoAZjpWVQe5bxTMCXM.mft (raw, json)
Hash identifier: u5kvWPEI5HHRm7eQpPHnEeovkRSrEdDO6Q10SLM8Auo=
Subject key identifier: 3F:E1:0C:91:87:B3:C8:5B:A4:B0:27:3E:5F:49:8A:D5:28:DB:75:66
Authority key identifier: E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73
Certificate issuer: /CN=e3958384e346956a00663a565507b96f14cc0973
Certificate serial: 019A71130F8CD1F945D63A066D6E584492E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
Manifest number: 27
Signing time: Tue 11 Nov 2025 04:01:05 +0000
Manifest this update: Tue 11 Nov 2025 04:01:05 +0000
Manifest next update: Wed 12 Nov 2025 04:01:05 +0000
Files and hashes: 1: 45WDhONGlWoAZjpWVQe5bxTMCXM.crl (hash: 1blImlK7SOqIkNARnQimgD8V35rd6HEypvwgnWSsMOM=)
2: 7DaGcZguX6rZmp70WlL3jIsnpbM.roa (hash: KsS60nPCDyv8jj+cofaFoNq94Rj7AglBtrtXHDvUhUs=)
3: qR79y5L3S13clIm_R-nn98Pfxqc.roa (hash: nXOF1VQroYBhfSkisMJXwE5JIc0371e5TucciqAwtz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:0f:8c:d1:f9:45:d6:3a:06:6d:6e:58:44:92:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3958384e346956a00663a565507b96f14cc0973
Validity
Not Before: Nov 11 04:01:05 2025 GMT
Not After : Nov 12 04:01:05 2025 GMT
Subject: CN=3fe10c9187b3c85ba4b0273e5f498ad528db7566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:33:ce:dd:21:ea:e0:ac:76:93:7e:6e:f7:
93:fd:a9:5c:db:d8:d6:29:e3:c5:ed:d6:95:de:08:
76:f8:39:ce:5d:7c:85:b9:06:1a:d3:2d:bb:59:f9:
16:01:99:81:1e:5b:4d:56:9a:95:63:41:0a:55:b6:
37:9c:85:d2:3a:19:cd:9a:bb:8b:d1:43:99:1c:e6:
52:c4:d7:65:d0:a0:70:be:33:65:92:19:97:c5:18:
88:7e:2d:bd:b7:4d:88:8e:25:9b:57:34:21:03:81:
0f:ae:e7:c4:f1:71:70:97:54:d3:6b:48:94:95:b2:
6e:8a:98:2c:96:c4:93:03:ed:1e:2b:f9:7b:09:29:
7c:f6:16:0a:fb:6d:c6:d9:ef:97:22:16:b8:66:f6:
59:99:17:08:38:ff:a6:56:7f:a3:40:13:f9:fa:9e:
cb:98:28:4b:1a:f9:83:01:e8:75:f8:54:15:ec:08:
4a:2e:95:41:3f:b9:3c:63:ba:64:3a:01:3d:ac:75:
45:e3:1f:77:65:1a:85:9c:fe:f6:6a:0d:f9:7b:ab:
24:dc:e7:5d:b3:5b:1e:90:b5:a5:95:4d:d0:ff:39:
e7:fa:05:58:1c:1e:f4:af:97:82:d7:88:f5:88:0c:
b9:ea:75:e3:9c:03:94:55:22:e1:f8:f2:ef:33:3a:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E1:0C:91:87:B3:C8:5B:A4:B0:27:3E:5F:49:8A:D5:28:DB:75:66
X509v3 Authority Key Identifier:
keyid:E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ab:0c:e8:a3:24:34:f5:91:38:f0:2c:76:0d:10:59:65:db:
1a:44:99:16:36:0a:7e:48:7c:2e:f8:c0:00:3e:6c:8e:55:51:
71:8f:ba:0b:27:6d:a5:e3:87:0d:a7:da:4f:a2:bf:ee:33:c8:
7e:d0:01:cf:36:27:5b:32:4c:f1:a5:2b:4e:6c:96:27:a6:ec:
2d:93:28:2c:5a:80:24:81:83:5a:88:f6:98:c4:13:66:3e:d1:
2f:09:ee:18:9d:a1:5c:8d:11:f4:79:85:a3:3a:10:ae:16:c2:
e4:ec:b1:ab:6f:3b:93:20:4f:77:05:2d:0b:81:0e:44:fb:8e:
c5:ca:0b:22:ae:4c:e6:d2:b0:b3:76:61:c9:21:54:74:3c:73:
5d:53:38:d8:f5:39:fb:28:65:7f:52:d6:0c:d6:c9:1e:41:2c:
69:e3:2c:78:6e:1e:4c:0b:3c:d8:26:4b:af:17:aa:ea:3a:43:
71:3d:e7:97:83:70:8c:5e:34:64:a4:cf:38:72:d7:04:e7:46:
32:4f:7b:db:6b:57:b2:1d:aa:90:ff:99:54:4d:40:62:6c:4b:
0a:55:39:bd:3b:55:6d:a3:48:22:e2:92:61:0d:b8:3f:a2:89:
27:f9:6b:53:a2:59:9a:ce:b5:70:e8:88:7b:5b:e8:2a:dd:6d:
b4:f9:2d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:59 2025 by rpki-client